You need a dedicated API user account that is not set up for MFA. Alternatively, if you log in with your credentials through the application and complete the MFA cycle, your authentication should last for several hours. You can then make the login call from Postman for kronos (https://hkrtrainings.com/what-is-kronos-workforce) from the same machine and it should work.