---
title: Device Group Configuration in SSO
slug: kron-dam-reference-guide-3-7-0/device-group-configuration-in-sso
docTags: 
createdAt: 2025-01-14T09:47:42.209Z
---

To utilize the SSO feature effectively, the** Global Username** or** Assigned Credential **settings must be configured. When a Kron PAM user with privileged access (e.g., System Admin, SYSTEM) connects to databases, they can do so without needing the privileged user’s password.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ByidKlHwCpGTe3UdbcEfA_.blob "Direct Credentials in Target Device Group Edit Screen ")

Always verify that the database user specified in the **Direct Credential** configuration has the necessary permissions for the intended operations.