---
title: Configuring SSO Token Generation for Oracle and MSSQL Databases
slug: kron-dam-reference-guide-3-8-1/configuring-sso-token-generation-for-oracle-and-mssql-databases
docTags: 
createdAt: 2025-07-16T10:39:33.399Z
---

Follow the steps below for your specific database environment to generate an SSO token:

**For Oracle Databases:**

1. Log in to the Kron PAM GUI.
2. Navigate to the Device Options menu for the relevant Oracle database.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/30lDuCsHs7xyOWUecAvqs_image.png "Device Group Inventory")

- Click the **Connect to Target Database** (green arrow) icon.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/tJNlwfUV-x3uAUTexwLkQ_image.png "Click green arrow to generate password")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Pj6L0HOLNVluv7ryYQw8z_image.png "Generate Password Screen")

- Select the token validity period:
  - 5 minutes
  - 30 minutes
  - 2 hours
  - 24 hours
- Copy the generated password

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/LylGYsD1fWmZMZwx5gbOF_image.png "Token Display Screen")

- Use the token as the password when connecting to Oracle.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/n9ucYt8eQHdBuxBIVNaww_image.png "Connection Using SSO Token")

**For MSSQL Databases:**

MSSQL SSO supports both LDAP and non-LDAP users. LDAP users authenticate to Kron DAM via LDAP and access the MSSQL database through the shared credential assigned to the User Group, while non-LDAP users connect to the database directly using their database credentials.

**Non-LDAP:**

- Go to Users and assign this user to the relevant user group.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/xT3M-bMAsWkQJZPXgtbQa_image.png "User Group Configuration")

- Once users are properly assigned to the realm and the configuration is complete, they can connect to the MSSQL database via SSO.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6AA9s_yqlJ63ZKeLT8Hpn_image.png "Connection Using Shared Credential")