---
title: Log in to Remote Application with an SAPM User
slug: kronpam-legacy-ui-reference-guide-3-5-0/log-in-to-remote-application-with-an-sapm-user
description: This document provides a comprehensive guide on storing and utilizing user accounts in the SAPM system for remote application login. It outlines the importance of specifying the IP address of the target device to ensure a secure match with the device's IP
docTags: 
createdAt: 2022-07-27T16:12:55.000Z
---

A user account can also be kept in the SAPM, as illustrated in the figure below. When configuring the login to a remote application with a SAPM user, the definition of an IP address is mandatory and can be selected from a combo box, meaning it has to be selected from among the devices already added to Kron PAM. The IP address is the target device’s IP address and should match the **Device IP** configured in the Auto login screen in order for the SAPM account to be seen on the auto-login screen to the target application. To use this account for remote app auto login, assign this credential to the session account. For more information, see [Assigned Credentials](docId\:FOUJnyjjNiaYn-dwQYoZZ)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/mPLSr1QqOgzr71Lz3dyQr_image.png "SAPM Configuration Parameters for Remote Application Login")

Sometimes more than one device per user is kept in SAPM. In such cases, the user to be used while logging in to the remote application should be identified. The following figure shows the SAPM account configuration for remote application login.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/EjcWZ2_4ENZJz3y0_flSL_image.png" size="80" width="554" height="354" caption="SAPM Configuration Parameters for Remote Application Login" position="center" showCaption="true"}

As mentioned, SAPM accounts also can be assigned to session users to auto-log in to remote apps. SAPM account strategies are important for user listing when using the** Allow Assigned Credentials **option. The diagram below shows how remote app user listing is affected when a SAPM account is assigned to a session user.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/qdSGtQanBX5BycDui9GXD_image.png)

The **always.show\.accounts.in.auto.login** parameter shown in the diagram above is an SAPM configuration parameter. For more information, see [Adding SAPM Configurations](docId\:CgL_k0PuNendWhRfKzBO3) 


The **remote.app.%s.ip.independent.account.show\.in.auto.login** parameter is a configuration parameter on the Remote App auto login page. This parameter can be selected when an assigned credential is used. According to the flow in the diagram above, if the **always.show\.accounts.in.auto.login** parameter is set as true and we check this parameter, the account is shown on the Remote App Auto login user list without checking the IP match.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/cRn6KoqqnSox_VjhNv1K-_image.png" size="80" width="635" height="474" caption="Use of the Assigned Credentials for SAPM Accounts on Remote App" position="center" showCaption="true"}