---
title: User Settings to use SSO
slug: kronpam-legacy-ui-reference-guide-3-5-0/user-settings-to-use-sso
description: Learn how to enable and utilize the second password feature for authentication in SQL Proxy with SSO. Activate the Second Password Enabled function in the Portal Functions screen for your user group. Users can then assign their second passwords in the Acc
docTags: 
createdAt: 2022-08-01T17:06:42.000Z
---

The second password definition is required to provide authentication to the SQL Proxy when using SSO.
In the Portal Functions screen, the Second Password Enabled function should be assigned to the user group that will use the SQL Proxy SSO feature.
To activate the second password use:

1. Navigate to** Portal Function **> **Realm Definition**.
2. Fill in the realm name, select the **Second Password Enabled** function group and the user group that will be using the SSO feature for SQL Proxy, and click **Save**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/QbWzwtBJC2p7-qK1Hb4ky_image.png "SSO Second Password Enabled function")

After enabling the second password for a user group, the users in that group can assign their second passwords to their own accounts in the Account Settings screen.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/1w0xigvfWZuj_FSTlGI-l_image.png" size="60" width="537" height="531" caption="Second Password" position="center" showCaption="true"}

:::hint{type="info"}
If SSO is not supported for the target databases in SQL Proxy, the target database Username and Password must be used as the connection user. The Second password definition should not be defined for the connection user
:::