---
title: Device Group Configuration in SSO
slug: kronpam-reference-guide-3-6-0/device-group-configuration-in-sso
docTags: 
createdAt: 2024-12-09T07:46:50.050Z
---

To utilize the SSO feature effectively, the **Global Username** or **Assigned Credential** settings must be configured. When a Kron PAM user with privileged access (e.g., System Admin, SYSTEM) connects to databases, they can do so without needing the privileged user’s password.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/MXKgmyzbbgvwVp27wE17a_image.png "Direct Credentials in Target Device Group Edit Screen")

Always verify that the database user specified in the **Direct Credential** configuration has the necessary permissions for the intended operations.