---
title: User Settings to use SSO
slug: kronpam-reference-guide-3-6-0/user-settings-to-use-sso
docTags: 
createdAt: 2024-12-09T07:45:45.562Z
---

Create a user that will connect to the target database with SSO.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/IuFN4FTneuf8GROaIPEcn_image.png "In this example ssouser will connect to MSSQL with SSO ")

The second password definition is required to authenticate the SQL Proxy when using SSO. In the Portal Functions screen, the Second Password Enabled function should be assigned to the user group using the SQL Proxy SSO feature. 

To activate the second password use:

1. Navigate to **Portal Function > +Add**.
2. Fill in the realm name, select the Second Password Enabled function group and the user group using the SSO feature for SQL Proxy, and click **Save.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/HDDGhOCk4S6xVIPp6TLKH_image.png "SSO Second Password Enabled function")

After enabling the second password for a user group, the users in that group can assign their second passwords to their accounts in the Account Settings screen.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/1f1ePSekEDB3PnICCY181_image.png "User Profile Settings")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/PwGPibvIjKuwhC2vJwmDh_image.png "User Profile Settings")

:::hint{type="info"}
The Second Password expiration parameter should be defined in the System Config Manager. The TTL day parameter defines the maximum use time allowed for the Second Password.

1. Navigate to** Administration** > **System Config Man**.
2. Add the **aioc.second.password.ttl** parameter with a value (in days).
:::