---
title: Configuring SSO Token Generation for Oracle and MSSQL Databases
slug: kronpam-reference-guide-3-9-0/configuring-sso-token-generation-for-oracle-and-mssql-databases
docTags: 
createdAt: 2025-07-16T10:39:33.399Z
---

Follow the steps below for your specific database environment to generate an SSO token. If more than one credential is assigned to your user account for the device, Kron DAM asks you to select one before it completes the connection.

**For Oracle Databases:**

1. Log in to the Kron PAM GUI.
2. Navigate to the Device Options menu for the relevant Oracle database.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/30lDuCsHs7xyOWUecAvqs_image.png "Device Group Inventory")

3. Click the **Connect to Target Database** (green arrow) icon.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/tJNlwfUV-x3uAUTexwLkQ_image.png "Click green arrow to generate password")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Pj6L0HOLNVluv7ryYQw8z_image.png "Generate Password Screen")

4. If more than one credential is assigned to your user account for this device, select one in the **Connect To Target Database** dialog.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/1mAOkQHGlFNz1ydzocDRt_image.png "	Figure - Selecting an assigned credential and password duration")

- Select the token validity period:
  - 5 minutes
  - 30 minutes
  - 2 hours
  - 24 hours
- Copy the generated password

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/LylGYsD1fWmZMZwx5gbOF_image.png "Token Display Screen")

- Use the token as the password when connecting to Oracle.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/n9ucYt8eQHdBuxBIVNaww_image.png "Connection Using SSO Token")

**For MSSQL Databases:**

MSSQL SSO supports both LDAP and non-LDAP users. LDAP users authenticate to Kron DAM via LDAP and access the MSSQL database through the shared credential assigned to the User Group, while non-LDAP users connect to the database directly using their database credentials.

**Non-LDAP:**

- Go to Users and assign this user to the relevant user group.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/xT3M-bMAsWkQJZPXgtbQa_image.png "User Group Configuration")

- Once users are properly assigned to the realm and the configuration is complete, they can connect to the MSSQL database via SSO.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/X_lNsRJykC8qwjoG8DdlS_image.png "Figure – Connection Using Shared Credential")

:::hint{type="info"}
JDBC Driver supports Single Sign-On (SSO) connections for Oracle and Microsoft SQL Server. In addition, SSO can be enabled for PostgreSQL and MySQL through the same configuration approach used for MSSQL. While SQL Proxy only supports SSO for Oracle and MSSQL, JDBC Driver extends SSO connectivity to PostgreSQL and MySQL as well.
:::