---
title: Device Group Configuration in SSO
slug: kronpam-reference-guide-3-9-0/device-group-configuration-in-sso
docTags: 
createdAt: 2025-01-14T09:47:42.209Z
---

To utilize the SSO feature effectively, the** Global Username** or** Assigned Credential **settings must be configured. When a Kron DAM user with privileged access (e.g., System Admin, SYSTEM) connects to databases, they can do so without needing the privileged user’s password.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ByidKlHwCpGTe3UdbcEfA_.blob "Direct Credentials in Target Device Group Edit Screen ")

Always verify that the database user specified in the **Direct Credential** configuration has the necessary permissions for the intended operations. 

For Global Username usage direct credential must be entered.

For SSO configurations based on **Assigned Credential**, the **“Add Assigned Credential to Credential Selection”** option under the **Device Group** configuration must be enabled. Additionally Assigned Credential settings should be done in accordance with the [Assigned Credentials](docId\:v1hEt-ROhvuAAjbMaVrFn) guide.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/pftW9mG5xVtULwx__yRqO_image.png "“Add Assigned Credential to User Selection” Toggle Enabled")