---
title: HTTP Proxy Assigned Credential Support
slug: kronpam-reference-guide-3-9-0/http-proxy-assigned-credential-support
description: Learn how to configure auto-login with assigned credentials and SAPM accounts using HTTP Proxy in this document. Discover the supported SAPM config strategies and device ID matching requirements for finding available SAPM credentials. Find out how to conf
docTags: 
createdAt: 2022-07-28T11:51:41.000Z
---

HTTP Proxy supports auto-login with assigned credentials and Vault accounts. 


The Vault config strategy must be LDAP, MS\_AD, or WebApp; or the Vault account device ID should match the page’s device ID to find the available Vault credentials.


To use stored credentials when configuring auto-login, the assigned credential definition must already be set. The **Add** **Assigned Credential to Selection** property key must be set at the device group level to make credential selection possible.

Additionally, the** approvalRequiredForAutoLogin **property can be set as true at the Device Group level. This parameter allows for checking approvals only during the auto-login operation. If the **approvalRequiredForConnection** property is also defined then, approval will be asked during the initial page access.


See [Auto Login Configuration](docId\:wVE_rxcB5Q1QZ0NDdcu6j) for configuration details

::Image[
]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/cEoQB-5E9von01XXu_8ap_image.png" size="70" width="611" height="807" position="center" caption="Mapping Assigned Credential to Device Group" showCaption="true"}

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6byeUFDrjoaSbQrn5oLpE_image.png "Vault Accounts")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/PXrSOvCYk2G90WfOX6f-S_image.png "Auto-Login Attempt")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/bURzeRWxfW3y4h7azxiuq_image.png "Auto-Login User Selection")

In the Assigned Credential screen, a reservation is made for the specific date/time and the **HTTP Proxy** will work within these limitations. The assigned credential suitable for the date/time you are trying to log in will be listed on the screen. If there is no record suitable for the date/time defined for the assigned credential or if the definition has expired, it will not be listed on the screen.