---
title: Session User (LDAP/AD User) Connection
slug: kronpam-reference-guide-3-9-0/session-user-ldapad-user-connection
description: Learn how to integrate target systems and Kron PAM with LDAP/AD to allow users to login using their LDAP/AD credentials. Discover how Kron PAM can login as an LDAP user if no credentials are configured for the device group. Find out how to select users to
docTags: 
createdAt: 2022-07-27T12:24:30.000Z
---

If both the target systems and Kron PAM are integrated with LDAP/AD, users can log in to target systems with their LDAP/AD credentials. This feature can also be used when the username and password of a Kron PAM user is configured as an account with the same username and password in the target system. This user is referred to as the Session User.


If there are no credentials configured for the device group (such as** Manual Login**,** Direct Credential Username/Password **a.k.a.** Global Username**, **Vault**, or** Assigned Credentials**), Kron PAM logs into the target device as an LDAP user. If any of the credential methods mentioned above are configured, Kron PAM will establish the connection with the configured method.

Kron PAM allows the selection of the authenticated user that will be able to connect to the target devices ([Multiple User Selection in SSH Proxy](docId:7s4sVAcdbYlHpYwVYgbbt)). Even if any of the methods mentioned above is configured for the connection, a Session User can be added as a choice.


If the target device requires FQDN addresses, the following configuration is required in addition to the session user login being enabled under Additional Credentials:

1. Navigate to **Devices **> **Device Groups**.
2. Click the device group and select the** Properties** option.
3. Click the **Edit** and **Next** buttons.
4. Select the **Custom Properties**.
5. Create the **useEmailAsUsername** property with its value set as** true**.
6. **Save.**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/s1tvE3KfpaGT4KersaZxG_image.png" size="92" width="772" height="985" position="center" caption="Device Group Properties Configuration to Use Domain User Credentials to Log In with FQDN" showCaption="true"}