---
title: SFTP Proxy Assigned Credential & User Session Usage
slug: kronpam-reference-guide-3-9-0/sftp-proxy-assigned-credential-and-user-session-usage
description: This document provides detailed instructions on how to use the Assigned Credential and Session User login options for SFTP Proxy and other proxies. It highlights the differences in using these credentials for SFTP due to technical limitations, with no pop
docTags: 
createdAt: 2022-12-02T10:40:07.000Z
---

The Assigned Credential and Session User login options are available for SFTP Proxy as well as other proxies.&#x20;

The method of usage of these stored credentials differs from other proxies due to SFTP's technical limitations. Therefore, there will be neither pop-up nor redirection of the static page which contains the username part of the credentials.

To use such credentials, they must be created as described in the [Assigned Credentials](docId\:v1hEt-ROhvuAAjbMaVrFn) and [Session User (LDAP/AD User) Connection](docId\:zGR92wJAc4aKhjMrEIkO7) sections.

After the relevant definitions are made, when more than one credential is assigned to the target device, the local SFTP client should list the assigned credentials (see images below).

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/aGm1PI-qpiQmX5XpAoXci_image.png)



![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/7oGxGScy-wmPVMjX_x_ub_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/0VY3uPjZhxPaBdOT86tHB_image.png)

To list only the accounts matching the relevant domain when listing users from the Vault before the SFTP session, the following steps are necessary:

1. Navigate to **Secrets** > **Configuration**
2. Choose **Active Directory&#x20;**> **Miscellaneous&#x20;**
3. Open the **Connection > Fill LDAP&#x20;**&#x62;ase DN according to the domain.
4. Set **Show accounts in auto login options only if domains match**
5. Navigate to **Devices > Inventory > Related Device > Custom Properties**
6. **Add&#x20;**&#x61;uth.domain parameter key with LDAP domain name

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/USx-GWdKu1klSaQOvTN1Y_image.png)

