allow SSO for database connections