If you use Christian’s class, then your users will not have to do anything. Your app can create the tunnel and connect to the database. Unless Xojo’s hosting limits SSH connections to defined IP addresses (which I do not know). Security of this method is another topic.