...
| Global policy | Description |
|---|---|
| Allow Anonymous Access | Select if you are allowing anonymous users to access apps in the App store through the Gateway Endpoint URL without logging in. |
| Skip Creating Proxying Web App | Select if you are configuring an external app (e.g. Salesforce), which does not get routed through the App Manger gateway. |
| Publish Statistics | Select if you are enabling the app to publish usage statistics to WSO2 BAM for viewing and analyzing the statistics. |
| Restrict Visibility | Select if you are restricting the visibility of the app in the App store to a specific role(s). |
| Enable Single Logout | Select if you are enabling the single logout option on the app that you are creating, so that users will be automatically logged out from the app and will be redirected to the given Logout URL. |
Adding resource policies
XACML is a widely used authorization mechanism for Web resources. You You can add XACML-based resource policies to Web apps in WSO2 App Manager. When in this step of creating the Web application , you can define by defining the conditions, which should be included in the policy. Follow the steps below to add a new resource policy condition.
- In the Resource Policies section, click Add New Resource Policy as shown below.
- You can define the following details in the resource policy as shown below.
Resource policy condition Description Resource policy name Enter a name for the new resource policy. Description Enter a description for the new resource policy. Apply Throttling Tier Select the throttling tier. According to the tier you select, you are granted a maximum number of requests to the app. For information on throttling tiers, see Managing Throttling Tiers.
Allow Anonymous Access Select Trueif you want to allow anonymous access on a specific Web app resource.Accessible User Roles To add the user roles, which you want to allow to access a specific Web app resource, type the name of the user role and press the Enter key. For information on defining accessible user roles, see Web Application Resource Authorization. XACML Policies Select a XACML policy out of the list of the defined policies.
- Enter a name for the XACML policy condition in the XACML policy editor (entitlement policy editor) as shown below.
- XACML is a widely used authorization mechanism for Web resources. You can add XACML-based resource policies to Web apps in WSO2 App Manager.
- Edit the content under the
<Condition>property, or replace the default content template. - Select Share this checkbox if you want to share the policy with others. When a policy is shared, it will be available in the XACML policy list of other new Web applications.
- Click Validate to check the validity of the policy. It checks for syntax errors and verifies whether the condition adheres with XACML policy language specifications.
- Click Save to save the policy condition details, or click Save & Close to save the changes, and close the policy editor. When the policy is saved, it gets listed under XACML policies.
You can edit and delete defined XACML policies using the provided buttons.
Info Only the author of the policy can edit shared policies.
For instructions on step 3 of the process of creating a Web app in App Manager, see Step 3 - Web Application Resources.