Details of the second step in the process of creating a Web application in App Manager are shown below.
Adding global policies
You can enable the following global policies when adding a Web app in the App Publisher.
The above global policies are described below.
| Global policy | Description |
|---|---|
| Allow Anonymous Access | Select if you are allowing anonymous users to access apps in the App store through the Gateway Endpoint URL without logging in. |
| Skip Creating Proxying Web App | Select if you are configuring an external app (e.g. Salesforce), which does not get routed through the App Manger gateway. |
| Publish Statistics | Select if you are enabling the app to publish usage statistics to WSO2 BAM for viewing and analyzing the statistics. |
| Restrict Visibility | Select if you are restricting the visibility of the app in the App store to a specific role(s). |
| Enable Single Logout | Select if you are enabling the single logout option on the app that you are creating, so that users will be automatically logged out from the app and will be redirected to the given Logout URL. |
Adding resource policies
You can add XACML-based resource policies XACML is a widely used authorization mechanism for Web resources. When creating the Web application, you can define the conditions, which should be included in the policy. Follow the steps below to add a new policy condition.
- In the XACML Policies section, click Add New Policy as shown below.
- Enter a name for the XACML policy condition in the XACML policy editor (entitlement policy editor) as shown below.
- Edit the content under the
<Condition>property, or replace the default content template. - Select Share this checkbox if you want to share the policy with others. When a policy is shared, it will be available in the XACML policy list of other new Web applications.
- Click Validate to check the validity of the policy. It checks for syntax errors and verifies whether the condition adheres with XACML policy language specifications.
- Click Save to save the policy condition details, or click Save & Close to save the changes, and close the policy editor. When the policy is saved, it gets listed under XACML policies.
You can edit and delete defined XACML policies using the provided buttons.
Only the author of the policy can edit shared policies.
For instructions on step 3 of the process of creating a Web app in App Manager, see Step 3 - Web Application Resources.