Policy Server Guides › Policy Server Configuration Guide › Enterprise Policy Management › EPM Use Cases for Protecting Applications › Application Security Policies with User Mapping and Named Expressions › Protect the Online Shopping Application

Protect the Online Shopping Application

In this use case, you want to establish access privileges with specific conditions for the store's Web-based shopping application.

To protect the web-based shopping application

1. Click Policies, Applications.
2. Click Create Applications

   The Create Application pane opens.

3. Click the General tab.
4. Enter values for the fields in the General group box. For this use case, the following data is specified:
   • Name

     Online Catalog

   • Description

     Identifies the clothing stores Web-based shopping application

5. Enter values for the fields in the Details group box. For this use case, the following data is specified:
   • Agent Type

     Web Agent

   • Agent

     Web Retail Agent

   • Resource Filter

     /webcatalog

   • Default Resource Protection

     Protected

   • Authentication Scheme

     Basic

   Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

6. Specify the user directory associated with the resources being protected. This directory is where SiteMinder will locate users who meet the role criteria.
   1. Click Add/Remove.
   2. Select IsCustomer from the Available Members box and click the right arrow to place this group in the Selected Members box.

      IsCustomers maps to the users in both directories associated with the clothing store.

   3. Click Submit.

You have now created an application called Online Catalog.