Policy Server Guides › Policy Server Configuration Guide › Enterprise Policy Management › Use Cases for Defining Application Security Policies Using Application Objects › Application Security Policies with User Mapping and Named Expressions › Protect the Online Shopping Application

Protect the Online Shopping Application

In this use case, you want to establish access privileges with specific conditions for the store's Web-based shopping application.

To protect the web-based shopping application

1. Click Policies, Applications.
2. Click Create Applications

   The Create Application pane opens.

3. Click the General tab.
4. Enter values for the fields in the General group box. For this use case, the following data is specified:

   Name

   Online Catalog

   Description

   Identifies the clothing stores Web-based shopping application

5. Enter values for the fields in the Details group box. For this use case, the following data is specified:

   Agent Type

   Web Agent

   Agent

   Web Retail Agent

   Resource Filter

   /webcatalog

   Default Resource Protection

   Protected

   Authentication Scheme

   Basic

   Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

6. Specify the user directory associated with the resources being protected. This directory is where SiteMinder will locate users who meet the role criteria.
   1. Click Add/Remove.
   2. Select IsCustomer from the Available Members box and click the right arrow to place this group in the Selected Members box.

      IsCustomers maps to the users in both directories associated with the clothing store.

   3. Click Submit.

You have now created an application called Online Catalog.