app
A feature that allows users to access the work system by clicking on the app, creating the app and setting conditional policies.
Easy app creation is possible using templates, and SSO functionality for various SaaS apps such as Microsoft 365, Kintone, and Box is also supported through SAML SSO features.
App List
This is the screen that displays all registered apps.
Displayed Information:
- App Name
- Description
- Representative URL
- Related URL count
- IAP Status
- Last Updated
App Registration
Create an app to access through SHIELDGate. It offers two methods for registration: manual input and using templates.
Select Registration Method
- **[+App Registration]**Click the button.
- Two tabs are displayed on the app registration screen:
- Manual Input(Default Selection): Create an app by entering all information manually.
- templateCreate an app using the template provided by SOFTCAMP
Manual Input Method
Enter the following information in the manual input tab:
Required input fields
Name
- Enter a unique name that does not duplicate other apps.
Representative URL
- Enter the main business system URL to access through SHIELDGate.
- http:// orhttps://를Please make sure to include it.
Optional input items
Related URL
- It is used when you want to restrict the domains that can be accessed from the representative URL while allowing specific URLs.
- Example: If the representative URL is the company intranet, and access to external sites is blocked, but only specific partner sites or essential work sites are allowed.
How to Add Related URLs:
- Direct Input: After entering the [name] and [URL] information of the related URL,**[+]**Add by clicking the button
- URL Selection: **[Select URL]Click the button → Search for the list of URLs provided by SOFTCAMP in the search box and select →[Selection]**Button Click
- The added related URLs will be displayed in the list, and multiple URLs can be added.
- Unnecessary URLs can be removed using the delete button on the right side of each item.
URL Automatic Update Guide
- The URL provided by SOFTCAMP is automatically updated if the URL information changes.
- Manually entered URLs are not automatically updated and must be managed manually by the administrator.
Description
- Enter a description of the app.
App Group
- To manage apps in a group, select an existing group or create a new group.
Using IAP (Identity-Aware Proxy)
- IAP is a security feature that verifies the user's identity to control access to the application.
- You can toggle the application of IAP for the representative URL and each associated URL.
- Enabling IAP will require additional authentication steps when accessing the corresponding URL.
App Icon
- Choose from the default icons or upload a custom image.
- User images can be registered up to a maximum of 8.
- Recommended specifications: 70x60px, JPG/PNG/SVG/ICO format, under 1MB
After entering all the information, click **[Save]** to create the app.
Template Method
By selecting the Template tab, you can utilize various SaaS app templates provided by SOFTCAMP.
Step 1: Select a Template
- A list of templates organized by category will be displayed.
- Each template includes a name, description, representative URL, related URL, and category information.
- Select the desired template.
Step 2: Load Template Information
The information of the selected template is automatically filled in the input fields:
- App Name: Editable
- Description: Editable
- Representative URL: Editable
- Related URLs: URLs included in the template are automatically added.
Step 3: Customizing Information
- You can delete unnecessary related URLs.
- You can search for additional URLs needed for your work and add them or enter them manually.
- You can modify the app name, description, and representative URL.
- Set additional options such as app groups and IAP settings.
Template URL Update Notice
- The associated URLs retrieved from the template are managed by SOFTCAMP, and will be automatically updated if the URL information changes.
- If you do not want automatic updates, delete the URL and manually enter the same address.
Step 4: Save
After completing all settings**[Save]**Click to create an app.
App Modification/Deletion
- Click on the app you want to edit from the app list.
- Modify information on the app modification slide.
- **[Save]**Click to save changes.
- To delete the app**[Delete]**Click the button.
SSO App Registration
Add an app that provides SSO (Single Sign-On) functionality for various SaaS services such as Microsoft 365, Kintone, and Box.
Prerequisites
Service Display Conditions:
Microsoft 365 Services
- The administrator must be logged into SHIELDGate with a Microsoft account.
- The federation setup between SHIELDGate and Microsoft Azure AD must be completed.
- If all the above conditions are met, you can register for Microsoft 365 apps.
Other Services (Kintone, Box, etc.)
- The SAML client for the service must be pre-registered.
- Individual SAML client registration is required for each service.
SSO App Registration Process
- **[SSO App Registration]**Click the button.
- Select the desired service from the SSO service selection dropdown.
- A list of services grouped by category will be displayed.
- Microsoft 365 Category: Outlook, Word, Excel, PowerPoint, OneDrive, Teams, etc.
- Collaboration Tool Category: Kintone, Box, etc.
- Information is automatically configured based on the selected service:
- App Name: The selected service name is entered as the default value and can be modified.
- App Icon: The fixed icon of the selected service is automatically displayed and cannot be changed.
- Enter additional information:
- Description(Optional): Enter a description for the app.
- Group(Optional): Select an app group or create a new group using the [New Group] button.
- **[Save]**Click to complete the SSO app registration.
Domain Unit App Registration Guide
Multiple domains can be connected to a single Microsoft tenant. Separate app registrations are required for each domain.
Example: When a.com and b.com exist within the same tenant.
- Outlook (a.com)
- Outlook (b.com)
- Teams (a.com)
- Teams (b.com)
You can register and manage individual SSO apps for each domain.
SSO App Classification
- In the app list, SSO apps are marked with an "SSO" badge.
- You can distinguish between regular apps and "SSO apps" through the display in the app details.
- The "SSO" badge is displayed on the SSO app in the work system screen of the user page.
Group Management
Add Group
You can systematically manage apps by group.
- **[+Add > Add App Group]**Click.
- Enter the group name.
- **[Check]**Click to create a group.
- You can specify the group created during app registration/modification.
Group Edit/Delete
- Select the checkbox of the group you want to edit/delete from the group list.
- Click the edit/delete button that activates at the top.
- Edit the group name or delete the group.
Related URL Utilization Guide
Purpose of Related URLs
The related URL is used with the 'Site Move' option in conditional policies:
| Site Navigation Settings | Action |
|---|---|
| ON | Free to navigate to all sites |
| OFF | Limit movement to the representative URL and associated URLs. |
Related URL Configuration Scenario
1. Internal system + only specific external sites allowed
- Representative URL: Company Intranet
- Related URLs: Specific external sites needed for work
- Effect: Can only move from the intranet to designated external sites.
2. Domain Restrictions of SaaS Services
- Representative URL: SaaS Main Page
- Related URLs: Subdomains of the SaaS
- Effect: Restricted to moving only within the SaaS service
Template Usage Tips
- The related URLs provided in the template include the main domains necessary for using the service.
- According to the security policy, unnecessary URLs can be deleted to narrow the access scope.
- You can search for and add additional URLs needed for the business process.
Conditional Policy
Set access permissions and usage policies for the created app. For more details,App Conditional PolicyPlease refer to the document.