app
A feature that allows users to access the work system by clicking on the app, creating the app and setting conditional policies.
You can easily create apps using templates, and the SAML SSO feature also supports SSO functionality for various SaaS apps such as Microsoft 365, Kintone, and Box.
App List
This is a screen that displays all registered apps.
Displayed Information:
- App Name
- Explanation
- Representative URL
- Related URL count
- IAP Status
- Modification Date
App Registration
Create an app to access through SHIELDGate. It offers two methods for registration: manual input and using templates.
Select Registration Method
- **[+App Registration]**Click the button.
- Two tabs are displayed on the app registration screen:
- Manual Input(Basic Selection): Create an app by entering all information manually
- template: Create an app using the template provided by SOFTCAMP
Manual Input Method
Enter the following information in the manual entry tab:
Required input fields
name
- Enter a unique name that does not duplicate other apps.
Representative URL
- Enter the main business system URL to access through SHIELDGate.
- http:// orhttps://를Must include input.
Select input item
Related URL
- It is used when you want to restrict the domains that can be accessed from the representative URL while allowing specific URLs.
- Example: If the representative URL is the company intranet, and access to external sites is blocked, but only specific partner sites or essential work sites are allowed.
How to add related URLs:
- Direct Input: After entering the [name] and [URL] information of the related URL**[+]**Add by clicking the button
- URL Selection: **[Select URL]Click the button → Search for the list of URLs provided by SOFTCAMP in the search box and select →[Selection]**Button Click
- The added related URLs will be displayed in the list, and multiple URLs can be added.
- Unnecessary URLs can be removed using the delete button on the right side of each item.
URL Automatic Update Guide
- The URL provided by SOFTCAMP will be automatically updated if the URL information changes.
- The manually entered URL does not update automatically and must be managed manually by the administrator.
Explanation
- Enter a description of the app.
App Group
- To manage apps as a group, select an existing group or create a new group.
Using IAP (Identity-Aware Proxy)
- IAP is a security feature that verifies the user's identity to control access to the application.
- You can toggle the application of IAP for the representative URL and each associated URL.
- When IAP is enabled, additional authentication procedures will be required when accessing the corresponding URL.
App Icon
- Select from the provided icons or upload a custom image.
- User images can be registered up to a maximum of 8.
- Recommended specifications: 70x60px, JPG/PNG/SVG/ICO format, under 1MB
After entering all the information, click **[Save]** to create the app.
Template Method
By selecting the template tab, you can utilize various SaaS app templates provided by SOFTCAMP.
Step 1: Select a Template
- A list of templates organized by category will be displayed.
- Each template includes a name, description, representative URL, related URL, and category information.
- Select the desired template.
Step 2: Load Template Information
The information of the selected template is automatically filled in the input fields:
- App Name: Editable
- Description: Editable
- Representative URL: Editable
- Related URLs: URLs included in the template are automatically added.
Step 3: Information Customization
- You can delete unnecessary related URLs.
- You can search for additional URLs needed for work and add them or enter them manually.
- You can modify the app name, description, and representative URL.
- Set additional options such as app groups, IAP settings, etc.
Template URL Update Notice
- The associated URL taken from the template is managed by SOFTCAMP, and will be automatically updated if the URL information changes.
- If you do not want automatic updates, delete the corresponding URL and manually enter the same address.
Step 4: Save
After completing all settings**[Save]**Click to create an app.
App Edit/Delete
- Click on the app you want to edit from the app list.
- Modify information on the app modification slide.
- **[Save]**Click to save the changes.
- To delete the app**[Delete]**Click the button.
SSO App Registration
Add an app that provides SSO (Single Sign-On) functionality for various SaaS services such as Microsoft 365, Kintone, and Box.
Prerequisites
Service Display Conditions:
Microsoft 365 Services
- The administrator must be logged into SHIELDGate with a Microsoft account.
- The federation setup between SHIELDGate and Microsoft Azure AD must be completed.
- If all the above conditions are met, you can register for Microsoft 365 apps.
Other Services (Kintone, Box, etc.)
- The SAML client for the service must be pre-registered.
- Individual SAML client registration is required for each service.
SSO App Registration Process
- **[SSO App Registration]**Click the button.
- Select the desired service from the SSO service selection dropdown.
- A list of services grouped by category is displayed.
- Microsoft 365 Category: Outlook, Word, Excel, PowerPoint, OneDrive, Teams, etc.
- Collaboration Tools Category: Kintone, Box, etc.
- Information is automatically configured based on the selected service:
- App Name: The selected service name is entered as the default and can be modified.
- App Icon: The fixed icon of the selected service is automatically displayed and cannot be changed.
- Enter additional information:
- Explanation(Optional): Enter a description for the app.
- group(Optional): Select an app group or create a new group with the [New Group] button.
- **[Save]**Click to complete the SSO app registration.
Domain Unit App Registration Guide
Multiple domains can be connected to a single Microsoft tenant. Separate app registrations are required for each domain.
Example: When a.com and b.com exist within the same tenant
- Outlook (a.com)
- Outlook (b.com)
- Teams (a.com)
- Teams (b.com)
You can register and manage individual SSO apps for each domain.
SSO App Classification
- In the app list, SSO apps display an "SSO" badge.
- You can distinguish between regular apps and "SSO apps" through the display in the app details.
- The "SSO" badge is displayed on the SSO app in the work system screen of the user page.
Group Management
Add Group
You can systematically manage apps by group.
- **[+Add > Add App Group]**Click.
- Enter the group name.
- **[Check]**Click to create a group.
- You can specify the group created during app registration/modification.
Group Edit/Delete
- Select the checkbox of the group to modify/delete from the group list.
- Click the edit/delete button that activates at the top.
- Modify the group name or delete the group.
Related URL Utilization Guide
Purpose of Related URLs
Related URLs are used with the 'Site Move' option in conditional policies:
| Site Navigation Settings | Action |
|---|---|
| ON | Free to navigate to all sites |
| OFF | Limit movement to the representative URL and related URLs only. |
Related URL Configuration Scenario
1. Internal system + only specific external sites allowed
- Representative URL: Company Intranet
- Related URLs: Specific external sites needed for work
- Effect: Can only move from the intranet to designated external sites.
2. Domain Restrictions of SaaS Services
- Representative URL: SaaS Main Page
- Related URLs: Subdomains of the SaaS
- Effect: Restrict to moving only within the SaaS service
Template Utilization Tips
- The related URLs provided in the template include the main domains necessary for using the service.
- According to the security policy, unnecessary URLs can be deleted to narrow the access range.
- You can search for and add additional URLs needed for the business process.
Conditional Policy
Set access permissions and usage policies for the created app. For more details,App Conditional PolicyPlease refer to the document.