Create an ungrouped application

This task creates a standalone application for zero trust application access.

Before you begin

Create a zero trust application policy

Procedure

Step 1

Choose Policies > Access Control > Zero Trust Application

Step 2

Select the policy and click Add Application.

Step 3

In the Application Settings section, complete the following fields.

  • Application Name—Enter the application name.

  • Application Group—This field is not applicable for a standalone application.

  • External URL—Enter the URL that is used by the user to access the application.

  • Internal URL (FQDN or Network IP)—Enter the URL where the application is hosted on the internal server.

  • Application Certificate—Enter the certificate for the private application.

Click Next.

Step 4

In the SAML Service Provider (SP) Metadata section, the data is dynamically generated. Copy the Entity ID or ACS URL of the IdP or click Download SP Metadata to download this data in XML format for adding it to the IdP. Click Next.

Step 5

In the SAML Identity Provider (IdP) Metadata section, add the metadata using either one of the methods:

  • XML File Upload—Select a file or drag and drop the XML file.

  • Manual Configuration—Complete the following fields:

    • Entitv ID—The URL that is defined in the SAML IdP to identify a service provider uniquely.

    • Single Sign-On URL—The URL for signing into the SAML identity provider server.

    • Certificate—Certificate of the IdP enrolled into the threat defense to verify the messages signed by the IdP.

  • Configure Later—In the event you do not have the IdP metadata, you can configure it later.

Click Next.

Step 6

In the Re-authentication Interval section, enter the value in the Interval field and click Next.

Step 7

In the Interface Access and Security Controls section, the interface objects and threat settings are inherited from the parent policy. You can override these settings.

Step 8

Review the settings and click Finish.

Step 9

Click Save.

The Application is displayed on the policy page under Ungrouped Applications.

What to do next

Set targeted devices for zero trust access policy