Assign migrated apps to Identity Engine policies

After you upgrade using app branding migration, review your app sign-in policies and your user profile policies, and assign apps according to your requirements. You can add only Identity Engine apps to these policies.

About this task

  • The Self-Service Registration (SSR) feature in Classic Engine is an org-wide setting that doesn’t provide per-app support. See About self-service registration. In Identity Engine, the org-wide behavior from Classic Engine is embedded in a new per-app policy model. SSR and progressive enrollment are merged into user profile policies that can be applied to specific apps or groups.
  • After you upgrade to Identity Engine, you must manage policies at two levels: the app sign-in policy that applies to a specific app, and the global session policy that applies org-wide and can require stricter session establishment or MFA behavior than an individual app sign-in policy allows.

Procedure

  1. To review and configure your app sign-in policies, see Assign apps to an app sign-in policy.
  2. To review and configure your user profile policies, see Add apps to a user profile policy.