Define the authorization and authentication strategies for your application.

Authentication

Proves to the application that you are who you say you are.

Authorization

Determines the functions that you can perform in the application. This corresponds to an access group and role configuration.

Security planning involves defining authorization and authentication strategies for your application. It is a best practice to create new access groups and roles that are based on the default access groups and roles that come with the product.

Security planning also involves setting up the organization structure and operator attributes. The application provides security in the form of access settings and denial rules. Many integration rules also incorporate authentication.

For more information about the additional aspects of security, enroll in the Lead System Architect course on Pega Academy.

• Authentication schemes
• Implementing your authentication scheme
• Authorization scheme
• Configuring your organization structure
• Operator attributes
• Configuring work groups
• Configuring work queues
• Configuring work parties