Internal Applications are Listed on SSO Service Homepage

Products

• VMware Tanzu Application Service

Issue/Introduction

Your SSO service homepage (https://<YOUR_AUTH_DOMAIN>.<YOUR_LOGIN_DOMAIN>) lists the apps that are bound to the service. This might be seen as a security concern as it exposes internal application names and URLs

Environment

Elastic Application Runtime with Single Sign-On Tile

Cause

By default, applications bound to the SSO service will be shown on the homepage

Resolution

Set the relevant property to hide the app from the homepage. There are multiple ways to do this:

• Set the show_on_home_page parameter to false when you are binding the app to the SSO service
  • SSO Bind Parameters Documentation
  • If the app is already bound to the service, unbind / rebind the app or use one of the other options below
• Turn off the "Show on Homepage" setting for the app in the SSO Developer Dashboard
  • SSO Developer Dashboard Documentation
• Set showOnHomePage to false using the UAA API
  • UAA Metadata API
  • This option might be best if you want to disable the homepage for many apps