---
category: [Administration & Integrations, Platform and Product Extensions, Platform and Product Extensions/Integration, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Workday Extend]
keyword: [Extend, ISU Authentication, Simplified ISU]
nav: wcp_docs
parent_url: /wcp_docs/
title: Assign Integration System Users to an App
layout: subsection
---

### Prerequisites

-   An Extend or Integration app that's deployed on the tenant.

    If your Extend app contains model security domains, create their domain security policies in App Manager.

-   Security: <i>WCP Integration System User Security</i> domain in the System functional area.

    Find the domain: <i>WCP Integration System User Security</i>. Create a security policy, and configure users with the <b>Modify</b>permission. Run the Activate Pending Security Policy Changes task.

    <b>Note:</b> The <i>WCP Integration System User Security</i> security domain enables the <b>Add Integration System User</b> button in App Manager.



### Context

App Manager enables you to assign an ISU to the app and create an API client for that ISU. Thereafter, you can configure the appropriate Orchestration and Presentation Components in your app to use the ISU authentication.

For information and guidelines about the ISU authentication, see [Concept: ISU Authentication](/wcp_docs/GUID-cb3e0fcd-bb97-4005-8d10-3a02e88dab71-enHYPHENus.html).

### Steps

1.  In App Manager, select the app and click <b>Configure</b>.
2.  In the <b>Integration System Users</b> section, click <b>Add Integration System User</b>.
    1.  On the <b>Assign WCP Integration System User</b> window, select an ISU from the list of unassigned ISU accounts on the tenant.
    2.  Click <b>OK</b>.
    3.  (Optional) Add additional ISUs.

3.  On the new Integration System User row, click <b>Create API Client</b>.

    1.  On the <b>Create WCP API Client</b> window, select <b>Confirm</b>.
    2.  Click <b>OK</b>.

    The name of the generated API Client uses this format:`App: <appReferenceID> Env: <environmentName> Tenant: <tenantName> ISU: <isuName>`

4.  (Optional) Configure scopes for the generated API client.
    1.  Go to the <b>API Clients</b> page on the Console.
    2.  Click the <b>All Clients</b> tab, and search for the name of the API client.
    3.  Select the API client and click <b>Edit API Client</b>.
    4.  Select the appropriate scopes.
    5.  Click <b>Save API Client</b>.



### Next Steps

For apps with Orchestrations, see [Create Orchestration Credentials](/wcp_docs/uwh1613475703138.html).

For apps with Presentation Components, [Configure ISU Authentication in Presentation Components](/wcp_docs/GUID-f4c6727e-f363-4786-a90d-ecc30f062872.html) .