---
category: [Platform and Product Extensions/Workday Extend, Platform and Product Extensions, Administration & Integrations, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Integration]
keyword: [Extend, App Builder, Model Components, Extend Business Objects, Model Domains, Security Domain, Extend Domains]
nav: wcp_docs
parent_url: /wcp_docs/
title: Add Security Domains in Visual Mode
layout: subsection
---

### Prerequisites

<a id="prereq_N10022_N1001F_N10001"></a>
Create or open a Workday Extend app in App Builder.

### Context

<a id="context_N1002B_N1001F_N10001"></a>
Security domains:

-   Extend Workday’s configurable security model to secure app data confidently.
-   Configure security policies in the same manner as the Workday application.
-   Leverage existing security groups and roles to simplify access controls.
-   Can provide page-level security.


See [Concept: Configurable Security](https://doc.workday.com/admin-guide/en-us/authentication-and-security/configurable-security/configurable-security-basics/dan1370797393969.html).

### Steps

1.  <a id="step_N1004B_N10048_N1001F_N10001"></a>In App Builder, click the <b>Add</b> button next to <b>Security Domains</b> in the components panel.
2.  <a id="step_N1005C_N10048_N1001F_N10001"></a>Provide a <b>Name</b> for the security domain. The name must begin with an uppercase alphabetic character (A–Z) and contain only alphanumeric characters (A–Z, a – z, 0–9). The maximum length allowed is 100 characters.
3.  <a id="step_N1006D_N1004C_N10023_N10001"></a>Use the toggle switch in the upper right of the interface to ensure that App Builder is in Visual mode.
4.  <a id="step_N10076_N1004C_N10023_N10001"></a>Provide fundamental information about your component. As you complete this tab, consider:

<table><thead><tr><th>    Option</th><th>    Description</th></tr></thead><tbody><tr><td><b>Name</b></td><td>You can edit the name you provided earlier.</td></tr><tr><td><b>Label</b></td><td>(Optional) Provide a label that succinctly indicates the purpose of the business process. <p>If you specify a label, it must be unique for each model component type within an app.</p> <p>If you don't specify a label, Workday displays the name in the tenant.</p></td></tr><tr><td><b>Enabled for Page Security</b></td><td>Enable this toggle to secure the pages of your app with a security domain. <p><b>Note:</b> Because Workday doesn't apply contextual security to the pages of an app, we recommend that you use only unconstrained role-based security groups for page security. Constrained security on the pages of an app is derived from the endpoint authentication scheme.</p></td></tr><tr><td><b>Enabled for Orchestration Security</b></td><td>Enable this toggle to secure the orchestrations of your app with a security domain. <p>When enabled, you can apply domain security policies to orchestrations, leveraging Workday's established security mechanisms.</p></td></tr></tbody></table><br/>



### Next Steps

<a id="postreq_1"></a>
Configure the security policy in App Manager. See [Reference: Workday App Manager](/wcp_docs/GUID-8e6a447c-c716-4fbb-82a5-eff3e6221629-enHYPHENus.html).

### Related Information

[Concept: Extend App Security](/wcp_docs/vel1628698852360.html)

[Manage Deployed Extend Apps](/wcp_docs/bwl1559331246809.html)

[Steps: Secure the Pages of an App in IntelliJ](/wcp_docs/pxt1628796912050.html)

[Reference: Model Component Attributes](/wcp_docs/hod1558556125085.html)

[Reference: Security Domain Naming Conventions](/wcp_docs/yms1650325033219.html)

[Reference: Allowed Updates After Extend App Promotion](/wcp_docs/haf1635898070118.html)