---
category: [Administration & Integrations, Platform and Product Extensions, Platform and Product Extensions/Integration, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Workday Extend]
keyword: [Extend, Presentation Components, Endpoint authentication, UI components]
nav: wcp_docs
parent_url: /wcp_docs/
title: Define Endpoint Authentication in the PMD
layout: subsection
---

### Prerequisites

<a id="prereq_N10021_N1001E_N10001"></a>
-   Determine the authentication types required by the REST API endpoints in the PMD files of your app.
-   In the Site Metadata (SMD), declare the authentication types.



### Context

<a id="context_N10037_N1001E_N10001"></a>
For each inbound and outbound endpoint invoked by the pages in your app, specify the endpoint authentication type.

If you don't specify the `authType` attribute for an endpoint, the default authentication type is Workday Single Sign-On (SSO).

### Steps

1.  <a id="step_N10041_N1003E_N1001E_N10001"></a>In App Builder, open the PMD page.
2.  <a id="step_N1004A_N1003E_N1001E_N10001"></a>In the `endPoints` subschema, add the `authType` attribute for each endpoint. Specify the `id` of the authentication `scheme` declared in the SMD.
3.  <a id="step_N1006B_N1003E_N1001E_N10001"></a>In the `outboundEndPoints` array under the `outboundData` subschema, add the `authType` attribute for each outbound endpoint. Specify the `id` of the authentication `scheme` declared in the SMD.

    <b>Note:</b> Except for the `ISU` authentication scheme, you can specify the `scheme` value in the SMD as the `authType` value in PMDs. For the `ISU` authentication scheme, use the `id` value that's defined in the SMD.

4.  <a id="step_N10090_N1003E_N1001E_N10001"></a>If the endpoint requires any HTTP header, list the header name and value pairs in the `headers` attribute.


### Example

```
{
"endPoints": [
  {
    "name" : "viewPublicList",
    "baseUrlType" : "dogDataProvider",
    "url" : "/breeds/list",
    "authType" : "noAuth"
  },
  {
    "name" : "expensesData",
    "baseUrlType" : "expenseDataProvider",
    "url" : "/entries",
    "authType" : "sso"
  },
  {
    "name": "awsData",
    "baseUrlType": "awsDataProvider",
    "authType": "awsV4",
    "url": "/",
    "headers": [
      {
        "name": "Host",
        "value": "dynamodb.us-east-2.amazonaws.com"
      },
      {
        "name": "Content-Type",
        "value": "application/x-amz-json-1.0"
      },
      {
        "name": "X-Amz-Target",
        "value": "DynamoDB.Scan "
      }
    ]
  },
  {
    "name" : "getAppData",
    "baseUrlType" : "app",
    "url" : "myAppObjects",
    "authType" : "isuAuth"
  }
]
}
```

### Next Steps

<a id="postreq_N1009F_N1001E_N10001"></a>
Deploy the app and test your PMD changes in your development tenant.

### Related Information

[Declare Authentication Types in the SMD](/wcp_docs/nyw1530545468565.html)