>
    Strata Copilot
    Add a User-Defined App
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Secure Agentless Access
    5. Use Secure Agentless Access
    6. Add a User-Defined App
    Download PDF
    Prisma Access

    Add a User-Defined App

    Table of Contents

    Add a User-Defined App

    Learn how to add a user-defined app for Secure Agentless Access.
    Where Can I Use This?What Do I Need?
    • Secure Agentless Access (SAA) portal
    • A web browser that supports HTML5
    • SAA credentials
    If you allow user-defined apps when you set up the , the users can manually add an app in the portal.
    User-defined apps are not visible to other users. SAA automatically applies the default profile for user-defined apps. User-defined apps are supported only for RDP, SSH, and VNC connections.
    Users can manually define the following types of apps:
    To manually define an app from the SAA portal, the user needs to:

    Add a User-Defined RDP App

    Learn how to add a user-defined RDP app for Secure Agentless Access.
    To manually define an RDP app from the SAA portal:
    1. Log in to the SAA portal.
    2. Click Add App in the User-Defined Apps section.
    3. Enter the general details for the app:
      1. Select App TypeRDP.
      2. Enter the App Name.
      3. (Optional) Select a Keyboard Layout to use for the remote RDP app.
      4. (Optional) Enter an App Description.
      5. Enter the Destination or FQDN or IP address of the app.
      6. Enter the Port to use for the app, if different from the default port.
        You can enter only one port between 1-65535. (Default: 3389)
    4. (Optional) Configure additional settings for the RDP app.
      1. (Optional) Enter the Domain associated with the RDP application. When you configure this field, the system applies the domain automatically during authentication, allowing users to log in using only their username.
      2. Enter the Username and Password for the RDP app, and Confirm Password. The username and password are optional, but you must enter both settings or leave both blank.
    5. To save the app settings, Create Custom App.
      You can bookmark an administrator-created app or user-created app and launch them later by clicking on the link in the bookmark.

    Add a User-Defined SSH App

    Learn how to add a user-defined app for Secure Agentless Access.
    To manually define an SSH app from the SAA portal:
    1. Log in to the SAA portal.
    2. Click Add App in the User-Defined Apps section.
    3. Enter the general details for the app:
      1. Select App TypeSSH.
      2. Enter the App Name.
      3. (Optional) Enter an App Description.
      4. Enter the Destination or FQDN or IP address of the app.
      5. Enter the Port to use for the app, if different from the default port.
        You can enter only one port between 1-65535. (Default: 22)
    4. (Optional) Configure additional authentication settings for the SSH app.
      1. Enter a valid Username and Password for the app, and confirm the password. If you enter a username and don't enter a password, you must provide a private key.
      2. Enter the Private Key for the app. If the private key is encrypted, enter your passphrase.
      3. Enter the Passphrase for the app.
      4. Enter the Host Key entries for the remote host, which you can obtain by running the ssh-keyscan command on the host. Enter one key per line. Lines that begin with # are treated as comments.
    5. To save the app settings, Create Custom App.
      You can bookmark an administrator-created app or user-created app and launch them later by clicking on the link in the bookmark.

    Add a User-Defined VNC App

    Learn how to add a user-defined app for Secure Agentless Access.
    To manually define a VNC app from the SAA portal:
    1. Log in to the SAA portal.
    2. Click Add App in the User-Defined Apps section.
    3. Enter the general details for the app:
      1. Select App TypeVNC.
      2. Enter the App Name.
      3. (Optional) Enter an App Description.
      4. Enter the Destination or FQDN or IP address of the app.
      5. Enter the Port to use for the app, if different from the default port.
        You can enter only one port between 1-65535. (Default: 5900)
    4. (Optional) Configure additional authentication settings for the VNC app.
      1. (Optional) Enter the User Name and Password for the app, and confirm the password. The username and password are optional, but you must enter both settings or leave both blank.
      2. Enable File Transfer to enable file uploads and downloads using SFTP (SSH File Transfer Protocol).
    5. If you enabled file transfer in the previous step, configure the file transfer settings.
      1. Enter your SFTP Username and SFTP Password. If you don't provide a password, you must provide the SFTP private key.
      2. The SFTP Hostname is automatically populated with the Destination FQDN or IP address. No entry is required.
      3. Enter the SFTP Port to use for file transfers. You can enter only one port between 1-65535. (Default: 22)
      4. Enter the SFTP Private Key. This is required if you don't enter an SFTP password.
      5. (Optional) Enter the SFTP Passphrase. This is required if the SFTP private key is encrypted.
      6. (Optional) Enter the SFTP Host Key entries for the remote host, which you can obtain by running the ssh-keyscan command on the host. Enter one key per line. Lines that begin with # are treated as comments.
    6. To save the app settings, Create Custom App.
      The users can bookmark an administrator-created app or user-created app and launch them later by clicking on the link in the bookmark.
    1. Click Add App in the User-Defined Apps section.
    2. Enter the general details for the app:
      1. Select the App Type for the app (RDP, SSH, or VNC).
      2. Enter the App Name and an App Description.
      3. Enter the Destination FQDN or IP Address and Port for the app (if not using the default port).
    3. (Optional) Configure authentication settings for the app. The authentication settings depend on the app type.
      • For RDP apps:
        • (Optional) Enter the Domain associated with the RDP application. When you configure this field, the system applies the domain automatically during authentication, allowing users to log in using only their username.
        • (Optional) Enter the User Name and Password for the remote app, and confirm the password. The username and password are optional, but both must be provided or both must be empty.
      • For SSH apps:
        1. Enter the User Name and Password for the remote app, and confirm the password.
        2. (Optional) Enter the Private Key. If the private key is encrypted, enter the Passphrase.
        3. (Optional) Enter the Host Key entries for the remote host, which users can obtain from the ssh-keyscan command on the host. Enter one key per line. Lines that begin with # are comments.
      • For VNC apps:
        1. (Optional) Enter the User Name and Password for the remote app, and confirm the password. The username and password are optional, but both must be provided or both must be empty.
        2. (Optional) Select Enable File Transfer to allow the upload and download of files using SFTP (SSH File Transfer Protocol).
          1. Enter the SFTP Username and SFTP Password. If no password is used, provide the SFTP private key.
          2. Enter the SFTP Port to use for file transfers. The range is 0-64435.
          3. Enter the SFTP Private Key if not using the SFTP password.
          4. If the SFTP private key is encrypted, enter the SFTP Passphrase.
          5. (Optional) Enter the SFTP Host Key.
    4. To save the app settings, Create Custom App.
      The users can bookmark an administrator-created app or user-created app and launch them later by clicking on the link in the bookmark.

    © 2026 Palo Alto Networks, Inc. All rights reserved.