> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Add resource rules

Building a resource graph involves several steps, depending on the type of resource rule you want to create. If you simply want the most basic resource rule that has Skip Password for first-factor authentication and default second-factor, just add the resource rule and the basic template is configured with these settings.

note

Before you begin, review the _Terminology and Tips_ section. See [Create resource rules](/docs/authentication-and-security/create-and-manage-resource-rules/create-resource-rules.md).

The following sections describe how to configure elements of a resource rule. Click the + plus symbol to see more details, or click the link to move the applicable page.

## Step 1: Add resource rules

You can add resource rules to applications in the following ways:

### Add the resource rule when you add the application to IDaaS

1. Click Menu icon **>** **Security > Applications**. The **Applications** **List** page appears.
2. Select the application template that you want to add to IDaaS.
3. Configure the General Settings, Advanced Settings, and Customizations as required (see [Manage applications](/docs/applications-and-sso/manage-applications.md) for specific instructions).
4. Click the **Resources Rules** tab and then click **Add Resource Rule**.
5. The **Add Application** page includes a **Resource Rules** tab.

#### From the **Applications List** page

1. Click Menu icon **>** **Security > Applications**. The **Applications** **List** page appears.
2. Click the name of the application. The **Edit Application** page appears.
3. Click the **Resource Rules** tab.
4. Click **Add Resource Rule**.

#### From the **Resource Rules** page

1. Click Menu icon **> Security > Resource Rules**. The **Resource Rules** page appears.
2. Click Plus icon next to the application you want to protect with a resource rule. The **Add** **Resource Rules** page appears with a starting template.

#### Clone a resource rule

1. Click Menu icon **>** **Security > Resource Rule**. The **Resource Rules List** page appears.
2. Click Ellipsis Vertical icon and select Copy icon **Clone** next to the resource rule you want to clone. The **Add Resource Rules** page appears.
3. Give it a new name.
4. Modify your resource rule as required.

## Step 2: Configure the General settings

In the **General Settings**, enter the name and description for the resource rule, and optionally, configure the Advanced Settings.

### Configure the General Settings

1. If the **General Settings** do not appear, click anywhere in the Canvas to display them.
2. Enter a **Name** and **Description** for the resource rule.
3. Optional. Click **Advanced Settings** to view advanced settings available for the type of application being protected by the resource rule.
4. Enable the following **Advanced Settings**, as applicable and available:
   1. **Strict Access**: Sets the resource rule to deny access regardless of the outcome of other resource rules. If this option is disabled for any resource rule that denies access, the user is allowed access if at least one resource rule allows access.
   2. **Single Sign-On**: Allows users to bypass reauthentication. When disabled, users are forced to reauthenticate whenever they try a new login.
   3. **Bypass second-factor auth for new users**: New users not yet found in the resource can bypass second-factor authentication. Existing users must still perform second-factor authentication.
5. Click **Save**.

## Step 3: Optional. Add Access Controls.

See [Add Access Controls](/docs/authentication-and-security/create-and-manage-resource-rules/create-resource-rules/add-a-resource-rule/add-access-controls.md).

## Step 4: Add Risk Factors

See [Add Risk Factors](/docs/authentication-and-security/create-and-manage-resource-rules/create-resource-rules/add-a-resource-rule/add-risk-factors.md).

## Step 5: Configure Risk Evaluation

See [Add Risk Evaluation](/docs/authentication-and-security/create-and-manage-resource-rules/create-resource-rules/add-a-resource-rule/add-risk-evaluation.md).

## Step 6: Save the resource rule

## Save the resource rule

1. Click anywhere in the Canvas to display the **General Settings**.
2. Click **Save**.

note

If **Save** is not available, there is an error in the resource rule graph. Check the error messages in the Task bar. See [Error messages](/docs/authentication-and-security/create-and-manage-resource-rules/create-resource-rules/error-messages.md) for more information.