diff --git a/scripts/install b/scripts/install
index 6dd3a56..9666a9d 100644
--- a/scripts/install
+++ b/scripts/install
@@ -144,11 +144,12 @@ sleep 5
 #=================================================
 ynh_script_progression --message="Configuring SSOwat..." --weight=2
 
-# Make app public if necessary
+# Make app public if necessary or protect it
 if [ $is_public -eq 1 ]
 then
-	# unprotected_uris allows SSO credentials to be passed anyway.
-	ynh_app_setting_set --app=$app --key=unprotected_uris --value="/"
+	# Everyone can access the app.
+	# The "main" permission is automatically created before the install script.
+	 ynh_permission_update --permission "main" --add "visitors"
 fi
 
 #=================================================