diff --git a/scripts/install b/scripts/install
index 190df5a..20fe857 100644
--- a/scripts/install
+++ b/scripts/install
@@ -109,9 +109,10 @@ chown -R $app: $final_path/cache
 # SETUP SSOWAT
 #=================================================
 ynh_script_progression --message="Configuring SSOwat..." --weight=1
+ynh_permission_update --permission="main" --add="visitors"
+
+
 
-# unprotected_uris allows SSO credentials to be passed anyway.
-ynh_app_setting_set --app=$app --key=unprotected_uris --value="/"
 
 #=================================================
 # RELOAD NGINX
diff --git a/scripts/upgrade b/scripts/upgrade
index 5a998de..099ed1f 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -41,6 +41,16 @@ ynh_clean_setup () {
 # Exit if an error occurs during the execution of the script
 ynh_abort_if_errors
 
+#=================================================
+# Migrate legacy permissions to new system
+#=================================================
+if ynh_legacy_permissions_exists
+then
+	ynh_legacy_permissions_delete_all
+
+	ynh_app_setting_delete --app=$app --key=is_public
+fi
+
 #=================================================
 # CHECK THE PATH
 #=================================================