# Web applications

> Publish internal web applications through the Ironchip PAM broker, with access windows, approval and factors, with no VPN and no exposure to the internet.

URL: https://docs.ironchip.com/en/pam/recursos/web/

This page explains how to give privileged access to an internal web application, such as the console of a network device or an admin panel, through the Ironchip PAM broker. It is for whoever administers the application and for whoever uses it.

## How it works

The broker acts as a proxy to the application: the person opens it in their browser with a single-use ticket, and the broker only lets them through while they have an open window or permanent access and confirm the access's factors. The application is not published on the internet.

The broker does not store any credential for this kind of resource: the application asks for its own sign-in, if it has one.

## Steps

1. In **PAM > Hosts > Targets**, click **Add target** and choose **HTTP**.
2. Enter **Name**, the **Site** and the application's **URL** as the broker sees it, for example `https://intranet.example.com`.
3. Add it to a [target policy](https://docs.ironchip.com/en/pam/administracion/politicas/#target-policies) and name that policy in an [access](https://docs.ironchip.com/en/pam/administracion/accesos/).
4. The person [requests access](https://docs.ironchip.com/en/pam/usuarios/solicitar-acceso/), if needed, and in **PAM > My access** clicks **Credential** and then **Open in the broker**.

## More information

- [Resources](https://docs.ironchip.com/en/pam/administracion/recursos/)
- [Connect to a resource](https://docs.ironchip.com/en/pam/usuarios/conectarse/)