info_app OK, TODO: sso ticket(low priority), policy check