An apparatus includes a memory and a hardware processor. The memory stores security restrictions. The processor detects that a user attempted to access a third-party application that does not use the stored security restrictions and communicates the stored security restrictions to the third-party application. The processor also receives a message indicating that the third-party application registered the security restrictions, determines, based on the stored security restrictions, that the user should be granted access to the third-party application, and in response to the determination that the user should be granted access to the third-party application, redirects the user to the third-party application.