When the authorization strategy is Application, an authorization CER ruleset must be defined. The ruleset must determine the set of programs to be authorized, and the clients that are eligible for each program. For more information on defining the authorization ruleset, see the Cúram Intake Developer Guide.