I was having the same issues as discussed in this question:
Error rendering Force.com Canvas application
and was able to get the app working by setting the app to use "Admin approved users are pre-authorized" and then adding a profile to the "Profiles" of the installed app. This works and allows my app to render, but if possible I would like to be able to use "All users may self-authorize" setting so I don't require the extra step of setting the profiles on the app.
Is this possible?