trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/website/docs/providers/proxy.md

1.2 KiB
Raw Permalink Blame History

title
Proxy Provider

:::info This provider is to be used in conjunction with Outposts :::

This provider protects applications, which have no built-in support for OAuth2 or SAML. This is done by running a lightweight Reverse Proxy in front of the application, which authenticates the requests.

authentik Proxy is based on oauth2_proxy, but has been integrated more tightly with authentik.

The Proxy these extra headers to the application:

Header Name Value
X-Forwarded-User The user's unique identifier (not the username)
X-Forwarded-Email The user's email address
X-Forwarded-Preferred-Username The user's username
X-Auth-Username The user's username

Additionally, you can add more custom headers using additionalHeaders in the User or Group Properties, for example

additionalHeaders:
    X-additional-header: bar