Skip to main content

Proxy Provider

info

This provider is to be used in conjunction with Outposts

This provider protects applications, which have no built-in support for OAuth2 or SAML. This is done by running a lightweight Reverse Proxy in front of the application, which authenticates the requests.

authentik Proxy is based on oauth2_proxy, but has been integrated more tightly with authentik.

The Proxy these extra headers to the application:

Header NameValue
X-Forwarded-UserThe user's unique identifier (not the username)
X-Forwarded-EmailThe user's email address
X-Forwarded-Preferred-UsernameThe user's username
X-Auth-UsernameThe user's username

Additionally, you can add more custom headers using additionalHeaders in the User or Group Properties, for example

additionalHeaders:
X-additional-header: bar