SSO

Single Sign-On (SSO) and authentication providers settings

Experimental Feature

Please note that this feature is still in development and may not work as expected.

Forward Auth

Configuration settings for the Forward Auth provider.

The Forward Auth provider makes a subrequest to an authorization server that supports Forward Auth, then either:

Example authorization servers that support this:

The full remote address or URL of the authorization servers forward auth endpoint. Example: https://auth.example.com/authz/forward-auth
Advanced Options
Comma separated list of case-insensitive headers to copy from the authorization servers response to the request sent to the backend. If not set no headers are copied. Example: Remote-User,Remote-Groups,Remote-Email,Remote-Name
Comma separated list of case-insensitive headers to copy from the authorization servers response to the response sent to the client. If not set no headers are copied. Example: Set-Cookie,WWW-Authenticate
Comma separated list of case-insensitive headers to copy from the original request to the request made to the authorization server. If not set all headers are copied. Example: Cookie,Authorization
Comma separated list of case-sensitive cookie names to exclude from the request to the backend. If not set no cookies are excluded. Example: authelia_session,another_session