To secure the back-end server, the Web application's mapping has to be restricted to authenticated users only.
Procedure-related prerequisites
- ●Configuration takes place in Airlock Gateway.
- ●You need to be logged in as admin in the Airlock Gateway Configuration Center.
Instruction
- 1.Go to: Application Firewall >> Reverse Proxy.
- 2.Edit the Web application's mapping.
- 3.Change to the Access tab.
- 4.Enter the role under Access restrictions >> Restricted to Roles.
- -Restricted to Roles: authenticated
- 5.Select Authentication flow One-Shot.
- 6.Configure Denied access URL to /auth/login-oneshot
- 7.Under Credential Propagation >> SSO credential propagation, select Kerberos.
- 8.Enable the checkbox Credential mandatory.
This role is set by Airlock IAM after successful authentication.