The IAM Loginapp must necessarily be placed behind an Airlock Gateway or Airlock Microgateway. It is configured as back-end application that is allowed to authenticate sessions.
This applies to both Loginapp (JSP) and the Loginapp REST API.
The following sections describe in detail how Airlock IAM and Airlock Gateway have to be configured.