How do I combine Traefik ForwardAuth with an OIDC provider?

Use an authentication service that integrates with your OIDC provider, then configure Traefik to call that service. ForwardAuth itself does not replace an OIDC login flow.

Register the callback URI in the identity provider, configure the auth service using its version-specific instructions, and test denied and allowed requests before enabling real users.

Source and further reading — checked 2026-10-28.