Traefik ForwardAuth and SSO

SSO concerns how users authenticate across applications; ForwardAuth is the proxy’s request-time handoff to an auth service.

Use the official ForwardAuth options as your configuration reference. Test redirects, allowed headers and expired sessions together; successful login alone does not prove authorization.