Part of Empire Cloud

What does ForwardAuth do in Traefik?

ForwardAuth asks an external service whether a request may proceed. It is an authorization integration point, not a complete identity provider.

Choose the auth-service address and response headers deliberately. Avoid trusting identity headers supplied directly by clients; test your complete proxy chain.

Source and further reading — checked 2026-10-28.