OAuth2 Proxy
Problem
Your team has an internal web application that should be accessible only to signed-in employees.
You want to reuse company accounts and add login protection without building a sign-in flow into the app.
Solution — OAuth2 Proxy
OAuth2 Proxy sits in front of the application and checks the user's session.
User → OAuth2 Proxy → Application
When sign-in is needed, it redirects the user to an identity provider such as Microsoft Entra ID or Google.
After successful sign-in, it creates a session and forwards requests allowed by its access rules.
Core idea: OAuth2 Proxy adds a login gate in front of an application.