What is upstream authentication?

Upstream authentication is a security method used to protect web applications from unauthorized access. With this method, the user is authenticated before accessing the actual application. This means that the user must confirm their identity before accessing the application.

This authentication is typically carried out by an upstream instance such as a Web Application Firewall (WAF) or a reverse proxy. Before a request from a user is forwarded to the actual web application, the upstream authentication method checks the user's access authorization. This can be done, for example, by verifying the username and password or by other authentication methods.

The main advantage of upstream authentication is that it protects the web application from attacks by unknown attackers as only authenticated users are granted access. Additionally, delegating authentication to an upstream entity enables the implementation of single sign-on scenarios across multiple web applications, improving usability and security. In addition, the authentication processes do not have to be developed and implemented separately for each application. Application developers can concentrate on the business logic.

Airlock Secure Access Hub offers upstream authentication as part of its security features. Through a dynamic whitelist filtering method, Airlock effectively protects web applications from unauthorized access and enables the implementation of single sign-on across multiple applications. Find out more about the upstream authentication functions of Airlock Secure Access Hub at the following link: Airlock Secure Access Hub - Upstream authentication.