LoclixDocs
Web application firewallZero Trust

Zero Trust

Require sign-in before visitors can access a private application.

Create a Zero Trust application for a hostname or path, then choose who may access it. Visitors sign in through an assigned identity provider before Loclix forwards their requests.

Sign in, check the access policy, then verify the signed request at the application.

Setup

  1. Configure verified HTTPS for every direct origin.
  2. Add an identity provider.
  3. Create an application for the hostname or path.
  4. Assign the provider and an allow policy.
  5. Configure assertion verification at your application.
  6. Select Save Zero Trust.

If saving shows a service setup error, contact support with the message.

Email codesLet approved visitors sign in with a one-time code.Access activityInvestigate sign-in attempts and access decisions.

Before public use

Make your origin reject missing or invalid access assertions. Restrict direct origin access with a firewall or authenticated origin pulls so requests cannot bypass Loclix.

Test with both an allowed and a denied identity. Shared caching is bypassed for the whole website while Zero Trust is configured.

Security rules

Match website requests and choose how Loclix handles them.

Applications

Require sign-in for a hostname or path.

On this page

SetupBefore public use