Skip to content
Documentation

Gateway

The SSOGEN Gateway is an authenticating reverse proxy that runs inside your network. It puts SSOGEN sign-in in front of internal web applications, opens SSH, RDP and VNC sessions in the browser, and can query Active Directory or LDAP on behalf of SSOGEN. These guides cover installing a Gateway, publishing applications through it and finding the cause when something does not work.

  1. What the Gateway does

    An authenticating reverse proxy in front of internal applications, servers and directories.

  2. Install and enroll a Gateway

    Install from the archive, write the bootstrap file, enroll with a one-time token, check health and update safely.

  3. Publish an internal app

    Put an internal website behind SSOGEN sign-in with the App Proxy: certificates, per-hostname policies, load balancers.

  4. Form fill and Kerberos sign-in

    Single sign-on for a legacy application without changing it: identity headers, a filled login form or Kerberos.

  5. Outbound Connector

    Reach applications and hosts in a network the Gateway cannot reach, with a connector that needs no inbound port.

  6. Reach a Gateway through a relay

    Let people reach a Gateway inside a private network, with certificates ordered and renewed automatically.

  7. Remote Access

    SSH, RDP and VNC in the browser, with a stored account, host pairing, approvals, file transfer and audit.

  8. Forward auth behind your proxy

    Keep nginx, Traefik or Envoy as your ingress; the Gateway answers each forward-auth check.

  9. Directory Connector

    Let a Gateway inside your network query Active Directory or LDAP for SSOGEN, and test the connection first.

  10. Troubleshooting

    Find out why a gateway, route, hostname or certificate is not working, starting from what the console shows.

  11. Gateway configuration and resilience

    How an SSOGEN Gateway receives its configuration, what it does when it cannot reach SSOGEN, how switching access off still takes effect, and when to enroll

  12. Gateway ports, firewall and sizing

    Every port an SSOGEN Gateway, Directory Connector, Outbound Connector or relay needs, in which direction, the firewall commands, the outbound-only options

  13. Upgrade an SSOGEN Gateway

    Upgrade a gateway server step by step: the order across your installation, what keeps running, how to confirm the new version, and what going back involves.