<% content_for :title, "Forward Auth Rule: #{@forward_auth_rule.domain_pattern}" %>

<%= @forward_auth_rule.domain_pattern %>

<%= link_to "Edit", edit_admin_forward_auth_rule_path(@forward_auth_rule), class: "inline-flex items-center rounded-md bg-white px-3 py-2 text-sm font-semibold text-gray-900 shadow-sm ring-1 ring-inset ring-gray-300 hover:bg-gray-50" %> <%= link_to "Delete", admin_forward_auth_rule_path(@forward_auth_rule), data: { turbo_method: :delete, turbo_confirm: "Are you sure you want to delete this forward auth rule?" }, class: "ml-3 inline-flex items-center rounded-md bg-red-600 px-3 py-2 text-sm font-semibold text-white shadow-sm hover:bg-red-500 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-red-600" %>

Rule Details

Forward authentication rule configuration.

Domain Pattern
<%= @forward_auth_rule.domain_pattern %>
Status
<% if @forward_auth_rule.active? %> Active <% else %> Inactive <% end %>
Access Policy
<% if @allowed_groups.any? %>

Only users in these groups are allowed access:

<% @allowed_groups.each do |group| %> <%= group.name %> <% end %>
<% else %> Bypass - All authenticated users allowed <% end %>
Created
<%= @forward_auth_rule.created_at.strftime("%B %d, %Y at %I:%M %p") %>
Last Updated
<%= @forward_auth_rule.updated_at.strftime("%B %d, %Y at %I:%M %p") %>

How this rule works

  • This rule matches domains that fit the pattern: <%= @forward_auth_rule.domain_pattern %>
    • <% if @allowed_groups.any? %>
  • Only users belonging to the specified groups will be granted access
  • Users will be required to authenticate with password (and 2FA if enabled)
    • <% else %>
  • All authenticated users will be granted access (bypass mode)
    • <% end %>
  • Inactive rules are ignored during authentication