Skip to content

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Staged JWT

Page as Markdown
Use the enterprise entJWT field for configurable enforcement phases and advanced JWT controls.
Staged JWT uses the enterprise entJWT field on the EnterpriseKgatewayTrafficPolicy to verify tokens. Unlike Simple JWT, you choose whether to enforce JWT authentication before or after external authentication (beforeExtAuth or afterExtAuth), and you get extra controls, such as validation policies, clock skew, claims-to-headers, and failure metadata. To authorize requests based on the verified claims, pair entJWT with entRBAC.
Use a JWT from an IdP
Verify JWTs from an identity provider with a remote JWKS and staged enforcement, then explore other …
Restrict access with claim-based rules
Authorize requests based on JWT claims and OAuth 2.0 scopes by using the entRBAC field.
Simple JWT
Was this page helpful?