WEB ACCESS GATEWAY

Oplon Web Application Gateway is the tool that stands in front of the Web applications in order to securely deliver them.
Web Application Gateway copes with all service requests, checks for restriction and access control policies, and redirects requests requiring authentication to the Oplon MFA provider.
‍
Once the user has obtained authorization from Oplon MFA to access the service Oplon WAG verifies authenticity and provenance allowing secure access to services. The system also has layer 7 data traffic balancing and sorting capabilities and is able to select the most discharged system to deliver the requested service.
‍

• 1. The user requests access to a protected part of the service e.g.: www.myorg.com/administrator
• 2. Oplon Secure Access sees that the requested service is protected by MFA and requests double authentication
  
• 3. The user must confirm his/her identity via the Oplon 2FA app
• 4. User can navigate in the Jumla console

Oplon WAG sorts the requests and, depending on the domain and/or context, is able to understand if the specific service must be authenticated to be used. In this case, the user has selected the service of administration Wordpress and Oplon WAG directs the requests to that specific service distinguishing it from the other services and requests.

• 1. The user requests to access a protected part of the service e.g.: www.myorg.com/wp-admin
• 2. Oplon Secure Access sees that the requested service is protected by MFA and requests double authentication
  
• 3. The user must confirm his/her identity via the Oplon 2FA app
• 4. User can navigate in the Wordpress console

The authentication request is only related to the selected contexts, in this specific case “/wp-admin”. In all other contexts, access will be completely unrestricted unless other access restriction policies are in place.
All operations are completely transparent to the user who authenticates: after login and password he/she will only need to confirm his/her identity with Oplon 2FA.

Everything happens without installing any plugins or agents.