# Raw http services work, but things behind more complex setups like proxies, or laravel are having issues

**URL:** <https://openziti.discourse.group/t/raw-http-services-work-but-things-behind-more-complex-setups-like-proxies-or-laravel-are-having-issues/2835>\
**Category:** zrok\
**Created:** [July 8, 2024, 3:54pm UTC](https://openziti.discourse.group/t/raw-http-services-work-but-things-behind-more-complex-setups-like-proxies-or-laravel-are-having-issues/2835 "2024-07-08T15:54:19Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![icsy7867](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/icsy7867/32/2279_2.png) [@icsy7867](https://openziti.discourse.group/u/icsy7867)\
**Post date:** [July 11, 2024, 6:28pm UTC](https://openziti.discourse.group/t/raw-http-services-work-but-things-behind-more-complex-setups-like-proxies-or-laravel-are-having-issues/2835/12 "2024-07-11T18:28:58Z")

</div>

@michael.quigley @TheLumberjack

This is pretty cool. I took this a step further, and I used caddy to integrate SSO Via our on-prem ADFS with OIDC!

I manually built zrok after adding caddy-security

> **[GitHub - greenpau/caddy-security: 🔐 Authentication, Authorization, and...](https://github.com/greenpau/caddy-security)**
>
> 🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAM...

And then wrote a custom caddy file which you can see in this github issue:

> <https://github.com/openziti/zrok/issues/506>
>
> Currently supported OIDC providers are Google, GitHub
> 
> Enabling Auth0 would al…low a single OAuth provider configuration to support all the providers supported by Auth0 transitively
> 
> Personally, I'd prefer to have Auth0 before Okta because Auth0 allows the use of their own third-party client id/client secret, e.g. Google OAuth account, which is convenient for development and tiny scale testing.
> 
> With Okta, it's necessary to set up my own Google client id/secret, which is limited to allowed email addresses, so it's considerably more work for the dev to get things running.

And now, when you hit the zrok generated link, it forces me through my companies SSO/ADFS page! Neat!

---

_[View the full topic](https://openziti.discourse.group/t/raw-http-services-work-but-things-behind-more-complex-setups-like-proxies-or-laravel-are-having-issues/2835)._