Registration Request: compliance_issue

[vparla]

Name

compliance_issue

Description

A device making a request is not in compliance

Extra Parameters

OPTIONAL - Helpful text about the compliance issue.
For example, "Only iOS version 17.2 or later can access this resource"

This text would be free form text that the Proxy can set to optionally provide additional details.

Recommended HTTP Status Code

403

Response Only Generated by Intermediaries

This proxy error type can only be generated by an intermediary

Reference

No response

Additional Information

In modern Zero Trust Architectures where an Identity Aware Proxy is being used as an enforcement point for accessing a resource, a Posture or Compliance test is often performed (typically by integration with a 3rd party EMM device management system).
When a device is out of compliance, it will not get access to the resource behind the proxy. It would be helpful to indicate this reason in a Proxy-Status response so that endpoint software (such as the Safari browser, for example) can display a useful message to the user as to why there access was blocked.