A proxy that gates access based on authenticated identity and context before forwarding requests to applications.