Sign in
Stable

CMS Admin Gateway guides

Protect WordPress, Drupal, Magento and ERP/SAP-style admin portals behind a managed BusinessProxy session.

Steps

Follow these in order.

  1. 01How the gateway worksDirect creates a host-only local session on the verified WordPress origin. Alias relays requests through BusinessProxy App Gateway. The plugin default-denies protected admin paths.
  2. 02Add the site and verify ownershipIn workspace settings, add the CMS site. Public DNS uses HTTP/DNS proof; internal sites use a connector.
  3. 03WordPress plugin setupInstall and connect the plugin, validate Monitor mode and recovery, then enable enforcement. Protection covers wp-admin and wp-login.
  4. 04Direct session lifetime and renewalProtected requests move the idle deadline up to a fixed absolute expiry. Heartbeats and the two-minute browser proxy lease do not extend Direct access.
  5. 05Drupal, Magento and ERP portal reviewUse a reviewed Private App / connector path for self-hosted admin portals until a dedicated module is available.
  6. 06Joomla plugin setupProtects /administrator; emergency access for recovery.
  7. 07Monitor mode, enforcement and emergency accessMonitor mode logs without blocking; enforcement requires a valid session. Keep a signed emergency link for recovery.

Reference

Implementation details for setup and review.