AC: - Validate access token by using `auth_jwt` directives before sending it to proxy server - Test w/ the following identity providers (IdPs): - Amazon Cognito - Auth0 - Azure AD - Keycloak - Okta - OneLogin - Ping Identity