Geo secondary proxying testing SSO

We should test secondary proxying with SSO, LDAP, alternative authentication methods, consider and document any gotchas, as part of &6418.