An OpenSearch SSO redirect loop appears after proxy hardening

A reverse proxy is hardened and later users become trapped in a dashboard login loop even though the identity provider is healthy.