Authelia

Authelia is a comprehensive authentication and authorization server that provides single sign-on (SSO) and two-factor authentication for web applications. It integrates with reverse proxies to secure access to your services through a modern web portal.

Key Features

• Authentication Methods:

  • Username/password authentication
  • Two-factor authentication (2FA)
  • WebAuthn/FIDO2 support
  • Time-based One-Time Passwords (TOTP)
  • Mobile push notifications via Duo
  • Passwordless authentication with Passkeys

• Access Control:

  • Fine-grained access rules
  • Domain-based policies
  • User/group based restrictions
  • Network-level controls
  • One-factor vs two-factor policy options

• Integration Capabilities:

  • OpenID Connect 1.0 provider
  • OAuth 2.0 support
  • Reverse proxy compatibility
  • LDAP integration
  • Multiple storage backends
  • REST API access

• Security Features:

  • Brute force protection
  • Password reset with email verification
  • Session management
  • Secure cookie handling
  • TLS support
  • Security headers

Who Should Use Authelia

Authelia is ideal for:

• Organizations requiring self-hosted authentication
• Teams needing SSO capabilities
• Environments requiring 2FA/MFA
• Security-conscious deployments
• Multi-service infrastructures
• Privacy-focused implementations

Installation Requirements

• Reverse proxy (nginx, Traefik, etc.)
• Storage backend (SQL database)
• SMTP server for notifications
• Redis (optional, for high availability)
• Docker (recommended)