authelia/authelia

Health v2 · maintenance only

Adoption not part of the score

28712 stars · 1473 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Authelia is an open-source authentication and authorization server and portal providing single sign-on (SSO) and multi-factor authentication (MFA) for web applications. It acts as an OpenID Connect 1.0 Provider (OpenID Certified) and integrates with common reverse proxies to protect apps behind them.

Use cases

• add single sign-on to self-hosted web apps behind a reverse proxy
• require two-factor authentication before accessing internal applications
• serve as an OpenID Connect provider for my apps
• protect services with LDAP-backed user authentication
• enforce per-user and per-group authorization policies
• prevent brute-force login attempts on my portal
• let users reset passwords via email validation

When to choose

• you self-host multiple web apps and want one login portal in front of them
• you need a lightweight, self-hosted IAM with MFA (TOTP, WebAuthn, YubiKey, push notifications)
• you use reverse proxies like Traefik, nginx, or Caddy and want forward-auth integration
• you want an OpenID Certified OIDC provider without commercial licensing

When to avoid

• you need a full enterprise IAM with user provisioning, SCIM, or SAML-heavy ecosystems
• you prefer a managed cloud identity provider rather than self-hosting
• your stack cannot run a small Go service or container
• you need deep directory-sync features of commercial products like Okta or Keycloak's full admin console

Facets

service · maturity active

auth authorization security middleware http-server security self-hosted web-development developer-tools go self-hosted cross-platform sso mfa openid-connect oauth2 webauthn passkeys totp ldap reverse-proxy iam two-factor-authentication yubikey docker kubernetes linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="authelia/authelia")