Authelia
Provides single sign-on and multi-factor authentication for web applications by integrating with a reverse proxy to enforce access policies
It takes care to curate a safe software space. Help us do more.
&
| + | Single Sign-On | Grants one authenticated session access across every subdomain protected by the same instance. |
|---|---|---|
| + | Passkey Login | Allows passwordless sign-in using WebAuthn-based passkeys. |
| + | Security Key Support | Authenticates a second factor with FIDO2 WebAuthn hardware keys such as a YubiKey. |
| + | TOTP Authentication | Accepts time-based one-time passcodes generated by a compatible authenticator app as a second factor. |
| + | Mobile Push Approval | Sends a push notification through Duo that a user can approve to complete sign-in. |
| + | OpenID Connect Provider | Issues OpenID Connect tokens as a certified provider so third-party applications can delegate login to it. |
| + | Fine-Grained Access Control | Matches rules against subdomain, user, group membership, request method, network, and resource path to decide whether to allow a request. |
| + | Brute-Force Regulation | Locks an account out for a period after too many failed login attempts. |
| + | Self-Service Password Reset | Lets a user reset a forgotten password after confirming identity through an emailed link. |
...6 more features/limitations. Contact us to get a complete list of features and system requirements.
System Requirements
| # | Minimum |
|---|---|
| 1 | 30MB |
| 2 | 20MB |
Ratings
3.705
| Start with Identity | 3.75 based on professional's opinion |
|---|
Written in
Go, TypeScript
Initial Release
2016-12-18
Repository
License
Categories
Alternatives
Notes
- Authelia is a companion service, not a standalone consumer app: it must sit behind a reverse proxy (nginx, Traefik, Caddy, Envoy, Skipper, or HAProxy) to function.
- The project has no official subreddit or Twitter/X account; community support happens through GitHub Discussions, Discord, and Matrix. more info
- Configuration is done entirely through YAML files; there is no administrative web UI.