← Directory

Authelia

Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for web applications.

  • Other
  • Security
  • Tools & Utilities
Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for web applications. It works with reverse proxies such as nginx, Traefik, or HAProxy to verify users before requests reach services. Self-hosted users can use it to centralise access to their applications and reduce the number of separate passwords to manage.

Platform availability

Available on 4 of 9 platforms

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

78/100 Good

Maintained
100last commit 7 days ago
Popular
8929,189 GitHub stars
Easy to install
654 install platforms, install notes, Docker image
Light to run
95512 MB minimum RAM, runs on ARM
Security check
201 serious finding, 7 minor, CI, tests, OpenSSF Scorecard 9.6/10

Availability: platform listings confirmed today, links checked 16 days ago

GitHub stars
29,189
Open issues
132
Last commit
2026-10-05
Latest release
v4.39.28
License
Apache-2.0
Activity
steady

Checked 7 days ago - source: GitHub (authelia/authelia)

Resources & Compatibility

Minimum requirements: 512 MB RAM, 1 CPU core(s), 5 GB disk. ARM (e.g. Raspberry Pi) is supported.

Checked 15 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Persist the /config volume Mount a persistent Docker volume for Authelia's /config directory, such as ${PWD}/data/authelia/config:/config, so your settings survive restarts and updates. If you skip this, the container can start with default settings and you may lose your configured users, secrets, or access rules. source
  • Proxy to Authelia port 9091 Point your reverse proxy to Authelia's API port, which defaults to 9091, because that is where Authelia serves its login and authentication endpoints. If you skip this, the proxy may fail to reach Authelia and sign-in pages will not work. source
  • Set access control domains Configure access_control rules for your real domains and paths, because these rules decide which apps require login and which policy to apply. If you skip this, services may remain unprotected or users may be prompted to log in in the wrong places. source

Fetched 15 days ago - each note links to its source

Alternatives (12)

  • Auth0 - You can connect any application (written in any language or on any stack) to Auth0 and define its Connection, the method used to authentica…
  • FusionAuth - FusionAuth is an auth for any app.
  • Keycloak - Keycloak is an open-source Identity and Access Management platform for adding authentication to self-hosted applications.
  • Okta - Okta's Workforce and Customer Identity Clouds enable secure access, authentication, and automation—putting identity at the heart of busines…
  • SuperTokens MySQL - SuperTokens is an open-source, self-hosted user authentication server that adds secure login and session management to your apps.
  • Tinyauth - Tinyauth is a lightweight OpenID Connect authentication and authorization server that adds login and access controls to self-hosted apps be…
  • VoidAuth - VoidAuth is an open-source authentication platform for self-hosted applications.
  • ZITADEL - Zitadel is an open-source identity and access management platform for self-hosted services, teams, and customers.
  • authentik - Authentik is an open-source identity provider that adds flexible single sign-on, user management, and common sign-in protocol support to se…
  • casdoor - Casdoor is an open-source, multi-tenant, and cloud-native identity and access management (IAM) solution.
  • pocket-id - A simple OIDC provider that allows users to authenticate with their passkeys to your services.
  • pomerium - Pomerium is an identity-aware reverse proxy that adds authentication and access control to internal web applications, even those without bu…

Checked 12 days ago - source: AlternativeTo

Common questions

Which port should my reverse proxy point to for Authelia?

Point your reverse proxy to Authelia's API port, which defaults to 9091. That port serves the login and authentication endpoints.

How should I persist Authelia's Docker configuration?

Mount a persistent Docker volume for /config, such as ./data/authelia/config:/config. If you skip this, the container may start with default settings and you can lose configured users, secrets, or access rules.

How do I control which apps require login?

Set access_control rules for your real domains and paths. These rules decide which apps require login and which one-factor or two-factor policy applies.

What second-factor methods does Authelia support?

Authelia supports FIDO2/WebAuthn security keys, time-based one-time passwords, and Duo mobile push notifications. It also supports passwordless authentication via WebAuthn passkeys.

Can Authelia be configured for high availability?

Authelia can be made highly available by using a remote database and Redis as a highly available key-value store.

Answers sourced from github.com, github.com, github.com, github.com

Community

Collected 15 days ago - public community threads