Authelia

What is Authelia?

Authelia sits in front of your self-hosted apps and requires visitors to authenticate once, then lets them through to everything behind it. It supports one-time passwords, WebAuthn security keys and push approval, with per-rule policies so an internal dashboard can be wide open while an admin panel demands two factors. It integrates with common reverse proxies rather than replacing them.

Best for

Putting one login and second factor in front of many self-hosted apps

Replaces

• Okta
• Auth0
• Google Workspace SSO

Key features

• Single sign-on across everything behind your reverse proxy
• TOTP, WebAuthn security keys and push-based second factors
• Fine-grained access rules per URL, user or group
• Works with Nginx, Traefik, Caddy and HAProxy

How to deploy

• Docker
• Kubernetes
• Linux packages

Project health

• GitHub stars: 29,150
• Last code push: 2026-10-01
• Open issues: 127
• Status: actively developed

Figures pulled from the GitHub API and refreshed periodically.