Authelia

Authelia is a powerful authentication and authorization server that acts as a protective gateway between your web applications and users. It provides enterprise-level security features including multi-factor authentication, single sign-on, and fine-grained access control policies, all while being completely self-hosted and open source.

Built with Go for performance and reliability, Authelia integrates seamlessly with reverse proxies like NGINX, Traefik, and HAProxy to protect your entire application stack. It supports multiple authentication backends including LDAP, Active Directory, and local file-based user databases, making it adaptable to existing infrastructure.

The platform offers a comprehensive suite of second-factor authentication methods including TOTP, WebAuthn/FIDO2, passkeys, Duo push notifications, and hardware security keys like YubiKey. As an OpenID Certified™ provider, it delivers standards-compliant OAuth2 and OpenID Connect flows, enabling secure integration with modern applications and APIs.

Whether you're running containerized workloads in Kubernetes or traditional server deployments, Authelia provides the security layer your applications need without vendor lock-in or recurring costs. Its policy engine allows you to define sophisticated access rules based on user groups, networks, resources, and authentication levels.