# Authelia

> Apache-2.0 reverse-proxy SSO, not a full IdP like authentik

**Category:** Next.js  
**Pricing:** open-source  
**URL:** https://www.authelia.com  
**GitHub:** https://github.com/authelia/authelia  
**Added:** 2026-09-03

---

## The Hook

Authelia is the SSO portal you put behind Traefik when authentik is the other mountain.

## What's Good

Apache-2.0. OSS self-host, no product pricing page. OpenID Connect 1.0 Provider (OpenID Certified). Passkeys, TOTP, WebAuthn, policies. Companion for Traefik, Caddy, nginx. Go + React, tiny container.

## The Catch

You run it behind Traefik/Caddy/nginx. Thin proxy SSO, not a full IdP like authentik (flows, LDAP/RADIUS/SAML, enterprise/). No hosted Authelia Cloud. Ops, the user store, and the proxy stay yours.

## Verdict

Apache-2.0 proxy SSO. Free as in you operate the reverse proxy.