Authelia

Apache-2.0 reverse-proxy SSO, not a full IdP like authentik

Auth / Auth · Apache-2.0 · 29.4k

Reviewed 2026-09-03 · last push 2026-10-21 · repo checked 2026-10-21

What's Good

Apache-2.0. OSS self-host, no product pricing page. OpenID Connect 1.0 Provider (OpenID Certified). Passkeys, TOTP, WebAuthn, policies. Companion for Traefik, Caddy, nginx. Go + React, tiny container.

The Catch

You run it behind Traefik/Caddy/nginx. Thin proxy SSO, not a full IdP like authentik (flows, LDAP/RADIUS/SAML, enterprise/). No hosted Authelia Cloud. Ops, the user store, and the proxy stay yours.

Verdict

Apache-2.0 proxy SSO. Free as in you operate the reverse proxy.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/authelia.svg)](https://stackgems.com/gems/authelia)

HTML

<a href="https://stackgems.com/gems/authelia"><img src="https://stackgems.com/badge/authelia.svg" alt="Authelia reviewed on Stack Gems" height="20"></a>

Next.js →

Related