Home / Identity & SSO / Authelia

Authelia — open source alternative

Single sign-on portal designed for reverse proxies.

Strengths

  • Lightweight Go binary; pairs cleanly with nginx, Traefik, Caddy.
  • Good 2FA flows out of the box (TOTP, WebAuthn).
  • Config is YAML — easy to version-control.

Weaknesses

  • Not a full identity provider — best when fronting existing auth.
  • SAML support lags OIDC/proxy use cases.
  • Smaller community than Keycloak.
License: Apache-2.0 Self-host difficulty: 2/5 Self-host only

Official site · Source on GitHub

Ad slot — OSS middle

Authelia is used as an alternative to

Okta

Enterprise identity, SSO and MFA cloud.

See all alternatives →

More open source in this category

Discover other projects tagged Identity & SSO on the category page.

Other open source projects in Identity & SSO

Keycloak

Enterprise-grade identity and access management from Red Hat.

License: Apache-2.0

Authentik

Modern identity provider with a polished admin UI.

License: MIT

Zitadel

Cloud-native identity platform built in Go with event sourcing.

License: Apache-2.0

Recommended reading

When self-hosting goes wrong: seven failure modes and how to avoid them

An honest retrospective on the ways self-hosted setups break — not in theory, but in practice — and the small habits that prevent most of them.

Will the open source project you depend on still exist in three years?

Bus factor, maintainer burnout, funding models, and the signals that separate OSS projects that survive from those that quietly decay.

From SaaS to self-hosted: a 30-day migration playbook

A week-by-week plan to move one service off SaaS and onto your own server without breaking your team's workflow.