Authelia
Authelia is an open-source authentication and authorization server and portal that adds multi-factor authentication and single sign-on to applications.
What Authelia is
Authelia is an open-source authentication and authorization server and portal that adds multi-factor authentication and single sign-on to applications. It is an OpenID Connect 1.0 Provider and is OpenID Certified. Authentication options include username and password, one-time passwords, FIDO2 WebAuthn security keys, passkeys, and Duo mobile; passwordless authentication is supported. Administrators can set policies that determine which users and groups can reach particular resources or domains. Users can reset LDAP or internal passwords through the web interface after email validation. Deployment methods include Docker, Kubernetes, and bare metal, and listed proxy integrations include Caddy, Envoy, HAProxy, NGINX, SWAG, Skipper, and Traefik. The application directory includes tools such as 1Password, GitLab, Grafana, Home Assistant, and Nextcloud. Authelia is free under the Apache 2.0 license, with no monetization model. It is maintained by open-source developers in their free time.
Good
- Free and open-source under Apache 2.0
- Supports passkeys, security keys, and one-time passwords
- Policies control access by user and group
- Offers Docker, Kubernetes, and bare-metal deployment
Watch out
- No adaptive access capability
- Maintained by developers in their free time
Who it suits
Authelia suits organizations or administrators seeking self-hosted authentication for applications, with control over access by user and group. It may fit environments using its listed authentication factors, proxies, or application integrations.
Verdict
Authelia combines single sign-on, multi-factor authentication, and resource-level authorization in a free, self-hosted project. Check its supported integrations and deployment options against your environment.
Plans and prices
From Authelia's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Authelia | Free | Open-source Apache 2.0 licensed · No monetization model |
The facts
Each one read from Authelia's own pages, with the date it was checked.
What it does
- Access control
- Authorization policies let administrators control which users and groups can access specific resources or domains.checked 9 Oct 2026
- Authentication
- It supports passkeys, one-time passwords, mobile push notifications, and WebAuthn as authentication methods.checked 9 Oct 2026
- Deployment
- The documented deployment methods are Docker, Kubernetes, and bare metal.checked 9 Oct 2026
- Identity protocol
- Authelia is an OpenID Connect 1.0 Provider and is OpenID Certified.checked 9 Oct 2026
- Monetization
- The project states that it has no monetization model and accepts voluntary financial or time contributions.checked 9 Oct 2026
- Password reset
- Users can reset LDAP or internal passwords through the web interface using email validation.checked 9 Oct 2026
- Project status
- Authelia is maintained by open-source developers in their free time and is not a company or incorporated entity.checked 9 Oct 2026
- Proxy integrations
- The integration documentation lists Caddy, Envoy, HAProxy, NGINX, SWAG, Skipper, and Traefik among supported proxies.checked 9 Oct 2026
- Purpose
- Authelia is an open-source authentication and authorization server and portal providing multi-factor authentication and single sign-on for applications.checked 9 Oct 2026
- Security reporting
- Authelia follows coordinated vulnerability disclosure and asks reporters to contact the project privately about vulnerabilities.checked 9 Oct 2026
- Support
- The project asks users to consult its documentation and provides contact options for security vulnerability reports.checked 9 Oct 2026
Where it runs
- Application integrations
- The integration directory includes applications such as 1Password, GitLab, Grafana, Home Assistant, and Nextcloud.checked 9 Oct 2026
Alternatives to Authelia
- 1
Duo Mobile
Free planAndroidiOS7.7From $3 a month - 2
HYPR Authenticate
AndroidiOSWebAPI7.5From $3 a month - 3
LoginTC
Free planAndroidiOSWebAPI7.5From $36 a year - 4
IBM Verify
AndroidiOSWebAPI7.3From $15,899.29 a year - 5
OpenOTP Authentication Server
Free planAndroidiOSLinuxmacOS7.3Free plan - 6
Protectimus MFA
Free planAndroidiOSWebAPI7.3From $2 a month