What is Authelia?
It is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion of reverse proxies like nginx, Traefik or HAProxy to let them know whether queries should pass through. Unauthenticated users are redirected to Authelia Sign-in portal instead.
Authelia is a tool in the Authentication category of a tech stack.
Key Features
Several second factor methodsPassword reset with identity verification using email confirmationSingle-factor only authentication method availableAccess restriction after too many authentication attemptsFine-grained access control per subdomain, user, resource and networkSupport of basic authentication for endpoints protected by single factorBeta support for OpenID ConnectHighly available using a remote database and Redis as a highly available KV storeCompatible with Kubernetes ingress-nginx controller out of the box
Authelia Pros & Cons
Pros of Authelia
No pros listed yet.
Cons of Authelia
No cons listed yet.
Authelia Alternatives & Comparisons
What are some alternatives to Authelia?
Auth0
A set of unified APIs and tools that instantly enables Single Sign On and user management to all your applications.
Keycloak
It is an Open Source Identity and Access Management For Modern Applications and Services. It adds authentication to applications and secure services with minimum fuss. No need to deal with storing users or authenticating users. It's all available out of the box.
JSON Web Token
JSON Web Token is an open standard that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed.
OAuth2
It is an authorization framework that enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf.
