IAM

Authelia is an open-source Two-factor Authentication System with single sign-on (SSO)

Hazem Abbas

Nov 2, 2023 — 2 min read

Table of Content

Authelia is a highly regarded open-source authentication and authorization server. It offers an advanced level of security, providing two-factor authentication, which is a method of confirming users' claimed identities by using a combination of two different factors.

This ensures that your data and applications are only accessible to the intended users. Moreover, Authelia simplifies the login process by offering single sign-on capabilities for applications. This means that users can log in once and gain access to all systems without being prompted to log in again at each of them. It's an excellent solution for enhancing and streamlining your system's security measures.

Features

This is a list of the key features of Authelia:

Several second factor methods:
- Security Keys that support FIDO2 WebAuthn with devices like a YubiKey.
- Time-based One-Time password with compatible authenticator applications.
- Mobile Push Notifications with Duo.
Password reset with identity verification using email confirmation.
Access restriction after too many invalid authentication attempts.
Fine-grained access control using rules which match criteria like subdomain, user, user group membership, request uri, request method, and network.
Choice between one-factor and two-factor policies per-rule.
Support of basic authentication for endpoints protected by the one-factor policy.
Highly available using a remote database and Redis as a highly available KV store.
Compatible with Traefik out of the box using the ForwardAuth middleware.
Curated configuration from LinuxServer via their Swag container as well as a guide.
Compatible with Caddy using the forward_auth directive.
Kubernetes Support:
- Compatible with several Kubernetes ingress controllers:
- Beta support for installing via Helm using our Charts.
Beta support for OpenID Connect.