Authelia

Single sign-on and 2FA gateway that sits in front of all your self-hosted apps.

The Editorial Verdict

The piece that makes self-hosting feel professional. Configure Authelia once and every app behind your reverse proxy gets a login page, session management, and optional 2FA. The configuration is YAML-heavy and takes a weekend to get right. Once it's running, it's invisible until you need it, which is the point.

Core Capabilities

  • SSO Gateway
  • 2FA Enforcement
  • Reverse Proxy Ready

Replacing Proprietary Software

Authelia is designed as an open, verifiable replacement for Okta, Duo. Migrating to it gives you direct control over your infrastructure, eliminates recurring subscription fees, and prevents proprietary platform lock-in.