DOCSEARCHbyAlgolia
Submit Docs

Authelia Documentation - Open-Source IAM Solution

website·Indexed Apr 12, 2026

https://www.authelia.com/

Authelia is a free, open-source modern Identity and Access Management (IAM) solution designed for security by design. It provides Single Sign-On (SSO), authorization policies, and multi-factor or passwordless authentication using WebAuthn and FIDO standards. The platform supports OpenID Connect 1.0, SAML 2.0, LDAP, and Active Directory integrations. Documentation covers configuration via config.template.yml, storage backends like PostgreSQL and SQLite3, and deployment with reverse proxies such as Traefik and NGINX. Features include identity validation, password resets, granular authorization, and compliance with OpenID Certified™ standards. The project follows Semantic Versioning 2.0.0 and is developed by a volunteer community.

Tokens
25.9K
Snippets
33
Records
250
Agent score
83%

What's inside Authelia

  1. What is Authelia?

    Authelia is an open source authentication and authorization project developed by volunteers. It is not a company or incorporated entity and has no monetization model. Individuals and organizations can contribute financially, with documentation, or with code.

  2. New Integration Documentation Section

    A new integration section replaces the previous deployment documentation. Improvements include: additional proxy support (Caddy, Traefik, Nginx, Apache, Envoy, HAProxy, OAuth2 proxy), more deployment scenarios, better organization, additional Kubernetes documentation, refreshed proxy configurations, and links to external resources. Configuration docs have been moved to integration docs where appropriate.

  3. Integration Overview: Authelia OIDC with Landscape

    This community-supported guide details integrating Authelia v4.39+ with Landscape 24.04 LTS using OpenID Connect 1.0. The integration requires configuration on both Authelia (as the OIDC provider) and Landscape (as the OIDC client). Tested versions: Authelia v4.39.18 and Landscape 24.04 LTS.

  4. Get Support via GitHub Discussions

    Use GitHub Discussions (https://github.com/authelia/authelia/discussions) for: ideas about future features where it's unclear if most users can benefit (allows voting), questions/support requests, sharing configuration or utilization ideas for non-obvious setups, and issues you're unsure are bugs. This forum is for anything that is not a confirmed bug or feature request.

  5. Project Team Members

    The Core Team and Maintainers Team include Manuel Nuñez and Brynn Crowley. The Core Team members have extra responsibilities beyond the Maintainers Team.

  7. Multiple WebAuthn credentials per user

    Authelia 4.38 introduces full support for multiple WebAuthn credentials per user. Users can register multiple security keys or devices for authentication. This feature is managed through the User Control Panel.

  8. Security Sensitive Values Overview

    Authelia marks certain configuration values as security sensitive, typically named secret, key, password, token, or certificate_chain, or suffixed with _ followed by one of these. These values should not be left directly in configuration files to prevent accidental leakage when seeking support and to improve security. Three methods exist for externalizing these values.

  9. Register multiple WebAuthn credentials

    Authelia supports registering multiple FIDO2 WebAuthn credentials (multiple security keys or Passkeys) as of version v4.38.0 and above. This allows users to have backup devices registered or use different security keys across different applications.

  10. Template-based configuration for environment variables and secrets

    Authelia supports configuration layers including files, environment variables, and secrets. The recommended approach for loading environment variables or secret files into configuration is to use templates. Templates allow loading these values directly into the configuration, formatting them appropriately, and offer a richer experience where users can manipulate files, reuse them, and manage them as part of the same system. This approach is easier to maintain than developing a custom parser.

  11. User Dashboard Control Panel features

    Two new security features are introduced: Device Registration OTP replaces the previous link-based method with a cryptographically generated One Time Code that grants temporary elevation for security-sensitive tasks. The code validity and elevation duration are configurable in the Elevated Session configuration. Additionally, TOTP registration now requires users to enter a valid TOTP code before it is saved to the database, rather than assuming successful registration.

  12. Request for security audit sponsorship

    Authelia seeks sponsors for security audits including code security analysis and penetration testing. Companies interested can help pro bono, at discounted rates, or through financial contributions. Contact the core team to discuss sponsorship opportunities.