# Authelia > Free Open-Source Software Modern IAM Solution - [Configuration](https://www.authelia.com/configuration/): An overview of the Authelia configuration documentation covering all available settings for authentication, authorization, identity management, and sessions. - [Contributing](https://www.authelia.com/contributing/): Information on contributing to the Authelia project including development, documentation, financial support, translation contributions, and community guidance. - [Information](https://www.authelia.com/information/): General information about the Authelia project including details about the team, sponsors, contact methods, project governance, and frequently asked questions. - [Integration](https://www.authelia.com/integration/): An overview of the Authelia integration documentation including guides for proxies, Kubernetes, LDAP, OpenID Connect 1.0, deployment, and trusted header SSO. - [Overview](https://www.authelia.com/overview/): An overview of Authelia including its authentication, authorization, and security features as an open-source identity and access management server and portal. - [Policies](https://www.authelia.com/policies/): Authelia project policies including the privacy policy, security vulnerability disclosure procedures, code of conduct, and semantic versioning practices. - [Reference](https://www.authelia.com/reference/): This section contains reference documentation for Authelia including guides, integration support tables, architecture decision records, and project processes. - [Roadmap](https://www.authelia.com/roadmap/): The Authelia roadmap describing planned, in-progress, and completed features with implementation details and links to relevant issues and pull requests. - [Blog](https://www.authelia.com/blog/): The Authelia blog featuring release notes, technical articles, setup guides, and announcements for the open-source authentication and authorization server. ## Configuration > An overview of the Authelia configuration documentation covering all available settings for authentication, authorization, identity management, and sessions. - [Prologue](https://www.authelia.com/configuration/prologue/): The Authelia configuration prologue section covering introductory information, common syntax, configuration key migration, and security sensitive values. - [Methods](https://www.authelia.com/configuration/methods/): Reference documentation for the various Authelia configuration methods including YAML configuration files, environment variables, and the secrets method. - [First Factor](https://www.authelia.com/configuration/first-factor/): Reference documentation for configuring the Authelia first factor authentication backend including LDAP directory servers and file-based user providers. - [Second Factor](https://www.authelia.com/configuration/second-factor/): Reference documentation for configuring Authelia second factor authentication methods including TOTP, WebAuthn security keys, and Duo mobile push notification. - [Security](https://www.authelia.com/configuration/security/): Reference documentation for configuring Authelia security settings including access control rules, brute-force regulation, and password policy enforcement. - [Identity Validation](https://www.authelia.com/configuration/identity-validation/): Reference documentation for configuring Authelia identity validation methods including elevated session and reset password verification procedure settings. - [Session](https://www.authelia.com/configuration/session/): Reference documentation for configuring Authelia session management including cookie settings, domain configuration, the Redis session provider, and timeouts. - [Storage](https://www.authelia.com/configuration/storage/): Reference documentation for configuring Authelia storage backends including SQLite, MySQL, MariaDB, and PostgreSQL database providers for persistent data. - [Notifications](https://www.authelia.com/configuration/notifications/): Reference documentation for configuring Authelia notification settings including the SMTP email provider and filesystem notification provider for testing use. - [Telemetry](https://www.authelia.com/configuration/telemetry/): Reference documentation for configuring Authelia telemetry settings including the Prometheus metrics exporter for monitoring and observability purposes. - [Identity Providers](https://www.authelia.com/configuration/identity-providers/): Reference documentation for configuring Authelia identity provider functionality including the OpenID Connect 1.0 Provider role and client registrations. - [Definitions](https://www.authelia.com/configuration/definitions/): Reference documentation for configuring reusable definitions in Authelia including network and user attribute definitions used across the configuration. - [Miscellaneous](https://www.authelia.com/configuration/miscellaneous/): Reference documentation for configuring miscellaneous Authelia settings including logging, NTP, server, privacy policy, and other general option configurations. ### Prologue > The Authelia configuration prologue section covering introductory information, common syntax, configuration key migration, and security sensitive values. - [Prologue](https://www.authelia.com/configuration/prologue/introduction/): An introduction to configuring Authelia covering the documentation structure, configuration validation, environment variable overrides, and option formatting. - [Security Sensitive Values](https://www.authelia.com/configuration/prologue/security-sensitive-values/): A guide to securely configuring Authelia security sensitive values such as secrets, passwords, and keys using the secrets system or environment variables. - [Common](https://www.authelia.com/configuration/prologue/common/): Reference guide for common Authelia configuration elements including address syntax, TLS settings, duration notation, and reusable dictionary references. - [Migration](https://www.authelia.com/configuration/prologue/migration/): Information regarding Authelia configuration key migrations between versions including automatic migration behavior, deprecation notices, and change history. ### Methods > Reference documentation for the various Authelia configuration methods including YAML configuration files, environment variables, and the secrets method. - [Methods](https://www.authelia.com/configuration/methods/introduction/): An introduction to the Authelia configuration methods explaining the layered model with files, environment variables, and secrets and their precedence. - [Files](https://www.authelia.com/configuration/methods/files/): Configuring Authelia using YAML, TOML, or JSON configuration files including file discovery, loading behavior, multiple file support, template filters, and search path rules. - [Environment](https://www.authelia.com/configuration/methods/environment/): Configuring Authelia using environment variables including the AUTHELIA_ prefix convention, mapping rules, and Kubernetes-specific deployment considerations. - [Secrets](https://www.authelia.com/configuration/methods/secrets/): Configuring Authelia using the secrets method to securely provide passwords and other sensitive values via file references and environment variable pointers. ### First Factor > Reference documentation for configuring the Authelia first factor authentication backend including LDAP directory servers and file-based user providers. - [First Factor](https://www.authelia.com/configuration/first-factor/introduction/): An introduction to configuring Authelia first factor authentication including the authentication backend, password reset, and password change options. - [LDAP](https://www.authelia.com/configuration/first-factor/ldap/): Configuring the Authelia LDAP first factor authentication provider including server connection, TLS settings, user and group search filters, and attributes. - [File](https://www.authelia.com/configuration/first-factor/file/): Configuring the Authelia file-based first factor authentication provider including user database path, search options, password hashing, and watch settings. ### Second Factor > Reference documentation for configuring Authelia second factor authentication methods including TOTP, WebAuthn security keys, and Duo mobile push notification. - [Second Factor](https://www.authelia.com/configuration/second-factor/introduction/): An introduction to configuring Authelia second factor authentication with available methods including Time-based One-Time Passwords, WebAuthn, and Duo Push. - [Duo / Mobile Push](https://www.authelia.com/configuration/second-factor/duo/): Configuring the Authelia Duo mobile push notification second factor method including the API hostname, integration key, secret key, and self-enrollment. - [Time-based One-Time Password](https://www.authelia.com/configuration/second-factor/time-based-one-time-password/): Configuring the Authelia Time-based One-Time Password second factor method including the issuer, algorithm, digit count, period, and allowed skew settings. - [WebAuthn](https://www.authelia.com/configuration/second-factor/webauthn/): Configuring the Authelia WebAuthn second factor method including passkey login, attestation preferences, device filtering, and FIDO2 metadata service. ### Security > Reference documentation for configuring Authelia security settings including access control rules, brute-force regulation, and password policy enforcement. - [Security](https://www.authelia.com/configuration/security/introduction/): An introduction to configuring the Authelia security settings covering access control, regulation, password policy, and other security-related configuration. - [Access Control](https://www.authelia.com/configuration/security/access-control/): Configuring the Authelia access control rules including domain matching, user and group policies, network conditions, URI patterns, and CEL expressions. - [Regulation](https://www.authelia.com/configuration/security/regulation/): Configuring the Authelia regulation system for brute-force protection including the maximum retries, find time window, ban duration, and regulation modes. - [Password Policy](https://www.authelia.com/configuration/security/password-policy/): Configuring the Authelia password policy enforcement including standard policy requirements for length and character types and the zxcvbn strength scoring mode. ### Identity Validation > Reference documentation for configuring Authelia identity validation methods including elevated session and reset password verification procedure settings. - [Identity Validation](https://www.authelia.com/configuration/identity-validation/introduction/): An introduction to configuring Authelia identity validation methods used to verify user identity before performing privileged actions or password resets. - [Elevated Session](https://www.authelia.com/configuration/identity-validation/elevated-session/): Configuring the Authelia elevated session identity validation including one-time code lifespan, elevation duration, characters, and second factor options. - [Reset Password](https://www.authelia.com/configuration/identity-validation/reset-password/): Configuring the Authelia reset password identity validation including the JWT secret, token lifespan, signing algorithm, and custom URL redirect settings. ### Session > Reference documentation for configuring Authelia session management including cookie settings, domain configuration, the Redis session provider, and timeouts. - [Session](https://www.authelia.com/configuration/session/introduction/): Configuring the Authelia session cookies including the secret, cookie name, domain settings, expiration, inactivity timeout, and remember me duration. - [Redis](https://www.authelia.com/configuration/session/redis/): Configuring the Authelia Redis session storage provider including connection settings, TLS options, high availability with Sentinel, and connection pooling. ### Storage > Reference documentation for configuring Authelia storage backends including SQLite, MySQL, MariaDB, and PostgreSQL database providers for persistent data. - [Storage](https://www.authelia.com/configuration/storage/introduction/): An introduction to configuring the Authelia storage backend including the encryption key, available database providers, and shared configuration options. - [Migrations](https://www.authelia.com/configuration/storage/migrations/): Reference documentation for Authelia storage schema migrations including the schema version history, automatic upgrades, and manual downgrade procedures. - [PostgreSQL](https://www.authelia.com/configuration/storage/postgres/): Configuring the Authelia PostgreSQL storage provider including the server address, database name, schema, credentials, TLS settings, and connection options. - [SQLite3](https://www.authelia.com/configuration/storage/sqlite/): Configuring the Authelia SQLite3 local storage provider including the database file path, primarily suited for testing and single-instance deployments. - [MySQL](https://www.authelia.com/configuration/storage/mysql/): Configuring the Authelia MySQL and MariaDB storage provider including the server address, database name, credentials, TLS settings, and connection timeout. ### Notifications > Reference documentation for configuring Authelia notification settings including the SMTP email provider and filesystem notification provider for testing use. - [Notifications](https://www.authelia.com/configuration/notifications/introduction/): An introduction to configuring Authelia notification settings including the available providers, startup validation checks, and custom notification templates. - [SMTP](https://www.authelia.com/configuration/notifications/smtp/): Configuring the Authelia SMTP notification settings including the server connection, TLS options, authentication credentials, and email sender configuration. - [File System](https://www.authelia.com/configuration/notifications/file/): Configuring the Authelia filesystem notification provider which saves notifications to a file primarily intended for development and testing environment usage. - [Events](https://www.authelia.com/configuration/notifications/events/): A reference of every notification Authelia sends. ### Telemetry > Reference documentation for configuring Authelia telemetry settings including the Prometheus metrics exporter for monitoring and observability purposes. - [Telemetry](https://www.authelia.com/configuration/telemetry/introduction/): An introduction to configuring Authelia telemetry settings explaining the available Prometheus metrics collection capabilities which are disabled by default. - [Metrics](https://www.authelia.com/configuration/telemetry/metrics/): Configuring the Authelia Prometheus metrics exporter including the listen address, buffer sizes, read and write timeouts, and enabling the metrics endpoint. ### Identity Providers > Reference documentation for configuring Authelia identity provider functionality including the OpenID Connect 1.0 Provider role and client registrations. - [Identity Providers](https://www.authelia.com/configuration/identity-providers/introduction/): An introduction to configuring Authelia as an identity provider with information about the supported OpenID Connect 1.0 Provider role and implementation. - [OpenID Connect 1.0](https://www.authelia.com/configuration/identity-providers/openid-connect/): Reference documentation for configuring the Authelia OpenID Connect 1.0 identity provider including provider settings, client registrations, and options. ### Definitions > Reference documentation for configuring reusable definitions in Authelia including network and user attribute definitions used across the configuration. - [User Attributes](https://www.authelia.com/configuration/definitions/user-attributes/): Configuring the Authelia user attribute definitions which allow defining custom user attributes using CEL expressions for use in OpenID Connect 1.0 claims. - [Definitions](https://www.authelia.com/configuration/definitions/introduction/): An introduction to configuring the Authelia reusable definitions section which allows defining values that can be referenced elsewhere in the configuration. - [Network](https://www.authelia.com/configuration/definitions/network/): Configuring the Authelia network definitions section which allows defining reusable named network lists of IP addresses and CIDR notation address ranges. ### Miscellaneous > Reference documentation for configuring miscellaneous Authelia settings including logging, NTP, server, privacy policy, and other general option configurations. - [Miscellaneous](https://www.authelia.com/configuration/miscellaneous/introduction/): Configuring miscellaneous Authelia settings including the certificates directory, default redirection URL, theme selection, and privacy policy consent option. - [Privacy Policy](https://www.authelia.com/configuration/miscellaneous/privacy-policy/): Configuring the Authelia privacy policy display settings including enabling the privacy policy link, requiring user acceptance, and setting the policy URL. - [Server](https://www.authelia.com/configuration/miscellaneous/server/): Configuring the Authelia internal web server including the listen address, TLS certificates, security headers, buffer sizes, timeouts, and endpoint settings. - [Server Endpoint Rate Limits](https://www.authelia.com/configuration/miscellaneous/server-endpoint-rate-limits/): Configuring Authelia server endpoint rate limits including bucket-based rate limiting for password resets, second factor attempts, and session elevation. - [Server Authz Endpoints](https://www.authelia.com/configuration/miscellaneous/server-endpoints-authz/): Configuring the Authelia server authorization endpoints including ForwardAuth, ExtAuthz, AuthRequest, and Legacy implementations with authentication strategies. - [NTP](https://www.authelia.com/configuration/miscellaneous/ntp/): Configuring the Authelia NTP time synchronization check including the server address, NTP version, maximum desync tolerance, and startup failure disable option. - [Log](https://www.authelia.com/configuration/miscellaneous/logging/): Configuring the Authelia logging settings including log level, output format, file path destination, and the keep stdout option for log file management. ## Contributing > Information on contributing to the Authelia project including development, documentation, financial support, translation contributions, and community guidance. - [Prologue](https://www.authelia.com/contributing/prologue/): The prologue section for contributing to Authelia covering the introduction, documentation contributions, financial support, and translation process guidance. - [Development](https://www.authelia.com/contributing/development/): Information on contributing to Authelia via development including environment setup, building and testing the application, and running integration test suites. - [Guidelines](https://www.authelia.com/contributing/guidelines/): Guidelines for contributing to the Authelia project covering code style, commit messages, pull requests, testing, documentation standards, and accessibility. ### Prologue > The prologue section for contributing to Authelia covering the introduction, documentation contributions, financial support, and translation process guidance. - [Prologue](https://www.authelia.com/contributing/prologue/introduction/): An introduction to contributing to the Authelia project via GitHub issues, discussions, development, documentation, financial support, and community efforts. - [Financial](https://www.authelia.com/contributing/prologue/financial/): Information on contributing financially to the Authelia project via Open Collective including how funds are used, sponsorship tiers, and recognition benefits. - [Documentation Contributions](https://www.authelia.com/contributing/prologue/documentation-contributions/): Information on contributing documentation to the Authelia project including how to edit pages, run the site locally, and understand the front matter fields. - [Translations](https://www.authelia.com/contributing/prologue/translations/): Information on contributing translations to the Authelia project via the Crowdin platform including adding new languages, local overrides, and community help. ### Development > Information on contributing to Authelia via development including environment setup, building and testing the application, and running integration test suites. - [Development](https://www.authelia.com/contributing/development/introduction/): An introduction to contributing to the Authelia project via development covering the discussion process, guidelines, and licensing under the repository license. - [Environment](https://www.authelia.com/contributing/development/environment/): A guide to configuring the Authelia development environment including prerequisites for Go, Node.js, Docker, and the development context bootstrap process. - [Building and Testing](https://www.authelia.com/contributing/development/build-and-test/): A guide to building and testing Authelia from source covering unit tests, integration suites, and manually building the Go binary with the React frontend. - [Integration Suites](https://www.authelia.com/contributing/development/integration-suites/): A guide to Authelia's integration suites which provide Docker-based virtual environments for manual testing and automated integration tests with go-rod and Chrome CDP. ### Guidelines > Guidelines for contributing to the Authelia project covering code style, commit messages, pull requests, testing, documentation standards, and accessibility. - [Guidelines](https://www.authelia.com/contributing/guidelines/introduction/): An introduction to the Authelia contribution guidelines covering automated enforcement, general recommendations, and expectations for pull request submissions. - [Database Schema](https://www.authelia.com/contributing/guidelines/database-schema/): Authelia development database schema guidelines covering naming conventions for tables, columns, foreign keys, unique keys, primary keys, and index creation. - [Documentation](https://www.authelia.com/contributing/guidelines/documentation/): Authelia development documentation guidelines covering the use of example domains, TLS certificate handling, private key formatting, and content conventions. - [Pull Request](https://www.authelia.com/contributing/guidelines/pull-request/): Authelia development pull request guidelines covering the squash merge policy, force push restrictions, maintainer review process, and acceptance requirements. - [Testing](https://www.authelia.com/contributing/guidelines/testing/): Authelia development testing guidelines covering coverage expectations, test naming conventions, and requirements for bug fix and feature contributions. - [Commit Message](https://www.authelia.com/contributing/guidelines/commit-message/): Authelia development commit message guidelines covering the conventional commit format with required types, scopes, header, body, and footer structure. - [Accessibility](https://www.authelia.com/contributing/guidelines/accessibility/): Authelia development accessibility guidelines covering frontend translation support, responsive design for desktop, tablet, and mobile devices, plus usability. - [Style](https://www.authelia.com/contributing/guidelines/style/): Authelia development style guidelines covering line length, error strings, configuration documentation layout, and storage migration naming convention details. ## Information > General information about the Authelia project including details about the team, sponsors, contact methods, project governance, and frequently asked questions. - [About](https://www.authelia.com/information/about/): About the Authelia project and its team of open-source developers who voluntarily contribute to the authentication and authorization server in their spare time. - [Contact](https://www.authelia.com/information/contact/): Contact information for the Authelia team including GitHub Discussions, Matrix chat, email, security vulnerability reporting, and team member contact details. ## Integration > An overview of the Authelia integration documentation including guides for proxies, Kubernetes, LDAP, OpenID Connect 1.0, deployment, and trusted header SSO. - [Prologue](https://www.authelia.com/integration/prologue/): The prologue section for Authelia integration documentation covering introductory information, getting started guides, and an integration architecture overview. - [Deployment](https://www.authelia.com/integration/deployment/): An overview of Authelia deployment options including Docker containers, Kubernetes clusters, bare-metal daemon installations, and deployment automation methods. - [Proxies](https://www.authelia.com/integration/proxies/): An overview of integrating Authelia with supported reverse proxies including Traefik, Caddy, Envoy, NGINX, HAProxy, SWAG, and Skipper with setup examples. - [Trusted Header SSO](https://www.authelia.com/integration/trusted-header-sso/): An overview of integrating Authelia with applications that support Trusted Header SSO for seamless single sign-on via reverse proxy response header values. - [Kubernetes](https://www.authelia.com/integration/kubernetes/): An overview of integrating Authelia with Kubernetes including ingress controllers, Helm chart deployment, secrets management, and proxy configuration options. - [Guides](https://www.authelia.com/integration/guides/): A collection of integration guides for Authelia covering various use cases including securing applications with basic authentication and API access patterns. - [OpenID Connect 1.0](https://www.authelia.com/integration/openid-connect/): An overview of integrating the Authelia OpenID Connect 1.0 Provider with OpenID Connect 1.0 Relying Parties, client applications, and single sign-on flows. - [LDAP](https://www.authelia.com/integration/ldap/): An overview of integrating Authelia with LDAP directory servers including guides for Active Directory, FreeIPA, GLAuth, LLDAP, and RFC2307bis implementations. ### Prologue > The prologue section for Authelia integration documentation covering introductory information, getting started guides, and an integration architecture overview. - [Prologue](https://www.authelia.com/integration/prologue/introduction/): An introduction into integrating Authelia within your architecture covering the various integration methods, non-exhaustive examples, and proxy configuration. - [Get started](https://www.authelia.com/integration/prologue/get-started/): A getting started guide for Authelia covering prerequisites, important deployment requirements, links to essential configuration sections, and initial setup. ### Deployment > An overview of Authelia deployment options including Docker containers, Kubernetes clusters, bare-metal daemon installations, and deployment automation methods. - [Deployment](https://www.authelia.com/integration/deployment/introduction/): An introduction to deploying Authelia covering the three main methods of Docker containers, Kubernetes clusters, and bare-metal with getting started guidance. - [Automation](https://www.authelia.com/integration/deployment/automation/): A guide on automating the deployment of Authelia covering static YAML configuration, environment variables, secrets, and integration with tools like Ansible. - [Docker](https://www.authelia.com/integration/deployment/docker/): A guide on deploying Authelia using Docker containers including available image names, container configuration options, volume mount considerations, and setup. - [Kubernetes](https://www.authelia.com/integration/deployment/kubernetes/): A redirect page for the dedicated Kubernetes deployment documentation covering integration of Authelia with Kubernetes cluster environments and ingress setup. - [Bare-Metal](https://www.authelia.com/integration/deployment/bare-metal/): A guide on deploying Authelia on bare-metal as a daemon including systemd unit file examples, instructions for running behind a reverse proxy, and setup steps. ### Proxies > An overview of integrating Authelia with supported reverse proxies including Traefik, Caddy, Envoy, NGINX, HAProxy, SWAG, and Skipper with setup examples. - [Proxies](https://www.authelia.com/integration/proxies/introduction/): An integration guide for Authelia and several supported reverse proxies covering required headers, configuration approaches, and deployment consideration tips. - [Support](https://www.authelia.com/integration/proxies/support/): A support matrix for Authelia detailing feature compatibility with supported reverse proxies including both standard and Kubernetes integration status details. - [Forwarded Headers](https://www.authelia.com/integration/proxies/forwarded-headers/): An introduction into the importance of forwarded headers coming from trusted sources and configuring reverse proxies to ensure header integrity and security. - [Caddy](https://www.authelia.com/integration/proxies/caddy/): An integration guide for Authelia and the Caddy reverse proxy including ForwardAuth middleware configuration examples, deployment tips, and important caveats. - [Envoy](https://www.authelia.com/integration/proxies/envoy/): An integration guide for Authelia and the Envoy reverse proxy including external authorization filter configuration examples, deployment tips, and key caveats. - [HAProxy](https://www.authelia.com/integration/proxies/haproxy/): An integration guide for Authelia and the HAProxy reverse proxy including ForwardAuth configuration examples, deployment considerations, and important caveats. - [NGINX](https://www.authelia.com/integration/proxies/nginx/): An integration guide for Authelia and the NGINX reverse proxy including the auth_request module configuration examples, deployment considerations, and caveats. - [SWAG](https://www.authelia.com/integration/proxies/swag/): An integration guide for Authelia and the SWAG reverse proxy which is an NGINX-based container with bundled configurations for easy and streamlined proxy setup. - [NGINX Proxy Manager](https://www.authelia.com/integration/proxies/nginx-proxy-manager/): An integration guide for Authelia and NGINX Proxy Manager which is an NGINX-based reverse proxy with a web configuration user interface for easier management. - [Skipper](https://www.authelia.com/integration/proxies/skipper/): An integration guide for Authelia and the Skipper reverse proxy which is likely supported but currently under construction, seeking contributors and untested. - [Traefik](https://www.authelia.com/integration/proxies/traefik/): An integration guide for Authelia and the Traefik reverse proxy including ForwardAuth middleware configuration examples, deployment tips, and important caveats. - [Traefik v1](https://www.authelia.com/integration/proxies/traefikv1/): A legacy integration guide for Authelia and the Traefik v1 reverse proxy including ForwardAuth configuration examples and important deprecation notes. ### Trusted Header SSO > An overview of integrating Authelia with applications that support Trusted Header SSO for seamless single sign-on via reverse proxy response header values. - [Trusted Header SSO](https://www.authelia.com/integration/trusted-header-sso/introduction/): An introduction into integrating Authelia with applications using Trusted Header SSO authentication including available response headers and key terminology. - [Seerr](https://www.authelia.com/integration/trusted-header-sso/seerr/): Trusted Header SSO Integration for Seerr - [Paperless](https://www.authelia.com/integration/trusted-header-sso/paperless/): A guide on integrating Authelia with Paperless-ngx via the Trusted Header SSO authentication method including proxy and application configuration with examples. - [Jira](https://www.authelia.com/integration/trusted-header-sso/jira/): A guide on integrating Authelia with Jira via the Trusted Header SSO authentication method including proxy configuration examples, tested versions, and caveats. - [Organizr](https://www.authelia.com/integration/trusted-header-sso/organizr/): A guide on integrating Authelia with Organizr via the Trusted Header SSO authentication method including configuration examples, tested versions, and usage. - [Seafile](https://www.authelia.com/integration/trusted-header-sso/seafile/): A guide on integrating Authelia with Seafile via the Trusted Header SSO authentication method including proxy configuration examples, tested versions, and tips. - [Frequently Asked Questions](https://www.authelia.com/integration/trusted-header-sso/frequently-asked-questions/): Frequently Asked Questions regarding integrating Authelia Trusted Header SSO with applications including security considerations and best practice guidance. ### Kubernetes > An overview of integrating Authelia with Kubernetes including ingress controllers, Helm chart deployment, secrets management, and proxy configuration options. - [Kubernetes](https://www.authelia.com/integration/kubernetes/introduction/): An introduction into integrating Authelia with Kubernetes including important notes on external traffic policy, service links, pod security, and prerequisites. - [Chart](https://www.authelia.com/integration/kubernetes/chart/): A guide to using the Authelia Helm chart to integrate Authelia with Kubernetes including repository setup, values configuration, and important deployment notes. - [Secrets](https://www.authelia.com/integration/kubernetes/secrets/): A guide to creating and using Kubernetes secrets for integrating Authelia with Kubernetes including example secret definitions, usage patterns, and mount paths. - [Traefik Ingress](https://www.authelia.com/integration/kubernetes/traefik-ingress/): A guide to integrating Authelia with the Traefik Kubernetes Ingress controller including both Kubernetes Ingress and Traefik IngressRoute CRD configuration. - [Envoy](https://www.authelia.com/integration/kubernetes/envoy/): An overview of integrating Authelia with the Envoy proxy in Kubernetes including the Envoy Gateway implementation and Istio service mesh ingress configuration. - [NGINX Ingress](https://www.authelia.com/integration/kubernetes/nginx-ingress/): A guide to integrating Authelia with the NGINX Kubernetes Ingress controller including ingress annotations, configuration examples, variables, and custom paths. ### Guides > A collection of integration guides for Authelia covering various use cases including securing applications with basic authentication and API access patterns. - [Securing Applications with Basic Auth](https://www.authelia.com/integration/guides/securing-apps-with-basic-auth/): Learn how to protect applications using Authelia ForwardAuth while enabling programmatic API access through Basic Authentication with Traefik service accounts. - [Protecting SSH and Console Logins with pam_authelia](https://www.authelia.com/integration/guides/pam-authelia/): Install and configure pam_authelia to delegate PAM-based authentication (SSH, login, sudo) to Authelia, with 1FA, 2FA, and OAuth2 Device Authorization flows. ### OpenID Connect 1.0 > An overview of integrating the Authelia OpenID Connect 1.0 Provider with OpenID Connect 1.0 Relying Parties, client applications, and single sign-on flows. - [OpenID Connect 1.0](https://www.authelia.com/integration/openid-connect/introduction/): An introduction into integrating the Authelia OpenID Connect 1.0 Provider with an OpenID Connect 1.0 Relying Party including key implementation specifics. - [OpenID Connect 1.0 Claims](https://www.authelia.com/integration/openid-connect/openid-connect-1.0-claims/): A reference guide for the Authelia OpenID Connect 1.0 Claims functionality including scope definitions, custom claims, claim parameters, and token content info. - [OAuth 2.0 Bearer Token Usage](https://www.authelia.com/integration/openid-connect/oauth-2.0-bearer-token-usage/): A guide on utilizing the Authelia OAuth 2.0 Bearer Token Usage for authorization in place of the session cookie forwarded authentication flow for API access. - [Frequently Asked Questions](https://www.authelia.com/integration/openid-connect/frequently-asked-questions/): Frequently Asked Questions regarding integrating the Authelia OpenID Connect 1.0 Provider with an OpenID Connect 1.0 Relying Party or client application. - [Clients](https://www.authelia.com/integration/openid-connect/clients/): A list of integration guides for configuring various applications as clients with the Authelia OpenID Connect 1.0 Provider for single sign-on authentication. ### LDAP > An overview of integrating Authelia with LDAP directory servers including guides for Active Directory, FreeIPA, GLAuth, LLDAP, and RFC2307bis implementations. - [LDAP](https://www.authelia.com/integration/ldap/introduction/): An introduction into integrating Authelia with LDAP covering binding methods, search considerations, implementation-specific configuration, and security notes. - [Active Directory](https://www.authelia.com/integration/ldap/activedirectory/): A guide on integrating Authelia with Active Directory as an LDAP authentication backend including configuration examples, default filters, and group search. - [FreeIPA](https://www.authelia.com/integration/ldap/freeipa/): A guide on integrating Authelia with FreeIPA as an LDAP authentication backend including configuration examples, default filter settings, and group search. - [GLAuth](https://www.authelia.com/integration/ldap/glauth/): A guide on integrating Authelia with GLAuth as an LDAP authentication backend including configuration examples, default filter settings, and bind instructions. - [LLDAP](https://www.authelia.com/integration/ldap/lldap/): A guide on integrating Authelia with LLDAP as a lightweight LDAP authentication backend including configuration examples, default filters, and bind operations. - [RFC2307bis](https://www.authelia.com/integration/ldap/rfc2307bis/): A guide on integrating Authelia with RFC2307bis compliant LDAP servers as an authentication backend including configuration examples, filters, and group setup. ## Overview > An overview of Authelia including its authentication, authorization, and security features as an open-source identity and access management server and portal. - [Prologue](https://www.authelia.com/overview/prologue/): The prologue section of the Authelia overview covering the introduction, architecture design, and supported reverse proxies for the authentication server. - [Authentication](https://www.authelia.com/overview/authentication/): An overview of Authelia's authentication capabilities including first factor credentials and second factor methods like TOTP, WebAuthn, and Duo mobile push. - [Authorization](https://www.authelia.com/overview/authorization/): An overview of Authelia's authorization capabilities including access control policies, OpenID Connect 1.0, trusted header SSO, and brute-force regulation. - [Security](https://www.authelia.com/overview/security/): The security section of the Authelia overview covering security introduction, measures, threat model, and artifact signing and provenance verification. ### Prologue > The prologue section of the Authelia overview covering the introduction, architecture design, and supported reverse proxies for the authentication server. - [Prologue](https://www.authelia.com/overview/prologue/introduction/): An introduction to Authelia as a 2FA and SSO authentication server providing two-factor authentication, identity verification, and password reset capabilities. - [Architecture](https://www.authelia.com/overview/prologue/architecture/): An overview of the Authelia architecture describing how it integrates with reverse proxies to provide authentication and authorization for applications. - [Supported Proxies](https://www.authelia.com/overview/prologue/supported-proxies/): A support matrix for Authelia features across reverse proxies including Traefik, Caddy, Envoy, NGINX, HAProxy, Skipper, and others with feature compatibility. ### Authentication > An overview of Authelia's authentication capabilities including first factor credentials and second factor methods like TOTP, WebAuthn, and Duo mobile push. - [Authentication](https://www.authelia.com/overview/authentication/introduction/): An overview of Authelia's multi-factor authentication including first factor credentials, second factor methods, and configurable authorization policies. - [First Factor](https://www.authelia.com/overview/authentication/first-factor/): An overview of Authelia's first factor authentication which uses standard username and password credentials with support for LDAP and YAML file user databases. - [One Time Password](https://www.authelia.com/overview/authentication/one-time-password/): An overview of Authelia's Time-based One-Time Password second factor authentication method using apps like Google Authenticator for TOTP code generation. - [Security Key and Passkeys](https://www.authelia.com/overview/authentication/security-key/): An overview of Authelia's WebAuthn security key and Passkey support for second factor authentication and passwordless login using FIDO2 compatible devices. - [Duo / Mobile Push](https://www.authelia.com/overview/authentication/push-notification/): An overview of Authelia's Duo mobile push notification second factor authentication method allowing users to approve or deny login requests on their phone. - [Password Policy](https://www.authelia.com/overview/authentication/password-policy/): An overview of Authelia's password policy feature supporting classic rule-based requirements and zxcvbn strength estimation for enforcing secure user passwords. ### Authorization > An overview of Authelia's authorization capabilities including access control policies, OpenID Connect 1.0, trusted header SSO, and brute-force regulation. - [Access Control](https://www.authelia.com/overview/authorization/access-control/): An overview of Authelia's access control rule-based authorization system allowing fine-grained policies based on domain, path, user, group, network, and method. - [Regulation](https://www.authelia.com/overview/authorization/regulation/): An overview of Authelia's regulation feature which protects against brute-force attacks by temporarily banning users after repeated failed login authentication. - [OpenID Connect 1.0](https://www.authelia.com/overview/authorization/openid-connect-1.0/): An overview of Authelia's OpenID Connect 1.0 Provider implementation allowing applications to authenticate users via the OpenID Connect and OAuth 2.0 protocols. - [Trusted Headers SSO](https://www.authelia.com/overview/authorization/trusted-headers/): An overview of Authelia's Trusted Headers SSO mechanism where reverse proxies inject response headers to identify authenticated users to protected applications. - [Statelessness](https://www.authelia.com/overview/authorization/statelessness/): An overview of Authelia's stateless design which avoids in-memory state to ensure a crash does not result in session loss or a degraded user experience. ### Security > The security section of the Authelia overview covering security introduction, measures, threat model, and artifact signing and provenance verification. - [Security](https://www.authelia.com/overview/security/introduction/): An introduction to Authelia's security practices including coordinated vulnerability disclosure and the security-by-design approach taken by the team. - [Measures](https://www.authelia.com/overview/security/measures/): An overview of the security measures Authelia implements including protections against brute-force attacks, cookie theft, open redirects, and exfiltration. - [Post-Quantum Cryptography](https://www.authelia.com/overview/security/post-quantum-cryptography/): An overview of the Post-Quantum Cryptography security Authelia implements. - [Threat Model](https://www.authelia.com/overview/security/threat-model/): An overview of the Authelia threat model describing security guarantees, trusted environment assumptions, and protections against common attack vectors. - [Artifact Signing and Provenance](https://www.authelia.com/overview/security/artifact-signing-and-provenance/): An overview of Authelia's artifact signing with GPG keys and SLSA Build Level 3 provenance for verifying the integrity and authenticity of official releases. ## Policies > Authelia project policies including the privacy policy, security vulnerability disclosure procedures, code of conduct, and semantic versioning practices. - [Artificial Intelligence](https://www.authelia.com/policies/artificial-intelligence/): The Authelia Artificial Intelligence Policy which describes how Artificial Intelligence is used within Authelia. - [Governance Policy](https://www.authelia.com/policies/governance/): The Authelia Governance Policy which describes how the Authelia project is governed. - [Privacy Policy](https://www.authelia.com/policies/privacy/): The Authelia privacy policy for the public website which does not use cookies or collect any personal data from visitors and includes no tracking or analytics. - [Security Policy](https://www.authelia.com/policies/security/): The Authelia security policy describing coordinated vulnerability disclosure practices and how to privately report security vulnerabilities to the project team. - [Versioning Policy](https://www.authelia.com/policies/versioning/): The Authelia versioning policy which describes how releases are numbered using Semantic Versioning and what compatibility guarantees are provided to all users. - [Code of Conduct](https://www.authelia.com/policies/code-of-conduct/): The Authelia Code of Conduct that all community members, contributors, and leaders must agree to abide by to ensure an inclusive and harassment-free experience. ## Reference > This section contains reference documentation for Authelia including guides, integration support tables, architecture decision records, and project processes. - [Reference](https://www.authelia.com/reference/prologue/): The prologue section of the Authelia reference documentation providing an introduction and overview of the available reference guides and integration support. - [Project Processes](https://www.authelia.com/reference/project-processes/): This section contains reference documentation for the Authelia project processes including testing procedures, release workflows, and development conventions. - [Guides](https://www.authelia.com/reference/guides/): This section contains a collection of reference guides for Authelia covering topics such as passwords, branding, templating, metrics, attributes, and more. - [Integrations](https://www.authelia.com/reference/integrations/): This section contains integration reference guides for Authelia covering supported databases, cache implementations, notification providers, and storage use. - [CLI](https://www.authelia.com/reference/cli/) - [Architecture Decision Log](https://www.authelia.com/reference/architecture-decision-log/): The Authelia Architecture Decision Log containing formal architecture decision records documenting design choices and their rationale for the project codebase. ### Reference > The prologue section of the Authelia reference documentation providing an introduction and overview of the available reference guides and integration support. - [Prologue](https://www.authelia.com/reference/prologue/introduction/): An introduction into the Authelia reference documentation explaining the purpose of this section and how to navigate the available reference material. ### Project Processes > This section contains reference documentation for the Authelia project processes including testing procedures, release workflows, and development conventions. - [Testing](https://www.authelia.com/reference/project-processes/testing-procedures/): A reference guide on the Authelia testing procedures including unit, integration, and end-to-end testing, continuous integration, and test coverage goals. ### Guides > This section contains a collection of reference guides for Authelia covering topics such as passwords, branding, templating, metrics, attributes, and more. - [Guides](https://www.authelia.com/reference/guides/introduction/): An introduction to the Authelia reference guides section which contains guides on specific topics that do not warrant their own documentation section. - [Systemd](https://www.authelia.com/reference/guides/systemd/): A reference guide on Authelia systemd unit configuration including instructions for overriding the default unit settings, file path definitions, and options. - [Authentication Method Reference Values](https://www.authelia.com/reference/guides/authentication-method-references/): A reference guide listing the Authentication Method Reference values based on RFC8176 and how each value is supported and implemented within Authelia. - [WebAuthn](https://www.authelia.com/reference/guides/webauthn/): A reference guide on the Authelia WebAuthn implementation including recommended configurations for passkeys, metadata status values, and device filtering. - [Attributes](https://www.authelia.com/reference/guides/attributes/): A reference guide on the standard, extra, and custom attributes available in Authelia including their usage in access control rules, OIDC claims, and LDAP. - [Access Control Rule Guide](https://www.authelia.com/reference/guides/rule-operators/): A reference guide on the Authelia access control rule operators including standard, regex, user, group, and network match operators with multi-level criteria. - [Branding](https://www.authelia.com/reference/guides/branding/): A reference guide on the Authelia branding assets including usage guidelines, licensing information, downloadable assets, and restrictions on logo and name use. - [Frequently Asked Questions](https://www.authelia.com/reference/guides/frequently-asked-questions/): A reference index of frequently asked question documents for Authelia covering topics such as Docker, proxies, Kubernetes, identity providers, and more. - [Generating Secure Values](https://www.authelia.com/reference/guides/generating-secure-values/): A reference guide on generating secure values such as random password hashes, random alphanumeric strings, and cryptographic keys for use with Authelia. - [HTTP Archive Files](https://www.authelia.com/reference/guides/http-archive-file/): A reference guide on creating and sanitizing HTTP Archive (HAR) files for troubleshooting Authelia issues including sensitive data removal and submission tips. - [Internationalization](https://www.authelia.com/reference/guides/internationalization/): A reference guide on internationalization in Authelia including supported locales for the web portal and how users can contribute translations via the platform. - [Log Messages](https://www.authelia.com/reference/guides/log-messages/): A reference guide explaining common Authelia log messages including request header too large errors, storage encryption warnings, and session domain settings. - [Notification Templates](https://www.authelia.com/reference/guides/notification-templates/): A reference guide on customizing and overriding Authelia notification email templates including template names, placeholder variables, and formatting. - [Passwords](https://www.authelia.com/reference/guides/passwords/): A reference guide on the Authelia user password file format, supported hashing algorithms including Argon2, bcrypt, scrypt, and PBKDF2, and their tuning. - [Proxy Authorization](https://www.authelia.com/reference/guides/proxy-authorization/): A reference guide on Authelia proxy authorization endpoints including ForwardAuth, ExtAuthz, AuthRequest, and Legacy implementations and their strategies. - [Schemas](https://www.authelia.com/reference/guides/schemas/): A reference guide on the JSON Schema documents published by Authelia for configuration validation, user database validation, and access control policy checking. - [Server Asset Overrides](https://www.authelia.com/reference/guides/server-asset-overrides/): A reference guide on overriding Authelia server assets including the favicon, logo, and internationalization locale files using the asset_path option. - [Telemetry](https://www.authelia.com/reference/guides/metrics/): A reference guide on the Authelia telemetry and metrics system including Prometheus integration, recorded metrics for authentication, authorization, and more. - [Templating](https://www.authelia.com/reference/guides/templating/): A reference guide on the Authelia templating system including available functions, environment variable access, file operations, and string manipulation tools. - [Troubleshooting](https://www.authelia.com/reference/guides/troubleshooting/): A reference guide on troubleshooting Authelia issues including collecting logs, sanitizing sensitive information, and providing diagnostic data for support. - [Validating Forwarded Authentication](https://www.authelia.com/reference/guides/validating-forwarded-authentication/): A reference guide on validating that the Authelia forwarded authentication proxy integration is operating correctly using browser developer tools and analysis. ### Integrations > This section contains integration reference guides for Authelia covering supported databases, cache implementations, notification providers, and storage use. - [Integrations](https://www.authelia.com/reference/integrations/introduction/): An introduction to the Authelia integration reference guides detailing support requirements, general notes on supported third-party services, and compatibility. - [Cache Integrations](https://www.authelia.com/reference/integrations/cache-integrations/): A reference guide on supported cache integrations for Authelia including Redis Standalone and Redis Sentinel high availability configurations with version info. - [Database Integrations](https://www.authelia.com/reference/integrations/database-integrations/): A reference guide on supported database integrations for Authelia including PostgreSQL, MySQL, MariaDB, and SQLite3 version support and recommendations. - [LDAP Integrations](https://www.authelia.com/reference/integrations/ldap-integrations/): A reference guide on LDAP integration requirements for Authelia including RootDSE anonymous discovery, supported attributes, and security considerations. - [Time-based OTP Applications](https://www.authelia.com/reference/integrations/time-based-one-time-password-apps/): A reference guide on Time-based One-Time Password application compatibility with Authelia including a support matrix for various TOTP algorithm settings. ### CLI - [authelia](https://www.authelia.com/reference/cli/authelia/) - [authelia-gen](https://www.authelia.com/reference/cli/authelia-gen/) - [authelia-scripts](https://www.authelia.com/reference/cli/authelia-scripts/) ### Architecture Decision Log > The Authelia Architecture Decision Log containing formal architecture decision records documenting design choices and their rationale for the project codebase. - [Architecture Decision Log](https://www.authelia.com/reference/architecture-decision-log/introduction/): An introduction to the Authelia Architecture Decision Log explaining the purpose, structure, key terminology, and contribution process for decision records. - [ADR1: OpenID Connect Client Authorization Policies](https://www.authelia.com/reference/architecture-decision-log/1/): An architecture decision record on how Authelia handles OpenID Connect 1.0 client authorization policies and why access control rules are incompatible. - [ADR2: Configuration via Environment and Secrets](https://www.authelia.com/reference/architecture-decision-log/2/): An architecture decision record on the limitations of configuring Authelia via environment variables and secrets for complex object and list type configuration. - [ADR3: Using Docker Labels for Authorization Rules](https://www.authelia.com/reference/architecture-decision-log/3/): An architecture decision record on the rejected proposal to use Docker container labels for defining Authelia authorization access control rules in deployment. ## Roadmap > The Authelia roadmap describing planned, in-progress, and completed features with implementation details and links to relevant issues and pull requests. - [Prologue](https://www.authelia.com/roadmap/prologue/): The Authelia roadmap prologue providing introductory context and general information about the planned, in-progress, and completed features on the roadmap. - [Planning](https://www.authelia.com/roadmap/planning/): The Authelia roadmap items in the planning stage which are intended to be implemented but are still undergoing design, research, and feasibility analysis work. - [Active](https://www.authelia.com/roadmap/active/): The actively developed Authelia roadmap items which are currently being designed or implemented by the development team with target milestone information. - [Complete](https://www.authelia.com/roadmap/complete/): The completed Authelia roadmap items which have been fully implemented and are available for use in production deployments including recent feature additions. ### Prologue > The Authelia roadmap prologue providing introductory context and general information about the planned, in-progress, and completed features on the roadmap. - [Prologue](https://www.authelia.com/roadmap/prologue/introduction/): An introduction to the Authelia roadmap explaining development priorities, the planning process, and how features progress through each stage to final release. ### Planning > The Authelia roadmap items in the planning stage which are intended to be implemented but are still undergoing design, research, and feasibility analysis work. - [OpenID Connect 1.0 Relying Party](https://www.authelia.com/roadmap/planning/openid-connect-1.0-relying-party/): The Authelia roadmap item for the OpenID Connect 1.0 Relying Party role allowing delegation of authentication to external identity providers like Google. - [Security Assertion Markup Language (SAML) 2.0 Provider](https://www.authelia.com/roadmap/planning/security-assertion-markup-language-saml-2.0-identity-provider/): The Authelia roadmap item for the SAML 2.0 Provider role enhancing interoperability with enterprise identity and access management systems and providers. ### Active > The actively developed Authelia roadmap items which are currently being designed or implemented by the development team with target milestone information. - [OpenID Connect 1.0 Provider](https://www.authelia.com/roadmap/active/openid-connect-1.0-provider/): The Authelia roadmap item for the OpenID Connect 1.0 Provider role which is now OpenID Certified and continues to evolve with additional specification support. - [Granular Authorization](https://www.authelia.com/roadmap/active/granular-authorization/): The Authelia roadmap item for granular authorization leveraging Authentication Method Reference Values and matching policies based on authentication strength. - [Multi-Domain Protection](https://www.authelia.com/roadmap/active/multi-domain-protection/): The Authelia roadmap item for multi-domain protection allowing administrators to protect multiple root domains with a single Authelia instance and session. - [Dashboard / Control Panel for Users](https://www.authelia.com/roadmap/active/dashboard-control-panel-for-users/): The Authelia roadmap item for a user dashboard and control panel allowing users to self-manage their credentials, devices, sessions, and security preferences. - [Dashboard / Control Panel and CLI for Administrators](https://www.authelia.com/roadmap/active/dashboard-control-panel-and-cli-for-admins/): The Authelia roadmap item for an administrator dashboard, control panel, and CLI allowing dynamic management of configuration, users, and access control rules. ### Complete > The completed Authelia roadmap items which have been fully implemented and are available for use in production deployments including recent feature additions. - [Internationalization](https://www.authelia.com/roadmap/complete/internationalization/): The completed Authelia roadmap item for internationalization enabling translation of the web interface into multiple languages using the Crowdin platform tools. - [Kubernetes Documentation](https://www.authelia.com/roadmap/complete/kubernetes-documentation/): The completed Authelia roadmap item for Kubernetes documentation including integration guides and annotated example configurations for supported ingress setups. - [WebAuthn](https://www.authelia.com/roadmap/complete/webauthn/): The completed Authelia roadmap item for WebAuthn implementation replacing the deprecated FIDO U2F protocol with modern passkey and security key authentication. ## Blog > The Authelia blog featuring release notes, technical articles, setup guides, and announcements for the open-source authentication and authorization server. - [We are now OpenID Certified™](https://www.authelia.com/blog/we-are-now-openid-certified/): Authelia is now OpenID Certified for the Basic OP, Implicit OP, Hybrid OP, Form Post OP, and Config OP profiles of the OpenID Connect 1.0 protocol spec. - [Technical: OpenID Connect 1.0 Nuances](https://www.authelia.com/blog/technical-openid-connect-1.0-nuances/): A commentary on several troubling trends in the security world combined with an explainer on some fundamental OpenID Connect 1.0 implementation concepts. - [4.39: Release Notes](https://www.authelia.com/blog/4.39-release-notes/): Authelia 4.39 release notes covering several major roadmap additions including new features, improvements, and important changes for all administrators. - [Authelia + Traefik Setup Guide](https://www.authelia.com/blog/authelia--traefik-setup-guide/): A setup guide for configuring Authelia with the Traefik reverse proxy providing an opinionated and fully supported deployment approach for administrators. - [4.37: Pre-Release Notes](https://www.authelia.com/blog/4.37-pre-release-notes/): Pre-release notes for Authelia 4.37 detailing new features, improvements to existing features, and what these changes mean for users and administrators. - [4.38: Release Notes](https://www.authelia.com/blog/4.38-release-notes/): Authelia 4.38 release notes covering several major roadmap additions including new features, improvements, and important changes for all administrators. - [Say hello to the new website 👋](https://www.authelia.com/blog/say-hello-to-the-new-website/): Introducing the new Authelia website which combines the main landing site and documentation into one unified package using the Hugo Doks theme and layout.