SbTEwwlrjN5y7jq.webp

How Authelia Performs Multi-Factor Authentication

Authelia sits between your reverse proxy and the apps behind it, intercepting requests and performing auth checks before forwarding traffic, giving you true MFA that can be integrated with something like Google Authenticator, or Yubikey/Titan key, etc…

Stop exposing unsecured apps. Learn how to deploy Authelia in Docker with a KeyDB backend and SWAG to enforce centralized Multi-Factor Authentication.

Setting up Authelia can be a bit intensive at first, but very worth the payoff / time and effort!

Disclaimers: I’m the author & run this exact setup, in production for myself. It’s a “battle tested” setup, which has been in use for a few years now. Written & verified by a human! The header image is a composite of my Authelia MFA token page & AI generated infographic. NO ADS or affiliate marketing on page!

Happy to chat in the comments!

  • 溫哥華David
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    2
    ·
    11 hours ago

    The ‘intensive at first’ part is real — I’ve seen teams hit a wall when Authelia needs to talk to their existing LDAP or when session timeouts don’t sync right with app-level auth. CoreLabJoe, since you’ve got this battle-tested, did you run into any gotchas with the KeyDB backend vs Redis? We put together a quick comparison of MFA middleware stacks here https://cxgo.ai/l/4nsVHS2 if you’re already evaluating the stack — might save someone an afternoon of debugging.

    • CoreLabJoe@piefed.caOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      10 hours ago

      No I had no issues flipping it over to keydb. I was on redis originally so I stopped the containers, took a backup and simply changed the image I was using for my backend to keydb end it was like a drop in replacement! Didn’t even need to do a dB upgrade or anything complex.

  • irmadlad@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    17 hours ago

    Very nice site set up man. Looks like a lot of good info and a lot of work involved. I too use Authelia as an added security step. I have your site bookmarked and will peruse it’s contents in a bit. Thanks for sharing.

    • CoreLabJoe@piefed.caOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      16 hours ago

      Thank you for taking a peek!

      Let me know if there’s something you’re looking for. The search function isn’t to bad but sometimes the posts can get buried a bit ;)