Casdoor vs Authelia
From a login portal to a full identity platform
Authelia is a lightweight login portal that adds 2FA and single sign-on in front of a reverse proxy, with users kept in a file or LDAP server. Casdoor does forward authentication too, and adds user management, self-service sign-up, SAML and an admin console.
Casdoor and Authelia at a glance
| Casdoor | Authelia | |
|---|---|---|
| Source code | Open source (Apache-2.0) | Open source (Apache-2.0) |
| Where it runs | Casdoor Cloud, or your own servers with Docker or Kubernetes | Your own servers, next to a reverse proxy such as Traefik, Caddy, NGINX, HAProxy or Envoy |
| Users | Stored in Casdoor, with sign-up, profiles and an admin console; can also sync from LDAP | A YAML file or an LDAP server |
| Protocols | OAuth 2.0, OIDC, SAML, CAS, LDAP, RADIUS and SCIM | Forward authentication and OpenID Connect |
Information about Authelia is from its public website as of October 2026 (Authelia on GitHub, Authelia supported proxies) and may have changed. Authelia is a trademark of its owner.
Why teams choose Casdoor
User management included
Users can sign up, reset passwords and manage MFA themselves, and admins manage everyone in a web console.
One IdP for every app
Casdoor is an identity provider over OIDC, SAML, CAS, LDAP and RADIUS, so the same accounts sign in to your own apps, SaaS tools and devices.
Don't want to run it?
Casdoor Cloud gives you a dedicated instance and database from $24.17/month billed yearly, upgraded by the team that builds Casdoor.
Authorization included
Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.
When Authelia may fit better
- You run a small homelab and want the lightest possible login in front of a few apps.
- Your users already live in a file or an LDAP server you manage.
Moving from Authelia to Casdoor
Import users from your LDAP server with Casdoor's LDAP syncer, or from a file. Point your reverse proxy's forward-auth at Casdoor, and move OIDC clients by changing the issuer URL and credentials.
Plan a migration with usFAQ
Frequently asked questions
Does Casdoor work with Traefik or NGINX like Authelia?
Is Casdoor heavier to run?
Compare
How Casdoor compares
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales