Comparisons anchored on Authelia, the Apache-2.0 single sign-on and two-factor companion for reverse proxies: against OAuth2 Proxy and Pomerium, and its user backend options.
Authelia, which authenticates users itself against LDAP or a file and adds second factors, against OAuth2 Proxy, which defers login to an external OIDC provider. Covers proxies supported, MFA, sessions and when you also need a full identity provider.
Two forward-auth style gateways for self-hosted apps: Authelia's built-in login, 2FA and OIDC provider against Pomerium's identity-aware proxy that relies on an external identity provider. Compares policies, protocols, editions and licensing.
Where Authelia reads users from: a YAML file of hashed passwords versus an LDAP directory such as LLDAP, OpenLDAP, FreeIPA or Active Directory. Covers scale, password reset, group management, storage requirements and when to move from file to LDAP.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.