Traefik Forward Auth
Minimal forward authentication service for Traefik
Traefik Forward Auth is an open-source, minimal forward authentication service that adds Google and generic OIDC login to applications behind the Traefik reverse proxy. It is self-hosted as lightweight access middleware.
Key features
- Forward auth for Traefik
- OIDC and OAuth support
- Lightweight
- Domain whitelisting
Strengths
- Released under the MIT license
- Easy to set up — beginner-friendly
- First-class Docker support for quick deployment
- Active community (2.4k GitHub stars)
Traefik Forward Auth replaces
Compare Traefik Forward Auth
18 head-to-head comparisons.
- Traefik Forward Auth vs Keycloak
- Traefik Forward Auth vs Authelia
- Traefik Forward Auth vs Casbin
- Traefik Forward Auth vs Ory Hydra
- Traefik Forward Auth vs SuperTokens
- Traefik Forward Auth vs OAuth2 Proxy
- Traefik Forward Auth vs ZITADEL
- Traefik Forward Auth vs Logto
- Traefik Forward Auth vs Casdoor
- Traefik Forward Auth vs Ory Kratos
- Traefik Forward Auth vs Open Policy Agent
- Traefik Forward Auth vs Apereo CAS
- Traefik Forward Auth vs Tinyauth
- Traefik Forward Auth vs Pomerium
- Traefik Forward Auth vs OpenZiti
- Traefik Forward Auth vs Ory Oathkeeper
- Traefik Forward Auth vs Buzzfeed sso
- Traefik Forward Auth vs Caddy Security
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built in
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth