Traefik Forward Auth
Minimal forward authentication service for Traefik
Traefik Forward Auth is an open-source, minimal forward authentication service that adds Google and generic OIDC login to applications behind the Traefik reverse proxy. It is self-hosted as lightweight access middleware.
Key features
- Forward auth for Traefik
- OIDC and OAuth support
- Lightweight
- Domain whitelisting
Strengths
- Released under the MIT license
- Easy to set up — beginner-friendly
- First-class Docker support for quick deployment
- Active community (2.4k GitHub stars)
Is Traefik Forward Auth secure?
OSV.dev has no published security advisories for Traefik Forward Auth's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.
Source: OSV.dev, checked 2026-10-14. How this is measured.
Traefik Forward Auth replaces
Health badge
Maintain Traefik Forward Auth? Add its health score to your README. The badge links back to this page.
Compare Traefik Forward Auth
3 head-to-head comparisons.
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth