What I want from SSO, in order from most to least importance:

  • password-less via webauthn, not just 2FA. resident credentials (full passwordless) would be great
  • lightweight
  • no ties to emails, no password reset via email, etc
  • not too complicated to set up

Authelia doesn’t have passwordless login, and it’s tied to email system. Authentik is too heavy, complicated and likely overkill for what I need - couple services behind caddy that I don’t want random internet people to access. I looked at Keycloak, same thing as Authentik.

Any suggestions?