LibrePortal
Sponsor
Install

Sign-in explained

The two kinds of login, LibrePortal and Authelia, what each is for, and how to make them one.

On this page
  1. Authelia: one sign-in for every app
  2. LibrePortal login: the control panel
  3. "Use one account everywhere"
  4. Installing Authelia
  5. Who can open what
  6. A typical home

LibrePortal has two kinds of login. They do different jobs, and most people only ever need one of them.

LibrePortal login Authelia account
What it opens The LibrePortal control panel, where you install, update and manage the server Your apps: Nextcloud, ownCloud, Forgejo, dashboards and more
Who needs one Only the people who look after the server (optional) Everyone in your home who uses the apps
Where you make it Admin → People → Add person, with a Control panel rank The same step: every person added gets one
Example You You, your partner, your kids

Authelia: one sign-in for every app#

Authelia is your home's front door. Each person gets one username and password, and that gets them into every app that supports it. The first time they open an app, the app makes their account inside itself, so you never create accounts app by app.

A few apps can't use Authelia directly. LibrePortal can still put Authelia in front of them, but they may ask for their own login once.

LibrePortal login: the control panel#

Only people who run the server need one, usually just you. Each login has a rank that decides what it can change. Everyone else has the rank None — apps only: one username and password for the apps, and no way into the control panel. See Accounts and people.

"Use one account everywhere"#

You will often have both: a LibrePortal login and an Authelia account. The Use one account everywhere card on Admin → People links your own two together:

  1. Open Admin → People. Find the card Use one account everywhere.
  2. Type your Authelia username and password. Authelia checks them.
  3. Done. Your LibrePortal login takes the same username and password, so one login works everywhere.

It links one account, not everyone

The card only links the account you're signed in with. Someone who only uses the apps has the rank None — apps only, so there is nothing to link for them.

Installing Authelia#

When you install Authelia you choose how it starts. Use my LibrePortal people (the default) brings across the people already on your People list, so there is no separate admin login to keep track of. The other choice makes a separate admin login for Authelia, as before. Either way, Only their own apps is on to begin with, so each person opens just the apps you give them. An existing Authelia keeps its admin and its setting when you update.

Who can open what#

Per-person access (Admin → Single sign-on) decides which person can open which app and dashboard. While it is off, everyone with an Authelia account can open every app behind Authelia. When you turn it on:

  • each app and dashboard has a Who can open this setting, and nobody gets in unless they are allowed;
  • a review screen shows who keeps and who loses access before anything changes;
  • LibrePortal's own web address goes behind Authelia too, for admins only.

You can't lock yourself out

LibrePortal's direct address, https://<server address>:<port> from home or your VPN, never goes behind Authelia. It always shows the normal LibrePortal login.

A typical home#

Person LibrePortal login Authelia account What they see
You Yes, Owner, linked Yes Everything
Partner None — apps only Yes Their apps and the Family dashboard
Kids None — apps only Yes Only the apps you allow