Freedom251 › Multi-Factor Authentication Software
AuthLite
What AuthLite is
AuthLite is a self-hosted two-factor authentication system for Windows enterprise networks using Active Directory, with support for Linux and macOS components. Users enter a one-time passcode alongside their normal Active Directory password. Administrators can require an OTP before Domain Admins membership and can withhold the Domain Admins group SID when no token is present. Existing Remote Desktop servers, including Remote Desktop Gateway, can add two-factor logon without changing RDP clients or drivers. AuthLite integrates with Microsoft NPS or IAS RADIUS and LDAP for VPN authentication, and supports Active Directory, Group Policy, RDP, and VPN connections. Token choices include YubiKey OTP and challenge-response, OATH TOTP apps and hardware tokens, and OnlyKey devices with firmware 2.1.1 or newer. Linux domain members can use a PAM module built from source. macOS has a plugin, but offline mobile-account and FileVault boot logons are not enforced. The paid product has no free plan but offers a 30-day trial.
Who it suits
It suits organizations running Active Directory that need self-hosted two-factor controls for domain administration, Remote Desktop, VPNs, Linux, or supported macOS scenarios. It is not a passwordless product.
What it does well
- Active Directory integration
- Remote Desktop protection
- VPN integrations via RADIUS and LDAP
- Multiple token choices
- Adaptive access policies
What to know first
- No passwordless authentication
- Linux module must be built from source
- macOS offline logons are not enforced
- Base license includes five users
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Base AuthLite System License | Perpetual license; includes 5 user licenses and up to 5 hours of support for 1 year · 5 user licenses included · one license per user · orders over 500 users require a sales quote | On request |
As authlite.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
AuthLite covers many enterprise access points with OTP-based authentication, directory integrations, and several hardware or app token types. Its platform-specific limits and user-license terms should be checked before deployment.
Facts from AuthLite's own pages
- Authentication
- Users provide a one-time passcode in addition to their normal Active Directory password. · authlite.com, 11 Oct 2026
- Domain administrators
- It can require two-factor logon before granting membership in the Domain Admins group. · authlite.com, 11 Oct 2026
- Domain Admin protection
- AuthLite can withhold the Domain Admins group SID when a user logs in without an OTP token. · authlite.com, 11 Oct 2026
- Evaluation
- Products may be downloaded and tried free for 30 days, with no obligation to buy during the evaluation period. · authlite.com, 11 Oct 2026
- Headquarters
- Springfield, Illinois, USA · authlite.com, 28 Sept 2026
- License limit
- Orders for more than 500 users require contacting sales for a quotation. · authlite.com, 11 Oct 2026
- License terms
- The base domain license includes five perpetual user licenses, and the store says licenses do not need renewal. · authlite.com, 11 Oct 2026
- Licensing limit
- A base license includes five user licenses, and the store directs orders over 500 users to contact sales for a quotation. · authlite.com, 11 Oct 2026
- Linux support
- Domain-joined Linux systems can enforce two-factor logons with a PAM module and configuration to pass the OTP to AuthLite. · authlite.com, 11 Oct 2026
- macOS limitation
- On macOS, two-factor authentication is not enforced for offline mobile-account logons or FileVault boot logons. · authlite.com, 11 Oct 2026
- Offline logon
- YubiKey challenge-response supports two-factor logon on cached or offline mobile Active Directory workstations. · authlite.com, 11 Oct 2026
- Other platforms
- The downloads page lists a macOS plugin and Linux PAM module source files; the Linux module must be built from source. · authlite.com, 11 Oct 2026
- Purpose
- AuthLite adds two-factor authentication to Windows Active Directory authentication. · authlite.com, 11 Oct 2026
- Remote access
- AuthLite supports two-factor authentication for Remote Desktop, including Remote Desktop Gateway. · authlite.com, 11 Oct 2026
- Remote Desktop
- It adds two-factor authentication to existing Remote Desktop servers without requiring changes to RDP client software or drivers. · authlite.com, 11 Oct 2026
- Self-service
- The documentation includes a self-service web portal for token enrollment and management. · authlite.com, 11 Oct 2026
- Store security
- AuthLite says it uses SSL encryption for customer information entered in its web store and does not retain credit-card information after purchase. · authlite.com, 11 Oct 2026
- Support
- The base domain license includes up to five hours of support for one year, less any presales support used. · authlite.com, 11 Oct 2026
- Supported tokens
- Supported token options include YubiKey v5/FIPS, authenticator apps, OnlyKey with firmware 2.1.1 or newer, and hardware OATH tokens for online logons. · authlite.com, 11 Oct 2026
- Token limitation
- Authenticator-app soft tokens normally cannot be used to log into laptops that are offline from the LAN. · authlite.com, 11 Oct 2026
- Token options
- Supported tokens include YubiKeys with OTP support, OATH TOTP authenticator apps, and OnlyKey devices with firmware 2.1.1 or newer. · authlite.com, 11 Oct 2026
- VPN integration
- AuthLite integrates with Microsoft RADIUS and LDAP for VPN authentication. · authlite.com, 11 Oct 2026
- VPN integrations
- AuthLite integrates with Microsoft NPS RADIUS and can enforce two-factor authentication for VPN servers connecting over LDAP. · authlite.com, 11 Oct 2026
- Windows deployment
- The main installer is for domain controllers, member servers, and workstations; the current v2.5 download is listed for Intel/AMD x64. · authlite.com, 11 Oct 2026
Where AuthLite stands on Freedom251
- Multi-Factor Authentication Software#19 of 52