diff --git a/README.md b/README.md
index 9dfad86..eaea182 100644
--- a/README.md
+++ b/README.md
@@ -157,6 +157,7 @@ These settings should only be changed if you're trying to make the user manager
    
 * `ACCEPT_WEAK_PASSWORDS` (default: *FALSE*):  Set this to *TRUE* to prevent a password being rejected for being too weak.  The password strength indicators will still gauge the strength of the password.  Don't enable this in a production environment.
    
+* `REMOTE_HTTP_HEADERS_LOGIN`(default: *FALSE*) Enables session managment from a external Service like Authelia. This setting compromisses your security if your not using a Auth-Proxy infront of this application
 
 #### Email sending settings
 
diff --git a/www/includes/config.inc.php b/www/includes/config.inc.php
index ae16ca5..66cb44a 100644
--- a/www/includes/config.inc.php
+++ b/www/includes/config.inc.php
@@ -110,6 +110,12 @@
 
  ###
 
+ ###
+
+ $REMOTE_HTTP_HEADERS_LOGIN = ((strcasecmp(getenv('REMOTE_HTTP_HEADERS_LOGIN'),'TRUE') == 0) ? TRUE : FALSE);
+ 
+ ###
+
  $errors = "";
 
  if (empty($LDAP['uri'])) {
diff --git a/www/includes/modules.inc.php b/www/includes/modules.inc.php
index c44e0d7..a07ef2b 100644
--- a/www/includes/modules.inc.php
+++ b/www/includes/modules.inc.php
@@ -11,11 +11,13 @@
                     'log_in'          => 'hidden_on_login',
                     'change_password' => 'auth',
                     'account_manager' => 'admin',
-                    'log_out'         => 'auth'
                   );
 
 if ($ACCOUNT_REQUESTS_ENABLED == TRUE) {
   $MODULES['request_account'] = 'hidden_on_login';
 }
+if (!$REMOTE_HTTP_HEADERS_LOGIN) {
+  $MODULES['log_out'] = 'auth';
+}
 
 ?>
diff --git a/www/includes/web_functions.inc.php b/www/includes/web_functions.inc.php
index fd69229..53d26d4 100644
--- a/www/includes/web_functions.inc.php
+++ b/www/includes/web_functions.inc.php
@@ -1,5 +1,4 @@
 <?php
-
 #Security level vars
 
 $VALIDATED = FALSE;
@@ -45,8 +44,12 @@ $DEFAULT_COOKIE_OPTIONS = array( 'expires' => time()+(60 * $SESSION_TIMEOUT),
 
 validate_passkey_cookie();
 
+if($REMOTE_HTTP_HEADERS_LOGIN) {
+  login_via_headers();
+} else {
+  validate_passkey_cookie();
+}
 ######################################################
-
 function generate_passkey() {
 
  $rnd1 = rand(10000000, (int)100000000000);
@@ -84,7 +87,16 @@ function set_passkey_cookie($user_id,$is_admin) {
  $VALIDATED = TRUE;
 
 }
+function login_via_headers() {
+  global $IS_ADMIN, $USER_ID, $VALIDATED, $LDAP;
+  //['admins_group'];
+  $USER_ID = $_SERVER['HTTP_REMOTE_USER'];
+  $remote_groups = explode(',',$_SERVER['HTTP_REMOTE_GROUPS']);
+  $IS_ADMIN = in_array($LDAP['admins_group'],$remote_groups);
+  // users are always validated as we assume, that the auth server does this
+  $VALIDATED = true;
 
+}
 
 ######################################################
 
@@ -136,7 +148,6 @@ function validate_passkey_cookie() {
    }
   }
  }
-
 }