What is this?
authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.
authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.Is it a cloud service I sign up for, or something I run myself?Something you run yourself — it's self-hosted server software you deploy on your own infrastructure, and your applications then use it for authentication. It's not a library to embed and not a hosted SaaS.
Something you run yourself — it's self-hosted server software you deploy on your own infrastructure, and your applications then use it for authentication. It's not a library to embed and not a hosted SaaS.How do I get an instance running?Docker Compose is recommended for small or test setups; larger deployments use the Kubernetes Helm chart. There are also official AWS CloudFormation templates and a one-click DigitalOcean Marketplace app.
Docker Compose is recommended for small or test setups; larger deployments use the Kubernetes Helm chart. There are also official AWS CloudFormation templates and a one-click DigitalOcean Marketplace app.Is this meant for big companies, or does a home lab work too?Both: it scales from small labs to large production clusters, and there's an enterprise offering for organizations replacing IdPs like Okta, Auth0, Entra ID, or Ping Identity.
Both: it scales from small labs to large production clusters, and there's an enterprise offering for organizations replacing IdPs like Okta, Auth0, Entra ID, or Ping Identity.Does our user data stay inside our own infrastructure?Yes — it's designed for self-hosting, so identities and credentials stay entirely in your own environment rather than in a vendor's cloud.
Yes — it's designed for self-hosting, so identities and credentials stay entirely in your own environment rather than in a vendor's cloud.Which authentication protocols does it support?SAML, OAuth2/OIDC, LDAP, and RADIUS, among others — covering modern web and mobile apps as well as older systems that only speak LDAP.
SAML, OAuth2/OIDC, LDAP, and RADIUS, among others — covering modern web and mobile apps as well as older systems that only speak LDAP.How mature is the project?It has been developed since December 2019 and counts around 25,900 stars on GitHub — a well-established, actively maintained project.
It has been developed since December 2019 and counts around 25,900 stars on GitHub — a well-established, actively maintained project.Is there a web interface for managing it?Yes — there's a full web admin interface; the README even shows screenshots of it in both light and dark themes.
Yes — there's a full web admin interface; the README even shows screenshots of it in both light and dark themes.Which topics is it in?identity, saml, iam, ldap, authorization, oidc, sso, oauth2, reverse-proxy, enterprise, oauth, authentication
identity, saml, iam, ldap, authorization, oidc, sso, oauth2, reverse-proxy, enterprise, oauth, authentication