App Library/authentik

authentik

SecurityPopularMIT21k stars

Flexible identity provider with support for OAuth2, SAML, and LDAP

Deploy authentik free Official site GitHub

Deploy with GoPanel:One-click deployAuto SSL certificatesScheduled backupsAny VPS provider

About authentik

Flexible identity provider with support for OAuth2, SAML, and LDAP. Deploy authentik on your own server with GoPanel.

Alternative to

1Password

Okta

Frequently asked questions

What protocols does authentik support?: authentik supports SAML 2.0, OAuth2/OIDC, LDAP, SCIM, and proxy authentication (forward auth). This makes it compatible with virtually any application that supports standard authentication protocols.
How does authentik compare to Keycloak?: Both are open-source identity providers, but authentik has a more modern UI and is easier to configure. authentik also includes a built-in outpost system for proxy authentication and offers flows-based customization for login experiences. Keycloak has broader enterprise adoption and more SAML features.
Can authentik replace Active Directory?: authentik can serve as an LDAP provider and identity provider, replacing some Active Directory functions. It provides user management, group policies, and SSO. However, for domain-joined Windows environments, Active Directory is still needed for Group Policy and Kerberos.
Does authentik support multi-factor authentication?: Yes, authentik supports TOTP (authenticator apps), WebAuthn/FIDO2 (hardware keys like YubiKey), SMS, email, and static recovery codes for MFA. You can enforce MFA policies per application or user group.

Deploy authentik on your server

GoPanel makes self-hosting effortless. Deploy authentik on any VPS in seconds with automatic SSL certificates, scheduled backups, and one-click updates — all included free.

Get started for free

App Details