Authentik
Self-hosted identity provider that centralizes authentication, single sign-on, and access control across applications and APIs
The product is a self-hosted identity provider that centralizes authentication and access control, providing single sign-on, multi-factor authentication, and support for protocols such as OAuth2/OIDC, SAML, LDAP, SCIM and RADIUS. It is for IT teams, developers, and businesses managing workforce and customer identities across internal applications, SaaS products, and legacy systems. It is positioned as an open source alternative to services like Entra ID and Okta that runs on the customer's own infrastructure via Docker, Kubernetes and Terraform with configurable policies and APIs.
Key features
- Single Sign-On (SSO)
- Multi-factor Authentication (MFA)
- Conditional Access policies
- WebAuthn / Passkeys support
- FIDO2 passwordless authentication
- Role-based Access Control (RBAC)
- Application Proxy for legacy apps
- Remote Access for RDP/VNC/SSH
- OAuth2 / OIDC support
- SAML2 support
- LDAP support
- SCIM provisioning
- RADIUS support
- Kerberos support
- OAuth 2.0 Token Exchange
- OIDC Back-Channel Logout
- GeoIP / Impossible Travel detection
- Privileged Access Management
- Scheduled User Offboarding
- Self-service password reset
- API security with OAuth2 tokens
- Zero Trust access controls
- Non-Human Identities management
- LinkedIn<0.1/day
GTM channels
- Blog
- Marketplace
- Community
- API
- Docs
ICP
- IT teams
- Security teams
- Engineering teams