Repolode
Submit
goauthentik

goauthentik/authentik

Open-source identity provider for single sign-on, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, self-hosted from small labs to large clusters.

Open-source alternative to:OktaAuth0Microsoft Entra IDPing Identity

View on GitHubWebsite
Stars
26,001
Forks
2,085
Open issues
1,120
Last commit
10 hours ago

What is it?

authentik is an open-source Identity Provider (IdP) for single sign-on. It supports SAML, OAuth2/OIDC, LDAP and RADIUS, so applications that speak these protocols can delegate login and user management to one central service.

It is designed to be self-hosted, from small home-lab or test setups deployed with Docker Compose to larger production clusters deployed with the official Helm chart. Official deployment options also include AWS CloudFormation templates and a DigitalOcean Marketplace app.

The project also offers an enterprise edition, positioned as a replacement for commercial IdPs such as Okta, Auth0, Entra ID and Ping Identity.

Key features

  • 01Supports SAML, OAuth2/OIDC, LDAP and RADIUS protocols.
  • 02Deployable with Docker Compose, Kubernetes Helm chart, or AWS CloudFormation.
  • 03Provides a web admin interface with light and dark themes.
  • 04Offers an enterprise edition for large-scale identity management.

Use cases

  • Adding single sign-on to self-hosted applications in a home lab or small team.
  • Centralizing logins for internal services running on Kubernetes.
  • Replacing a commercial identity provider with a self-hosted alternative.

Quick start

  1. 1

    Install with Docker Compose (recommended for small/test setups); see the Docker Compose install docs

  2. 2

    Or deploy on Kubernetes with the Helm chart (recommended for larger setups)

Things to know

  • The license is listed as NOASSERTION in the metadata, though the README mentions MIT, CC BY-SA 4.0 and a separate enterprise license for parts of the code.
  • Some features are part of a paid enterprise offering, separate from the open-source core.
  • Self-hosting requires setting up and maintaining the identity service and its infrastructure.

Topics

#authentication#sso#oidc#oauth2#saml#identity-provider#self-hosted#authentik#authorization#kubernetes

FAQ

What is authentik?
Open-source identity provider for single sign-on, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, self-hosted from small labs to large clusters. authentik is an open-source Identity Provider (IdP) for single sign-on. It supports SAML, OAuth2/OIDC, LDAP and RADIUS, so applications that speak these protocols can delegate login and user management to one central service.
Is authentik free to use? What license does it have?
authentik is open source under the Other license. Check the license terms before using it in commercial products.
Is authentik still maintained?
Actively maintained. The last commit to authentik was on Oct 18, 2026.
What can I use authentik for?
Adding single sign-on to self-hosted applications in a home lab or small team. Centralizing logins for internal services running on Kubernetes. Replacing a commercial identity provider with a self-hosted alternative.
How do I install authentik?
Install with Docker Compose (recommended for small/test setups); see the Docker Compose install docs Or deploy on Kubernetes with the Helm chart (recommended for larger setups)
Where can I get authentik?
The source code and installation instructions are on GitHub: https://github.com/goauthentik/authentik

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects