AppBreakup
authentik logo

authentik

Self-hosted open-source identity provider with SSO, LDAP, RADIUS and an application proxy.

Open sourceSelf-hostableAuthentication providers
Verified facts
4 of 4
Alternatives ranked
5
Approved reviews
0
Visits sent from here
0

About authentik

authentik is an open-source identity provider written in Python and Go that you run yourself, usually with Docker Compose or Kubernetes. It acts as an OIDC and SAML provider for modern apps, an LDAP and RADIUS server for older systems and network gear, and a proxy that adds login in front of apps with no authentication of their own. Flows and stages let you design enrolment, login and recovery steps in the admin UI, and policies written in Python allow detailed conditions. It is a favourite in homelab and self-hosting circles as a more approachable alternative to Keycloak, and it is increasingly used by companies too. The open-source edition is free with community support; the Enterprise edition adds features such as remote access, device trust connectors and support, priced per internal user and per external user. Expect to spend some time learning its flow model before it feels natural.

Best for: Self-hosters and IT teams who want one identity provider for web apps, LDAP and VPNs.

Pros and cons

What works

  • Covers OIDC, SAML, LDAP, RADIUS and proxy auth in one tool
  • Visual flows and Python policies for custom logic
  • Free open-source edition with no user limits

Why people leave

  • Flow and stage concepts take time to learn
  • No managed cloud; you operate it yourself
  • Some enterprise features need a paid licence

Top authentik alternatives

See all 5
  1. 1Keycloak logo
    Keycloak

    More widely deployed in enterprises, with a large body of documentation.

    66.5
  2. 2Authelia logo
    Authelia

    Much lighter option when you mainly need SSO and 2FA in front of a reverse proxy.

    62.6
  3. 3Pocket ID logo
    Pocket ID

    Far simpler passkey-only OIDC provider for small teams and homelabs.

    59.6
  4. 4Zitadel logo
    Zitadel

    Open-source with a managed cloud option if you want to stop self-hosting.

    57.2
  5. 5Kanidm logo
    Kanidm

    Rust-based identity server with Linux login and SSH key distribution built in.

    55.3

Why people left authentik

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from authentik, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of authentik
Your rating of authentik

Never shown publicly. A work email helps us verify you.

What did you use it for, and what was good or bad? At least 40 characters.

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

authentik: common questions

Is authentik free?

Yes. authentik is free, open-source software that you can host yourself.

Is authentik open source?

Yes. The source code is on GitHub at goauthentik/authentik. You can also run it on your own server.

What platforms does authentik run on?

authentik is available for Self-hosted.

What are the best alternatives to authentik?

The highest-ranked authentik alternatives right now are Keycloak, Authelia and Pocket ID. See the full ranked list for pricing, platforms and verified facts.

See all 5 authentik alternatives