authentik is an identity provider for managing authentication and access to applications and services. It offers a centralised alternative to maintaining separate login systems, allowing administrators to define authentication processes and apply access policies across different applications.
Its distinguishing feature is a configurable flow and policy system. Administrators can construct authentication experiences from reusable stages, adding identity checks, credentials and additional verification requirements according to the needs of an application.
The platform supports several authentication protocols and can integrate with services that were not originally designed for single sign-on. It also provides a RADIUS provider through a separate outpost, making it useful for some network authentication scenarios. RADIUS support is currently limited to authentication requests rather than accounting, so authentik is not a complete replacement for a general-purpose RADIUS server.
This is free and open source software.
Key Features
- Single sign-on for applications and services.
- Supports OAuth 2.0, OpenID Connect and SAML authentication.
- Configurable authentication flows built from reusable stages and policies.
- Multifactor authentication using TOTP, WebAuthn and supported external authenticators.
- RADIUS authentication through a dedicated outpost.
- RADIUS authentication flows with identification, password and authenticator validation stages.
- LDAP provider for integrating compatible applications.
- Reverse proxy authentication for applications without native single sign-on support.
- External identity provider integration and identity federation.
- User enrolment, account recovery and authentication verification workflows.
- Application-specific access policies and conditional authentication.
- Python expressions for advanced policy evaluation.
- Central administration of users, groups, applications and providers.
- Outpost architecture for running authentication services on separate systems.
- Outpost operation in restricted networks without general Internet access.
- Customisable authentication interfaces and branding.
- Event logging and administrative monitoring.
Website: github.com/goauthentik/authentik
Support:
Developer: Jens Langhammer and contributors
License: MIT License
authentik is written in Python and TypeScript. Learn Python with our recommended free books and free tutorials. Learn TypeScript with our recommended free books and free tutorials.
Related Software
| Single Sign-on Software | |
|---|---|
| KeyCloak | Identity and access management solution for applications and services |
| CAS | Enterprise multilingual single sign-on solution |
| authentik | Identity provider that emphasizes flexibility and versatility |
| Authelia | Authentication and authorization server |
| Casdoor | UI-first Identity and Access Management / Single-Sign-On platform |
| Kanidm | Simple and secure identity management |
| WSO2 Identity Server | Identity and Access Management solution |
| Janssen | Digital identity platform |
| OpenAM | Access management solution that includes SSO |
| ZITADEL | Identity and access management platform |
| Logto | Identity and access management platform |
| LemonLDAP::NG | Single sign-on, access management and identity federation platform |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.