Authentik

Authentik is a self-hosted, open source identity provider that empowers organizations to take control of their authentication processes. It offers flexible, scalable, and secure solutions for both internal and customer-facing applications.

Authentik is the open source alternative to:

Okta

Auth0

Clerk

AWS Cognito

About Authentik

Authentik delivers a comprehensive identity solution by supporting a wide range of protocols including OAuth2, SAML2, LDAP, SCIM, RADIUS, and Kerberos. It simplifies implementation with pre-built workflows, customizable authentication templates, and robust APIs for seamless integration with modern infrastructures like Docker, Kubernetes, and Terraform. The tool enables secure Single Sign-On, Multi-factor Authentication, Conditional Access, and Zero Trust security, all managed through transparent, community-reviewed open source code.

Key Features

Self-hosted and open source with complete control over identity data
Supports modern protocols: OAuth2, SAML2, LDAP, SCIM, RADIUS, and Kerberos
Customizable workflows and pre-built authentication templates
Robust APIs for automation and seamless integration
Facilitates secure SSO, MFA, and Zero Trust security implementations
Easily deployable on Docker, Kubernetes, and via Terraform

Pricing

Open Source

$0/Free

Ideal for homelab users and simple use cases.

Features:

✓Supports OIDC, SAML, LDAP, SCIM, RADIUS, Kerberos, and Proxy
✓Web-based RDP/SSH access
✓Covers both B2B and B2C use cases
✓Community Discord support

Professional

$5/Subscription

Billed annually at $5 per user per month plus $0.02 per external user, offering enterprise functionality.

Features:

✓Includes all Open Source features
✓Compliance and audit logging
✓Google Workspace and Microsoft Entra ID integrations
✓Embed external OAuth/SAML sources and Chrome Enterprise trust integration
✓Ticket-based support for subscriptions over $1k

Enterprise

$20000/Subscription

Custom contracts with expert support available for large-scale organizations.

Features:

✓Everything in Professional
✓Dedicated, customized support
✓Volume discounts for thousands of users
✓FIPS compliance for FedRAMP requirements

Summary

Authentik blends robust identity management with flexible deployment options, making it a critical tool for secure authentication across various environments. Its extensive protocol support, customizable workflows, and transparent, community-backed open source model address the evolving demands of modern security and access control.

Related Open Source Tools

BoxyHQ

🔥 Streamline your web application's authentication with Jackson, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning. 🤩

1,970

View tool →

SuperTokens

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

13,910

View tool →

Stack Auth

Open-source Auth0/Clerk alternative

5,285

View tool →

Ory

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

11,587

View tool →

Cerbos

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

3,660

View tool →