authentik
by goauthentik
authentik is a self-hosted identity provider that lets people sign in to many apps with a single login. It supports standards such as SAML, OAuth2/OIDC, LDAP and RADIUS, and is meant for anything from home labs to large production setups.
- Stars
- 26.2k
- Licence
- MIT
- Runs on
- A small server
- Setup
- Technical
- Language
- Python
- Age
- 2497 days
What you can do with it
- Set up single sign-on so staff use one login for all internal and cloud apps
- Protect apps that have no login of their own by putting authentik's proxy in front of them
- Connect existing apps through SAML, OAuth2/OIDC, LDAP or RADIUS
Could replace
- Okta
- Auth0
Our suggestion based on what it does, not a feature-by-feature comparison.
Make money with it
An IT freelancer could charge to set up and maintain single sign-on for small companies that want to tighten access control.
An idea, not financial advice. Check the licence before charging for anything built on it.
Ways a business could use it
- Replace a paid single sign-on service with a self-hosted one to cut per-user licence costs
- Give staff and contractors one login with central control, so access is easy to remove when someone leaves
Can you use it commercially?
Free to use, change and sell (MIT-style terms in the licence file). Some folders may carry other terms.
Not legal advice. Read the project's licence file before building a product on it.
Getting it running
Install with Docker Compose for small setups, or with a Helm chart on Kubernetes for larger ones. AWS CloudFormation and a DigitalOcean one-click app are also available.
Follow the official instructions in the project README.
Things to check
- Licence is not clearly stated; the repository has several licences, including a separate enterprise licence
- Some enterprise features are paid
- Identity systems are security-critical, so poor setup or missed updates carry real risk
Who's talking about it
Checked 31 Oct 2026. Summary drafted by AI from the project's README.
