mirror of
https://github.com/goauthentik/authentik.git
synced 2025-12-05 22:03:54 +01:00
The authentication glue you need.
authentication
authentik
authorization
kubernetes
oauth2
oauth2-client
oauth2-server
oidc
oidc-client
oidc-provider
proxy
reverse-proxy
saml
saml-idp
saml-sp
security
sso
|
Some checks are pending
CI - API Docs / lint (prettier-check) (push) Waiting to run
CI - API Docs / build (push) Waiting to run
CI - API Docs / deploy (push) Blocked by required conditions
CI - Source code docs / publish-source-docs (push) Waiting to run
CI - Docs / lint (prettier-check) (push) Waiting to run
CI - Docs / build-docs (push) Waiting to run
CI - Docs / build-integrations (push) Waiting to run
CI - Docs / build-container (push) Waiting to run
CI - Docs / ci-website-mark (push) Blocked by required conditions
QA - CodeQL / Analyze (push) Waiting to run
QA - CodeQL / Analyze-1 (push) Waiting to run
QA - CodeQL / Analyze-2 (push) Waiting to run
* enterprise/stages/mtls: fix traefik certificate parsing Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add links for relevant docs Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> |
||
|---|---|---|
| .github | ||
| .vscode | ||
| authentik | ||
| blueprints | ||
| cmd | ||
| internal | ||
| lifecycle | ||
| locale | ||
| packages | ||
| schemas | ||
| scripts | ||
| tests | ||
| web | ||
| website | ||
| .dockerignore | ||
| .editorconfig | ||
| .gitignore | ||
| .prettierignore | ||
| CODE_OF_CONDUCT.md | ||
| CODEOWNERS | ||
| CONTRIBUTING.md | ||
| docker-compose.yml | ||
| Dockerfile | ||
| go.mod | ||
| go.sum | ||
| ldap.Dockerfile | ||
| LICENSE | ||
| Makefile | ||
| manage.py | ||
| package-lock.json | ||
| package.json | ||
| proxy.Dockerfile | ||
| pyproject.toml | ||
| rac.Dockerfile | ||
| radius.Dockerfile | ||
| README.md | ||
| schema.yml | ||
| SECURITY.md | ||
| tsconfig.json | ||
| uv.lock | ||
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
![]() |
![]() |
![]() |
![]() |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!



