The authentication glue you need.
  • Python 54.8%
  • TypeScript 35%
  • Go 4.5%
  • CSS 2.1%
  • JavaScript 1.5%
  • Other 2%
Find a file
Dave Greene 26bfb6e52c
outposts/controllers/k8s: add option to disable strict x509 checks (#21210)
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-04-14 18:59:03 +02:00
.cargo packages/ak-common/config: init (#21256) 2026-04-02 15:05:35 +02:00
.github ci: bump softprops/action-gh-release from 2.6.1 to 2.6.2 (#21589) 2026-04-14 12:38:42 +02:00
.vscode core, web: Vendored client follow-ups (#21174) 2026-03-26 18:33:24 +01:00
authentik outposts/controllers/k8s: add option to disable strict x509 checks (#21210) 2026-04-14 18:59:03 +02:00
blueprints enterprise/search: move QL to open source] (#21484) 2026-04-09 16:37:11 +02:00
cmd root: allow listening on multiple IPs (#20930) 2026-03-19 15:46:47 +00:00
internal internal: fix certificate fallback without SNI (#21417) 2026-04-07 01:28:44 +02:00
lifecycle lifecycle/container: fix OCI image labels (#21574) 2026-04-14 14:47:16 +02:00
locale core, web: update translations (#21488) 2026-04-09 11:33:41 +01:00
packages packages/django-dramatiq-postgres: reset db connections in raise_connection_error (#21577) 2026-04-14 12:20:23 +00:00
schemas enterprise/providers: WS-Federation (#19583) 2026-01-28 17:43:16 +01:00
scripts tests: refactor test harness to split apart a single file (#21391) 2026-04-05 22:12:52 +02:00
tests core: bump axllent/mailpit from v1.29.5 to v1.29.6 in /tests/e2e (#21398) 2026-04-06 10:07:55 +01:00
web web: bump prettier from 3.8.1 to 3.8.2 in /web (#21568) 2026-04-14 13:49:28 +02:00
website outposts/controllers/k8s: add option to disable strict x509 checks (#21210) 2026-04-14 18:59:03 +02:00
.dockerignore packages/ak-lib: init (#21257) 2026-03-31 11:33:46 +02:00
.editorconfig website: add netlify cache plugin (#15113) 2025-06-18 15:07:15 +02:00
.gitattributes packages/django-dramatiq-postgres: fix default value for HTTPServerThread (#21216) 2026-03-28 20:57:46 +01:00
.gitignore root: cleanup API generation (#21172) 2026-03-26 13:48:01 +00:00
.prettierignore core, web: Vendored client follow-ups (#21174) 2026-03-26 18:33:24 +01:00
Cargo.lock packages/ak-common/db: init (#21357) 2026-04-09 13:57:44 +02:00
Cargo.toml packages/ak-common/db: init (#21357) 2026-04-09 13:57:44 +02:00
CODE_OF_CONDUCT.md website: remove the last updated option from footer (#13493) 2025-03-12 18:59:21 +00:00
CODEOWNERS packages/ak-lib: init (#21257) 2026-03-31 11:33:46 +02:00
CONTRIBUTING.md root: clean up README (#16286) 2025-09-02 21:38:53 +00:00
cspell.config.jsonc website/docs: add grafana dashboard (#21254) 2026-03-30 19:32:49 +02:00
go.mod core: bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 (#21451) 2026-04-08 11:46:38 +02:00
go.sum core: bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 (#21451) 2026-04-08 11:46:38 +02:00
LICENSE enterprise: initial license (#5293) 2023-04-19 16:13:45 +02:00
Makefile ci: parallel tests (#21515) 2026-04-10 16:36:56 +00:00
manage.py *: replace Celery with Dramatiq (#13492) 2025-07-28 17:00:09 +02:00
package-lock.json web: bump cspell from 9.7.0 to 10.0.0 (#21427) 2026-04-07 15:15:53 +01:00
package.json web: bump cspell from 9.7.0 to 10.0.0 (#21427) 2026-04-07 15:15:53 +01:00
pyproject.toml core: bump ruff from 0.15.9 to 0.15.10 (#21559) 2026-04-13 13:57:09 +00:00
README.md root: Fix transifex link (#17696) 2025-10-24 19:01:42 +02:00
rust-toolchain.toml core: bump rust-toolchain from 1.94.0 to 1.94.1 (#21193) 2026-03-27 12:44:30 +00:00
schema.yml enterprise/search: move QL to open source] (#21484) 2026-04-09 16:37:11 +02:00
SECURITY.md security: add item to intended behavior section of security policy (#21430) 2026-04-07 13:00:26 +02:00
tsconfig.json core, web: Vendored client follow-ups (#21174) 2026-03-26 18:33:24 +01:00
uv.lock core: bump ruff from 0.15.9 to 0.15.10 (#21559) 2026-04-13 13:57:09 +00:00

authentik logo


Join Discord GitHub Workflow Status GitHub Workflow Status GitHub Workflow Status Code Coverage Latest version

What is authentik?

authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.

Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.

Installation

  • Docker Compose: recommended for small/test setups. See the documentation.
  • Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
  • AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
  • DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.

Screenshots

Light Dark

Development and contributions

See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.

Security

Please see SECURITY.md.

Adoption

Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!

License

MIT License CC BY-SA 4.0 authentik EE License