* I think I'm happy with this structure Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fixup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add api Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix missing engine mode Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add ui Signed-off-by: Jens Langhammer <jens@goauthentik.io> * pull in the requests machinery Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fixup and gen Signed-off-by: Jens Langhammer <jens@goauthentik.io> * gen Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-wire things up Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-add more web stuff Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix unrelated test issue Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix mixin Signed-off-by: Jens Langhammer <jens@goauthentik.io> * gen Signed-off-by: Jens Langhammer <jens@goauthentik.io> * plumb in flows Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update ui Signed-off-by: Jens Langhammer <jens@goauthentik.io> * initial web Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix a couple things Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix api tests & schema Signed-off-by: Jens Langhammer <jens@goauthentik.io> * better pick request flow Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * change method Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix web lint Signed-off-by: Jens Langhammer <jens@goauthentik.io> * explicit perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix migrations Signed-off-by: Jens Langhammer <jens@goauthentik.io> * concrete m2m Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix perms Signed-off-by: Jens Langhammer <jens@goauthentik.io> * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add some default config Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix permission check -> requesting user checks against rule bindings' policies Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix unrelated Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix api client Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix styling Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix more Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add banner Signed-off-by: Jens Langhammer <jens@goauthentik.io> * attributes mixin prep for object attrs Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix typo Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix unrelated test failure Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ensure no self-approval Signed-off-by: Jens Langhammer <jens@goauthentik.io> * configurable expiry Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add meta info to requestable target Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add more events Signed-off-by: Jens Langhammer <jens@goauthentik.io> * only unique apps Signed-off-by: Jens Langhammer <jens@goauthentik.io> * initial app card impl Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add entitlement modal Signed-off-by: Jens Langhammer <jens@goauthentik.io> * respect filters Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-migrate Signed-off-by: Jens Langhammer <jens@goauthentik.io> * improve ux Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix child bindings? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * better ux for rule bindings Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix type check Signed-off-by: Jens Langhammer <jens@goauthentik.io> * initial dcr Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-migrate Signed-off-by: Jens Langhammer <jens@goauthentik.io> * handle error Signed-off-by: Jens Langhammer <jens@goauthentik.io> * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix missing through Signed-off-by: Jens Langhammer <jens@goauthentik.io> * oops Signed-off-by: Jens Langhammer <jens@goauthentik.io> * Clean up checkbox item types. * Fix grant type translation. * fix conflicting urls Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix duplicate url encoding Signed-off-by: Jens Langhammer <jens@goauthentik.io> * always create app Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rename options to function as override Signed-off-by: Jens Langhammer <jens@goauthentik.io> * copy pb Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update ui Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix title Signed-off-by: Jens Langhammer <jens@goauthentik.io> * copy bindings from app if none set Signed-off-by: Jens Langhammer <jens@goauthentik.io> * show policy bindings Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix copy & tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix unknown case Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com>
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
![]() |
![]() |
![]() |
![]() |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
When you contribute documentation, either to accompany a code change or as a standalone contribution, please be sure to follow our documentation Style Guide.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!



