# authentik

> authentik is a free, open-source app you can self-host in the identity & SSO category. Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts. It has 25,859 GitHub stars, is released under the MIT license and ships a Docker image. It is a self-hosted alternative to Auth0 and Okta.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/goauthentik/authentik |
| Website | https://goauthentik.io/ |
| GitHub stars | 25,859 |
| Forks | 2,058 |
| Open issues | 758 |
| License | MIT |
| License type | Open source |
| Language | Python |
| Docker image | Yes |
| Platforms | Docker |
| Categories | Identity & SSO |
| Commits, last 12 months | 5,375 |
| Last commit | Oct 6, 2026 |
| Latest release | version/2026.8.3 (Sep 17, 2026) |
| Created | Dec 30, 2019 |
| Maintenance | Actively maintained |
| Archived | No |

Topics: saml, saml-idp, saml-sp, oauth2, oauth2-server, oauth2-client, oidc, oidc-provider, oidc-client, sso

## Install

Step-by-step deploy guide: [How to self-host Authentik with Docker Compose](https://appsgit.com/guides/authentik) (intermediate, about 20 minutes).

Need it installed for you? [appsgit installation help](https://appsgit.com/services/install): a fixed quote by email, single app installs from $79.

## authentik replaces

- [Auth0 alternatives](https://appsgit.com/alternatives/auth0): An identity platform offering login, single sign-on and user management as a service.
- [Okta alternatives](https://appsgit.com/alternatives/okta): An enterprise identity and single sign-on provider.

## Comparisons

- [Keycloak vs authentik](https://appsgit.com/compare/keycloak-vs-authentik): Pick Keycloak for an enterprise-grade, Apache-licensed identity server with deep standards support; pick authentik for a friendlier UI, visual flows and a built-in proxy for homelab apps.
- [authentik vs Authelia](https://appsgit.com/compare/authentik-vs-authelia): Pick authentik for a full identity provider with user management UI, SAML and LDAP; pick Authelia for a lightweight Go forward-auth portal that adds 2FA in front of your reverse proxy.

## Similar apps in Identity & SSO

- [Keycloak](https://appsgit.com/apps/keycloak): Open-source identity and access management with SSO, OIDC, SAML and user federation. (37,156 stars, Apache-2.0, Java, Docker)
- [Authelia](https://appsgit.com/apps/authelia): Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy. (29,182 stars, Apache-2.0, Go, Docker)
- [SuperTokens](https://appsgit.com/apps/supertokens): Open-source authentication with login, sessions and social sign-in for your own app. (15,335 stars, Apache-2.0, Java, Docker)
- [ZITADEL](https://appsgit.com/apps/zitadel): Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go. (15,213 stars, AGPL-3.0, Go, Docker)
- [Logto](https://appsgit.com/apps/logto): Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps. (14,652 stars, MPL-2.0, TypeScript, Docker)
- [Casdoor](https://appsgit.com/apps/casdoor): UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP. (14,515 stars, Apache-2.0, Go, Docker)
- [Ory Kratos](https://appsgit.com/apps/ory-kratos): Headless identity and user management API with login, registration and account recovery. (13,909 stars, Apache-2.0, Go, Docker)
- [Dex](https://appsgit.com/apps/dex): Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities. (11,157 stars, Apache-2.0, Go, Docker)

---

Canonical page: https://appsgit.com/apps/authentik
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed nightly.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.