OSS Tanbou
View on GitHub

authentik — A self-hosted Identity Provider spanning SAML, OIDC, LDAP, and RADIUS

OSS health 100
About these scores

Discovery score is an unbounded weighted, log-compressed index of stars, watchers, forks, and contributors. Growth momentum is its change over the observed period; OSS health is a 0–100 score from available repository recency, Community Health, and release data.

Stars
25,595
Primary language
Python
License
Not determined
Repository last updated
Sep 17, 2026

Overview

authentik is a self-hosted identity platform that brings SAML, OAuth 2.0/OIDC, LDAP, RADIUS, and related SSO use cases under one Identity Provider. Docker Compose targets smaller setups while Kubernetes/Helm supports larger deployments. The latest stable release checked on September 17, 2026 is 2026.8.2.

Features and best fit

Based on official documentation; not hands-on tested · Content checked:

Unify different authentication protocols behind one IdP

SAML, OAuth 2.0/OIDC, LDAP, RADIUS, and reverse-proxy use cases can sit behind one identity layer, making it practical to combine newer web applications with legacy services that do not all support the same protocol.

Sources: [2][1]

Scale a Python/Django and PostgreSQL core from containers to clusters

The core uses Python/Django with PostgreSQL-oriented components. Official deployment paths include Docker Compose, Kubernetes/Helm, AWS CloudFormation, and marketplace options. The dependency set also includes FIDO2/WebAuthn and SCIM-related components.

Sources: [2][4]

For teams that want one identity plane across SaaS, internal, and legacy applications

authentik is especially relevant when applications have mixed protocol support and the organization wants to keep identity control on infrastructure it operates, while retaining a path from small deployments to production clusters.

Sources: [2]

Treat identity availability, upgrades, backups, secrets, and the license boundary as first-class concerns

The README identifies the core as MIT, documentation as CC BY-SA 4.0, and authentik/enterprise/ under a separate Enterprise license, so the repository is not uniformly MIT. Because an IdP outage can affect many downstream applications, production deployments should also plan database backups, secret protection, HA, and tested upgrades.

Sources: [2][3]

Official sources

  1. [1]goauthentik/authentik — GitHub repository metadata(2026-09-17)
  2. [2]authentik — README(2026-09-17)
  3. [3]authentik 2026.8.2 release(2026-09-17)
  4. [4]authentik — pyproject.toml(2026-09-17)
Supplemental curator note

Treat authentik as identity glue across modern and legacy protocols, not merely an OIDC server.

Try it in 3 steps

  1. 1

    Get the source

    git clone --depth 1 https://github.com/goauthentik/authentik.git
  2. 2

    Enter the repository

    cd authentik
  3. 3

    Check the official steps

    Continue with the commands in the README Installation, Quick Start, or Getting Started section.

    find . -maxdepth 1 -iname 'README*' -exec sed -n '1,220p' {} \; -quit
Check the official README

Growth

Growth trends · Last 30 days

25,595 Stars

Trend data is still being collected.

Development activity

Last 90 days · weekly

Commits (last 30 days)
495
Open PRs
338

Development activity is still being collected.

Built with

Categories and tags

Categories

Tags

GitHub data

GitHub dataView detailed GitHub data
View on GitHub

GitHub Topics

  • saml
  • saml-idp
  • saml-sp
  • oauth2
  • oauth2-server
  • oauth2-client
  • oidc
  • oidc-provider
  • oidc-client
  • sso
  • proxy
  • reverse-proxy
Stars
25,595
Forks
2,019
Watchers
85
Open issues
760
Primary language
Python
License
Not determined
Repository last updated
Sep 17, 2026
Write a related article

Share a guide or use case for this OSS in Markdown. Articles are published after administrator approval.

Report incorrect information

Tell us if any listing information is incorrect or outdated.