Authentik Identity Platform

Authentik is an open-source identity provider and authentication platform that offers flexible authentication flows, multi-factor authentication, single sign-on, and user lifecycle management for self-hosted applications. Created by Jens Langhammer (BeryJu) in 2020, with over 15,000 stars as of 2026, Authentik provides a comprehensive IAM solution comparable to Okta and Auth0. Key features include: SSO protocols (SAML 2.0, OAuth2, OIDC, LDAP, and RADIUS for integrating with virtually any application), authentication flows (visual flow builder for creating custom login, enrollment, recovery, and password change workflows with conditional stages and branching), multi-factor authentication (TOTP authenticator apps, WebAuthn and FIDO2 hardware keys, Duo push notifications, SMS verification, and static recovery tokens), directory integration (LDAP and Active Directory synchronization for user provisioning and group mapping), policy engine (expression-based policies using Python for fine-grained access control based on user attributes, group membership, and request context), application gateways (reverse proxy and forward auth modes for protecting applications without native SSO support), user self-service (password reset, MFA enrollment, account settings, and session management via a user dashboard), admin interface (web-based admin panel for managing users, groups, applications, policies, flows, and tokens), event logging (audit trail of authentication events, policy decisions, and system changes with configurable notification rules), and deployment (Docker Compose and Kubernetes with Helm charts, supporting PostgreSQL or Redis backends).