spb/tools-spboucher-ai

1{2  "slug": "authentik",3  "name": "authentik",4  "aliases": ["goauthentik"],5  "vendor": { "name": "Authentik Security Inc.", "slug": "authentik-security", "website": "https://goauthentik.io" },6  "homepage_url": "https://goauthentik.io/",7  "docs_url": "https://docs.goauthentik.io/",8  "repo_url": "https://github.com/goauthentik/authentik",9  "pricing_url": "https://goauthentik.io/pricing/",10  "license_url": "https://github.com/goauthentik/authentik/blob/main/LICENSE",11  "product_type": "application",12  "product_status": "active",13  "summary": "Self-hosted identity provider with OIDC, SAML, LDAP, RADIUS and SCIM support and a built-in application proxy, with an MIT core and an enterprise edition",14  "description": "authentik is an identity provider from Authentik Security Inc. designed for self-hosting. It offers single sign-on through OAuth 2.0 and OpenID Connect, SAML 2.0 and token exchange, exposes directories through LDAP and RADIUS outposts, provisions users with SCIM, and includes an application proxy that adds authentication in front of services that have none. Flows and stages let administrators compose login, enrollment and recovery journeys in the web interface without code, and integrations with Traefik, Caddy and NGINX forward-auth are documented.\n\nThe server is written in Python (Django) with Go outposts, deployed with Docker Compose, Kubernetes or Terraform, and backed by PostgreSQL. The repository is MIT licensed except for the enterprise directory, which carries a separate license; the enterprise edition adds support and features for larger organizations.\n\nauthentik is lighter to run than Keycloak and popular in homelabs and small companies, but it is a younger project with a smaller ecosystem of third-party adapters, and some capabilities sit behind the enterprise license.",15  "capabilities": ["OAuth 2.0, OpenID Connect and SAML 2.0 identity provider", "LDAP and RADIUS outposts and SCIM provisioning", "Application proxy and forward-auth for legacy services", "Visual flows and stages for login, enrollment, MFA and recovery", "Social and enterprise identity source federation", "Docker Compose, Kubernetes and Terraform deployment"],16  "workflows": ["Put SSO in front of self-hosted dashboards through forward-auth on Traefik or Caddy", "Provide LDAP to applications that lack OIDC", "Federate Google or Microsoft logins into one tenant"],17  "advantages": ["MIT-licensed core and easy Compose deployment", "Built-in proxy covers apps without native auth", "Flexible visual flow editor"],18  "limitations": ["Some features require the enterprise license", "Smaller ecosystem than Keycloak", "Requires PostgreSQL and (optionally) Redis to run"],19  "prerequisites": ["Docker Compose or Kubernetes host", "PostgreSQL database"],20  "audiences": ["Self-hosters and homelab operators", "Small and medium organizations owning their identity"],21  "alternatives": ["keycloak"],22  "comparison_notes": "Keycloak is the longer-established, Apache-2.0, CNCF-governed Java server with broader enterprise adoption; authentik trades some depth for a lighter footprint, a built-in proxy and a visual flow editor, with an enterprise tier for advanced needs.",23  "categories": [{ "slug": "identity-access", "primary": true }],24  "tags": ["identity", "sso", "oidc", "saml", "ldap", "self-hosted", "open-source", "python"],25  "use_cases": ["manage-identity", "secure-applications"],26  "operating_systems": ["linux"],27  "execution_modes": ["self-hosted"],28  "interfaces": ["web", "api"],29  "deployment_models": ["on-premises"],30  "integrations": ["Traefik", "Caddy", "NGINX", "PostgreSQL", "Kubernetes", "Docker", "Terraform", "Google", "Microsoft Entra ID"],31  "data_formats": ["JSON", "JWT", "SAML XML", "YAML blueprints"],32  "languages": ["Python", "Go", "TypeScript"],33  "source_model": "mixed",34  "license_spdx": "MIT",35  "pricing_model": ["open-source", "free", "enterprise"],36  "pricing_checked_at": "2026-11-02",37  "self_hostable": true,38  "sources": [39    { "url": "https://goauthentik.io/", "type": "official_site", "title": "authentik", "supports": ["name", "summary", "vendor", "capabilities"], "checked_at": "2026-11-02" },40    { "url": "https://docs.goauthentik.io/", "type": "official_docs", "title": "authentik Documentation", "supports": ["capabilities", "integrations", "prerequisites"], "checked_at": "2026-11-02" },41    { "url": "https://github.com/goauthentik/authentik/blob/main/LICENSE", "type": "license_page", "title": "authentik LICENSE", "supports": ["license_spdx", "source_model"], "checked_at": "2026-11-02", "note": "MIT except authentik/enterprise (separate license) and website content (CC BY-SA 4.0)." },42    { "url": "https://goauthentik.io/pricing/", "type": "pricing_page", "title": "authentik Pricing", "supports": ["pricing_model"], "checked_at": "2026-11-02" }43  ],44  "confidence": "high",45  "discovery_method": "editorial-research",46  "depth": "standard",47  "editorial_status": "reviewed",48  "visibility": "public",49  "featured": false,50  "author": "batch-B2"51}52