README
<img src="https://goauthentik.io/img/icon_top_brand_colour.svg" height="150" alt="authentik logo">

What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
When you contribute documentation, either to accompany a code change or as a standalone contribution, please be sure to follow our documentation Style Guide.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!
License

Extension points exported contracts — how you extend this code
PaginatorRequest (Interface)
Generic interface that mimics a generated request by the API client Requires mainly `Treq` which will be the actual requ [8 …
internal/outpost/ak/api_utils.go
Middleware (Interface)
(no doc) [7 implementers]
packages/client-ts/src/runtime.ts
MappedNullable (Interface)
(no doc) [105 implementers]
packages/client-go/utils.go
StageHost (Interface)
(no doc) [10 implementers]
web/src/flow/types.ts
ImportMetaEnv (Interface)
* Environment variables injected by ESBuild.
packages/esbuild-plugin-live-reload/client/types.d.ts
ImportMetaEnv (Interface)
* Environment variables injected by ESBuild.
web/types/esbuild.d.ts
TermCache (Interface)
* Cache structure for glossary term data - key is guaranteed to be a string docId
website/docusaurus-theme/theme/DocCardList/GlossaryDocCardList.tsx
ProcessEnv (Interface)
(no doc)
packages/logger-js/types/node.d.ts
Core symbols most depended-on inside this repo
get
called by 2496
web/src/elements/types.ts
html
called by 2186
web/packages/sfe/src/index.ts
generate_id
called by 1637
authentik/lib/generators.py
request
called by 1139
packages/client-ts/src/runtime.ts
IsNil
called by 971
packages/client-go/utils.go
value
called by 969
packages/client-ts/src/runtime.ts
aki
called by 785
web/src/common/api/client.ts
create
called by 706
authentik/rbac/api/roles.py
Shape
Method
15,229
Function
6,922
Class
4,387
Interface
2,697
Struct
348
Route
230
TypeAlias
132
Enum
15
FuncType
3
Languages
TypeScript51%
Python32%
Go16%
Modules by API surface
packages/client-ts/src/apis/StagesApi.ts839 symbols
packages/client-ts/src/apis/SourcesApi.ts692 symbols
packages/client-ts/src/apis/ProvidersApi.ts501 symbols
packages/client-ts/src/apis/PropertymappingsApi.ts445 symbols
packages/client-ts/src/apis/AuthenticatorsApi.ts333 symbols
packages/client-ts/src/apis/PoliciesApi.ts302 symbols
packages/client-ts/src/apis/EndpointsApi.ts278 symbols
packages/client-ts/src/apis/CoreApi.ts275 symbols
authentik/core/models.py141 symbols
packages/client-ts/src/apis/OutpostsApi.ts136 symbols
packages/client-ts/src/apis/EventsApi.ts132 symbols
packages/client-go/model_brand.go107 symbols
Dependencies from manifests, versioned
beryju.io/ldapv0.2.1 · 1×
beryju.io/radius-eapv0.1.1 · 1×
github.com/Azure/go-ntlmsspv0.1.1 · 1×
github.com/beorn7/perksv1.0.1 · 1×
github.com/cespare/xxhash/v2v2.3.0 · 1×
github.com/coreos/go-oidc/v3v3.19.0 · 1×
github.com/davecgh/go-spewv1.1.2-0.20180830191 · 1×
github.com/felixge/httpsnoopv1.0.3 · 1×
github.com/getsentry/sentry-gov0.47.0 · 1×
github.com/go-asn1-ber/asn1-berv1.5.8-0.20250403174 · 1×
github.com/go-http-utils/etagv0.0.0-2016112402323 · 1×
Datastores touched
authentikDatabase · 1 repos