<h2 id="what-is-authentik">What is authentik?</h2>
<p><strong>authentik</strong> is a self‑hosted, open‑source Identity Provider (IdP) and Single Sign‑On (SSO) platform designed with security, flexibility, and customization at its core. It lets developers and admins delegate <strong>user management, authentication flows, MFA, password recovery, session control, policy enforcement</strong>, and more—so you can focus on building your application instead of reinventing auth.</p>
<hr/>
<h3 id="🔧-key-capabilities">🔧 Key Capabilities</h3>
<ul>
<li><strong>Multi‑Protocol Support</strong>: Native compatibility with OAuth2/OIDC, SAML2, LDAP, RADIUS, and SCIM ensures seamless integration with both modern and legacy systems.</li>
<li><strong>Flexible Authentication Flows</strong>: Define custom user journeys (“Flows”) assembled from modular “Stages” for login, MFA, registration, recovery, or approval—configurable via visual editor, APIs, or YAML blueprints.</li>
<li><strong>Multi‑Factor &amp; Passwordless</strong>: Supports TOTP, hardware WebAuthn/passkeys, delivering phishing‑resistant and advanced authentication options.</li>
<li><strong>Conditional Access &amp; Zero‑Trust</strong>: Apply attribute-based or context-aware policies (e.g. time-of-day, device, IP/location) to align with zero‑trust security models.</li>
<li><strong>GeoIP &amp; Impossible‑Travel Detection</strong>: Enhance protection with location verification, threat detection, session binding, and audit logging.</li>
<li><strong>Self‑Service Admin &amp; User UI</strong>: Admin dashboard for managing users, logs, flows, and integrations; User portal for profile management, password resets, and app access overview.</li>
</ul>
<hr/>
<h3 id="📦-deployment--integration">📦 Deployment &amp; Integration</h3>
<ul>
<li><strong>Self‑Hosted Anywhere</strong>: Deploy via Docker Compose, Kubernetes (Helm), Terraform, or traditional VMs—retaining full control over your identity infrastructure.</li>
<li><strong>Pre‑Built Integrations</strong>: Out-of-the-box connectors for applications like Nextcloud, WordPress, *arr suite, Jitsi, and more—using OAuth2, SAML, or proxy providers.</li>
<li><strong>Extensible with API &amp; IaC</strong>: Automate flows, policies, provisioning, apps, and more through REST APIs, Terraform provider, and YAML blueprints.</li>
</ul>
<hr/>
<h3 id="💡-why-choose-authentik">💡 Why Choose authentik?</h3>
<ul>
<li><strong>Transparent &amp; Secure</strong>: Open source with community audits and support for enterprise-grade standards like FIPS.</li>
<li><strong>Simplicity Over Keycloak</strong>: Lightweight, developer-friendly UI and modular approach with fewer resource demands.</li>
<li><strong>Avoid Vendor Lock‑In</strong>: Gives you independence from proprietary IdPs like Okta or Azure AD.</li>
<li><strong>Cost‑Effective</strong>: No per-user fees—open-core licensing means full functionality is available without hidden costs.</li>
</ul>
<hr/>
<h3 id="🧩-common-use-cases">🧩 Common Use Cases</h3>
<ul>
<li>Employee or enterprise SSO</li>
<li>Customer identity management for SaaS</li>
<li>Zero‑trust gateways and conditional access</li>
<li>Modernizing legacy apps with proxy/LDAP support</li>
<li>Remote access gateways (SSH/RDP/VNC)</li>
<li>API protection with token and policy enforcement</li>
<li>Self‑service user administration</li>
</ul>
<hr/>
<p>With a thriving community, over one million deployments, and enterprise backing, <strong>authentik</strong> provides a powerful, secure, and adaptable identity platform—empowering you to stop rebuilding authentication and focus on product innovation.</p>

authentik

docker

docker-compose

authentik is a self‑hosted, open‑source Identity Provider (IdP) and Single Sign‑On (SSO) platform designed with security, flexibility, and customization at its core.

goauthentik.io

Focus on building great things, while you use these 1-Click Apps to build your business.

These 1-Click Apps make it simple to deploy and manage your clients' infrastructure. Save time and resources, while reducing headaches and passing the value onto your clients.

Apps for agencies and website development shops

Work more effectively from home or remotely with these 1-Click Apps.

Work more effectively from home or remotely

Stop spending hours editing YAML and Helm charts. Instead, use these popular, preconfigured solutions to add apps to your Kubernetes cluster in minutes instead of days.

1-Click Apps for managing Kubernetes environments

Stay focused on teaching and learning, instead of managing infrastructure. 

1-Click Apps for students and educational institutions

Secure your network with a VPN, protect your database, and more, with this selection of 1-Click Apps.

SaaS Add-Ons make your DigitalOcean infrastructure better! Check out the full list of SaaS Add-Ons here!  

New Feature Alert: Introducing Software License Subscriptions on DigitalOcean Marketplace!

We now support Droplet 1-Click updates via API. See documentation for the details

Check out Tabnine, the AI coding assistant that accelerates & simplifies software development.

Description

Software Included

Getting started after deploying authentik

API Creation