30
Authentik – Self-hosted SSO & Identity Provider (Okta/Auth0 alternative)
(sh.itjust.works)
Authentik is an open-source identity provider you can host yourself.
It lets you use a single login across your self-hosted services, with support for OAuth2, OIDC, SAML, LDAP, and more.
Useful for managing access to apps like Jellyfin, Immich, Nextcloud, Vaultwarden, and other self-hosted tools.
GitHub: https://github.com/goauthentik/authentik
More details: https://digitalescapetools.com/tools/tool.html?id=authentik
More privacy-friendly tools: https://digitalescapetools.com/
Is there a reason why Keycloak isn't used much? I've been loving it for years without issue but I rarely see it discussed.
Keycloak only really acts as an OIDC/SAML provider. Whereas Authentik can do OIDC, SAML, LDAP, and more in a single app. It's just extremely rich.
I really like it because it has invites, which are extremely nice if you really want that form of fast onboarding.
I'm not sure what you mean about LDAP. KC can absolutely interface with LDAP.
It can interface with ldap, but it cannot act as an ldap provider.
Perhaps I should take a look then, although I'll admit all my SSO stuff is over OIDC.