authentik

by authentik

authentik is an open source identity provider supporting OIDC, SAML, LDAP, SCIM, and RADIUS, with paid enterprise editions.

Visit website

Identity & Access (CIAM)

Starting priceOpen source free; Enterprise $5/user/mo

Pricing modelfreemium

DeploymentSelf-hosted (containers, AWS CloudFormation)

Free trialNo

About

authentik is an open source identity provider supporting OIDC, SAML, LDAP, SCIM, and RADIUS, with paid enterprise editions.

authentik brings authentication into a unified platform. The open source edition supports OIDC, SAML, LDAP, SCIM, RADIUS, Kerberos, and proxy authentication, and is OpenID Certified for OpenID Connect. It covers both B2B and B2C use cases.

It is self-hosted using containers or a one-click AWS CloudFormation template. The Enterprise edition adds privileged access management, agent accounts for non-human identity, Google Workspace and Microsoft Entra ID integration, mTLS client certificates, and enhanced audit logging.

Key features

OIDC, SAML, LDAP, SCIM, and RADIUS support; Kerberos and proxy authentication; Web-based RDP and SSH access; Custom object attributes for users and groups; Multi-account switching; Privileged access management (Enterprise); Agent accounts for non-human identity (Enterprise); Enhanced audit logging (Enterprise)

Product details

Vendor

authentik

Pricing

Open source free; Enterprise $5/user/moNo free trial

Pricing model: freemium

Plans

Open Source: Free. Enterprise: $5 per user per month. Enterprise Plus: Starting at $20k annually.

Visit website for full pricing details

Similar software

Amazon Cognito

by Amazon Web Services

Ease of use and scalability for both small and large applications with comprehensive user management and authentication. A fully managed identity service from AWS.

Free for first 10,000 MAU

Auth0

by Okta

Ease of use and flexibility in implementing secure authentication solutions. Simplifies complex identity management tasks allowing developers to focus on building applications.

Free up to 25,000 MAU

BeyondTrust Privileged Remote Access

by BeyondTrust

BeyondTrust Privileged Remote Access controls, manages, and audits just-in-time privileged access for IT staff, vendors, and OT environments.

Contact for pricing

Cisco Duo

by Cisco

Cisco Duo provides multi-factor authentication, single sign-on, passwordless login, and device trust for workforce identity security.

Free for up to 10 users; paid from $3/user/mo

Clerk

by Clerk

Clerk is a developer-focused authentication and user management platform with prebuilt sign-in components, MFA, passkeys, and enterprise SSO.

Free Hobby plan; Pro from $25/mo ($20/mo billed annually)

CyberArk

by Palo Alto Networks

Identity security and privileged access management. CyberArk is now part of Palo Alto Networks, and its platform is branded Idira.

Contact for pricing