Authentik — Authentik — the identity provider you point your whole homelab -- or company -- at: one login that stands in front of Pr
What it is
Authentik is the identity provider you point your whole homelab -- or company -- at: one login that stands in front of Proxmox, Docker apps, VPNs and SaaS through OAuth2, SAML, LDAP and reverse-proxy authentication.
Editor's review
Long-form introduction by the BetterPicker editors · checked against the official site · Nov 7, 2026
Authentik is the identity provider you point your whole homelab -- or company -- at: one login that stands in front of Proxmox, Docker apps, VPNs and SaaS through OAuth2, SAML, LDAP and reverse-proxy authentication. The reverse-proxy mode is the sleeper feature: it wraps login pages around apps that have no authentication of their own. It is open source, claims over a million installations, and positions itself bluntly as the self-hosted replacement for Entra ID, with a trust wall that runs from Cloudflare to Der Spiegel. Enterprise logos on an open-source project's homepage used to be rare; here they are the norm. Authentication flows are customizable through templates and infrastructure as code, and the pricing page promises that core functionality is not held hostage behind tiers. In a category where the vendors are giants, being the credible open-source option is the product.
What it does well
One login for everything: single sign-on across self-hosted apps and SaaS, with enrollment, recovery and MFA flows built in rather than bolted on. Branding carries through: your users see your logo at the door, not a vendor's. The proxy mode protects apps that were never designed with SSO in mind.
Automation-friendly: configurable templates, infrastructure as code and comprehensive APIs make identity a managed artifact instead of a GUI chore, and outposts extend protection to apps that cannot speak SSO natively. Identity stops being a per-app decision and becomes a platform one.
Security through transparency: the code is open and community-reviewed, and the company treats that as the feature rather than a caveat. For critical infrastructure, auditable beats trust-me.
Who it's for
Authentik fits homelabbers exposing services safely behind one door, small organizations replacing a pile of per-app logins, and teams migrating off enterprise identity suites whose per-seat bills have outgrown their value. Students and self-hosters get the full feature set free, which is why the tutorial ecosystem is so thick. The tutorial videos -- securing everything from Proxmox to media servers -- map the journey exactly. The official install docs cover both Docker Compose and Kubernetes without assuming a devops team. The moment the second service needs a login, the project starts paying for itself.
Where it falls short
It is infrastructure: initial deployment on Docker or Kubernetes plus per-app integration is real work -- reviewers budget a focused weekend, not an hour.
Device authentication is the gap: one reviewer's summary is that user authentication is excellent while device-level trust needs companion tooling. Plan the pairing if device posture matters to your threat model.
Updates deserve respect: identity is the critical path for everything behind it, so pin versions and read release notes before upgrading. The flip side: a well-kept authentik instance runs quietly for years.
Specs at a glance
Facts from the official site · not editorial opinion
| Type | Self-hosted identity provider (SSO) |
|---|---|
| Protocols | OAuth2, SAML, LDAP, reverse proxy |
| Price | Open source; streamlined paid plans |
| Scale | 1M+ installations |
| Automation | Templates, infrastructure as code, APIs |
| Install | Docker Compose or Kubernetes |
| Use | One login across apps and services |
Frequently asked questions
▸What is authentik?
An open-source identity provider that gives you single sign-on across self-hosted apps and SaaS through standard protocols.
▸Can it replace Entra ID?
That is its stated positioning -- it covers common B2B and B2C identity needs without per-feature paywalls.
▸Is it hard to set up?
It is real infrastructure: Docker or Kubernetes deployment plus per-app integration; reviewers recommend budgeting a focused weekend.
▸Does it support MFA?
Yes, multi-factor authentication and recovery flows are built in.
Video reviews
8 review videos aggregated · praise and criticism included alike · click through to the original video
Channels that covered it
Channels are aggregated as sources only — we don’t rate creators
Related tools
Where to go next
External links open in a new tab; external content is independent of this site.
Link down? Every object page is re-checked monthly.