goauthentik/authentik

Features

• Identity and Access Management - Centralizes authentication and authorization across applications to ensure consistent identity verification.
• Identity and Access Management Servers - Serves as a centralized platform for managing user identities, authentication protocols, and access policies across enterprise applications.
• Identity Providers - Acts as a centralized service providing unified authentication and session management for modern cloud-native infrastructure.
• Single Sign-On - Enables centralized user access to multiple services using a single set of credentials.
• Containerized Service Deployment - Establishes core security infrastructure by deploying identity and access management services within containerized environments.
• Authentication Flows - Creates custom login processes by chaining verification stages into visual workflows that control user interaction.
• Authentication Workflows - Facilitates the design of complex login and registration sequences by chaining verification stages.
• Visual Orchestrators - Provides a visual engine to chain verification stages and conditional logic into custom user authentication and enrollment processes.
• Policy-Based Access Control - Defines granular logic rules based on user attributes and environmental conditions to control resource access.
• Access Control Engines - Enforces granular security rules by evaluating user eligibility and environmental conditions against protected digital resources.
• Authentication Security Policies - Enables the definition of custom logic rules to evaluate and enforce authentication behavior.
• Policy Enforcement Engines - Executes authentication logic by chaining modular verification stages into dynamic workflows evaluated against defined access rules.
• User Account Management - Provides tools for creating, modifying, and deactivating user profiles and managing account recovery settings.
• Asynchronous Task Queues - Offloads long-running background operations to a decoupled worker model for improved system maintenance and execution tracking.
• Identity and Access Providers - Open-source identity provider for centralized authentication.
• Authentication Services - Flexible authentication and identity management provider.
• Identity Management - Flexible identity provider supporting multiple authentication protocols.
• Single Sign-On - Flexible identity provider supporting multiple authentication protocols.
• Container Orchestration Environments - Deploys modular components as isolated containerized units to ensure consistent execution across diverse infrastructure environments.
• Deployment Automation - Automates the lifecycle management of security services using container orchestration and configuration templates.
• Helm Chart Management - Deploys services into container clusters using package manager charts that automate database migrations during startup.
• High Availability Systems - Designs redundant system architectures to minimize downtime and maintain continuous service availability.
• User Invitation Systems - Generates secure invitation links to manage user onboarding and registration processes.
• Background Task Scheduling - Automates recurring operations using cron syntax and supports manual task triggering.
• External Datastore Configurations - Links production-grade external database instances to ensure data persistence and scalability for high-traffic environments.
• Automation Blueprints - Automates authentication resource deployment using importable and exportable configuration blueprints.
• Authorization Flows - Enforces access policies on authentication workflows to validate user or group eligibility before execution.
• User Access Management - Tracks system status and manages user accounts through a centralized dashboard providing visual insights into authentication events.
• Environment Variables - Controls application behavior and integration settings using environment variables for specific deployment contexts.
• Declarative Configuration Systems - Uses structured data files to define and replicate complex system setups and resource configurations declaratively.
• Task Monitoring - Tracks the lifecycle and status of background tasks to identify performance bottlenecks and errors.
• Relational Database Persistence - Stores user identities, configuration states, and audit logs in external relational databases to ensure data integrity.
• Credential Security - Generates and stores database and application access keys in protected files to initialize secure deployments.
• Background Task Managers - Offers a centralized interface to monitor and control background operations and execution intervals.
• Task Management - Supports investigation of failed tasks through logs and manual requeueing capabilities.
• Interface Customization - Provides tools to modify user-facing web interfaces to meet specific organizational requirements.

Star history