awesome-repositories.com
博客
MCP
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目关于排名机制媒体报道MCP 服务器
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
goauthentik avatar

goauthentik/authentik

0
View on GitHub↗
22,035 星标·1,659 分支·Python·13 次浏览goauthentik.io↗

Authentik

Authentik is a centralized identity and access management platform designed to serve as a unified authentication authority. It enables enterprise single sign-on across diverse applications and services, providing a cloud-native identity provider that manages user sessions and security protocols from a single location.

The platform distinguishes itself through a policy-driven flow engine and a visual orchestration interface. This allows administrators to design complex, custom authentication workflows by chaining modular verification stages and conditional logic. These workflows can be further refined with granular access policies that evaluate user attributes and environmental conditions, ensuring that security requirements are met through flexible, logic-based rules rather than static configurations.

Beyond core authentication, the system supports infrastructure-wide automation through declarative blueprints and container-based deployment models. It includes comprehensive tools for user account management, background task scheduling, and system monitoring, all accessible via a centralized administrative dashboard. The platform is designed for high availability and scalability, allowing for integration with external databases and various cloud-native environments.

The software is distributed as a containerized service, with installation supported through standard package managers and configuration templates.

Features

  • Identity and Access Management - Centralizes authentication and authorization across applications to ensure consistent identity verification.
  • Identity and Access Management Servers - Serves as a centralized platform for managing user identities, authentication protocols, and access policies across enterprise applications.
  • Identity Providers - Acts as a centralized service providing unified authentication and session management for modern cloud-native infrastructure.
  • Single Sign-On - Enables centralized user access to multiple services using a single set of credentials.
  • Containerized Service Deployment - Establishes core security infrastructure by deploying identity and access management services within containerized environments.
  • Authentication Flows - Creates custom login processes by chaining verification stages into visual workflows that control user interaction.
  • Authentication Workflows - Facilitates the design of complex login and registration sequences by chaining verification stages.
  • Visual Orchestrators - Provides a visual engine to chain verification stages and conditional logic into custom user authentication and enrollment processes.
  • Policy-Based Access Control - Defines granular logic rules based on user attributes and environmental conditions to control resource access.
  • Access Control Engines - Enforces granular security rules by evaluating user eligibility and environmental conditions against protected digital resources.
  • Authentication Security Policies - Enables the definition of custom logic rules to evaluate and enforce authentication behavior.
  • Policy Enforcement Engines - Executes authentication logic by chaining modular verification stages into dynamic workflows evaluated against defined access rules.
  • User Account Management - Provides tools for creating, modifying, and deactivating user profiles and managing account recovery settings.
  • Asynchronous Task Queues - Offloads long-running background operations to a decoupled worker model for improved system maintenance and execution tracking.
  • Identity and Access Providers - Open-source identity provider for centralized authentication.
  • Authentication Services - Flexible authentication and identity management provider.
  • Identity Management - Flexible identity provider supporting multiple authentication protocols.
  • Single Sign-On - Flexible identity provider supporting multiple authentication protocols.
  • Container Orchestration Environments - Deploys modular components as isolated containerized units to ensure consistent execution across diverse infrastructure environments.
  • Deployment Automation - Automates the lifecycle management of security services using container orchestration and configuration templates.
  • Helm Chart Management - Deploys services into container clusters using package manager charts that automate database migrations during startup.
  • High Availability Systems - Designs redundant system architectures to minimize downtime and maintain continuous service availability.
  • User Invitation Systems - Generates secure invitation links to manage user onboarding and registration processes.
  • Background Task Scheduling - Automates recurring operations using cron syntax and supports manual task triggering.
  • External Datastore Configurations - Links production-grade external database instances to ensure data persistence and scalability for high-traffic environments.
  • Automation Blueprints - Automates authentication resource deployment using importable and exportable configuration blueprints.
  • Authorization Flows - Enforces access policies on authentication workflows to validate user or group eligibility before execution.
  • User Access Management - Tracks system status and manages user accounts through a centralized dashboard providing visual insights into authentication events.
  • Environment Variables - Controls application behavior and integration settings using environment variables for specific deployment contexts.
  • Declarative Configuration Systems - Uses structured data files to define and replicate complex system setups and resource configurations declaratively.
  • Task Monitoring - Tracks the lifecycle and status of background tasks to identify performance bottlenecks and errors.
  • Relational Database Persistence - Stores user identities, configuration states, and audit logs in external relational databases to ensure data integrity.
  • Credential Security - Generates and stores database and application access keys in protected files to initialize secure deployments.
  • Background Task Managers - Offers a centralized interface to monitor and control background operations and execution intervals.
  • Task Management - Supports investigation of failed tasks through logs and manual requeueing capabilities.
  • Interface Customization - Provides tools to modify user-facing web interfaces to meet specific organizational requirements.

Star 历史

goauthentik/authentik 的 Star 历史图表goauthentik/authentik 的 Star 历史图表

AI 搜索

探索更多 awesome 仓库

用简单的语言描述您的需求 —— AI 将根据相关性为您从数千个精选开源项目中进行排序。

Start searching with AI

常见问题解答

goauthentik/authentik 是做什么的?

Authentik is a centralized identity and access management platform designed to serve as a unified authentication authority. It enables enterprise single sign-on across diverse applications and services, providing a cloud-native identity provider that manages user sessions and security protocols from a single location.

goauthentik/authentik 的主要功能有哪些?

goauthentik/authentik 的主要功能包括:Identity and Access Management, Identity and Access Management Servers, Identity Providers, Single Sign-On, Containerized Service Deployment, Authentication Flows, Authentication Workflows, Visual Orchestrators。

goauthentik/authentik 有哪些开源替代品?

goauthentik/authentik 的开源替代品包括: zitadel/zitadel — This project is a cloud-native identity and access management platform designed to centralize authentication,… fosrl/pangolin — Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private… twentyhq/twenty — Twenty is a headless customer relationship management framework that enables developers to build, version, and deploy… quantumnous/new-api — This project is an AI model API gateway and proxy server designed to provide a unified interface for interacting with… kanidm/kanidm — Kanidm is a centralized identity management server designed to handle authentication, authorization, and directory… octelium/octelium — Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and…

Authentik 的开源替代方案

相似的开源项目,按与 Authentik 的功能重合度排序。
  • zitadel/zitadelzitadel 的头像

    zitadel/zitadel

    13,029在 GitHub 上查看↗

    This project is a cloud-native identity and access management platform designed to centralize authentication, authorization, and identity lifecycle management. It functions as a standards-compliant OpenID Connect authorization server, providing secure session management and token issuance for web, mobile, and device-based applications. The platform is built to handle complex identity requirements through stateless token authentication and support for modern passwordless methods, including biometrics and hardware keys. What distinguishes this platform is its native support for multi-tenant env

    Go2faauthenticationauthorization
    在 GitHub 上查看↗13,029
  • fosrl/pangolinfosrl 的头像

    fosrl/pangolin

    21,255在 GitHub 上查看↗

    Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

    TypeScriptcrowdsecdockerhome-lab
    在 GitHub 上查看↗21,255
  • twentyhq/twentytwentyhq 的头像

    twentyhq/twenty

    50,113在 GitHub 上查看↗

    Twenty is a headless customer relationship management framework that enables developers to build, version, and deploy custom business applications using code. By utilizing a declarative approach to data modeling, the platform allows for the definition of custom objects, fields, and complex relationships directly within the source code. This schema-driven architecture automatically generates corresponding REST and GraphQL APIs, ensuring that data structures and interface components remain synchronized across development and production environments. The platform distinguishes itself through a m

    TypeScriptcrmcrm-systemcustomer
    在 GitHub 上查看↗50,113
  • quantumnous/new-apiQuantumNous 的头像

    QuantumNous/new-api

    39,722在 GitHub 上查看↗

    This project is an AI model API gateway and proxy server designed to provide a unified interface for interacting with diverse artificial intelligence service providers. It functions as a centralized middleware platform that routes, load balances, and translates API requests across multiple models, enabling developers to access text, image, audio, and video generation capabilities through a single, standardized integration. The gateway distinguishes itself through comprehensive administrative and financial controls, including event-driven usage accounting, real-time token consumption tracking,

    Goai-gatewayclaudedeepseek
    在 GitHub 上查看↗39,722
  • 查看 Authentik 的所有 30 个替代方案→