authentik

authentik

Docker app from IBRACORP's Repository

Overview

authentik is an open-source Identity Provider focused on flexibility and versatility. You can use authentik in an existing environment to add support for new protocols, implement sign-up/recovery/etc. in your application so you don't have to deal with it, and many other things. You will need the authentik-worker app. To start the initial setup, navigate to http://your-server-ip:9000/if/flow/initial-setup/. There you will be prompted to set a password for the akadmin user.

Readme

View on GitHub

authentik logo

Join Discord GitHub Workflow Status GitHub Workflow Status GitHub Workflow Status Code Coverage Latest version

What is authentik?

authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.

Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.

Installation

  • Docker Compose: recommended for small/test setups. See the documentation.
  • Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
  • AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
  • DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.

Screenshots

Light Dark

Development and contributions

See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.

When you contribute documentation, either to accompany a code change or as a standalone contribution, please be sure to follow our documentation Style Guide.

Security

Please see SECURITY.md.

Adoption

Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!

License

MIT License CC BY-SA 4.0 authentik EE License

Install Authentik on Unraid in a few clicks.

Find Authentik in Community Apps on your Unraid server, review the template, and click Install. Unraid handles the Docker app or plugin setup from the published template.

Open the Apps tab on your Unraid server Search Community Apps for Authentik Review the template variables and paths Click Install
Explore Unraid OS

Categories

Security

Related apps

Explore more like this

Explore all
Security

Links

Projectgithub.comSupportdiscord.ggRegistrygithub.comTemplateraw.githubusercontent.com

Details

Repository
ghcr.io/goauthentik/server:2025.8.1
Registry
https://github.com/goauthentik/authentik/
Last Updated2026-07-18
First Seen2025-08-28

Runtime arguments

Web UI
http://[IP]:[PORT:9000]
Network
bridge
Shell
sh
Privileged
true

Template configuration

AUTHENTIK_PORT_HTTPPorttcp

Container Port: 9000

Target
9000
Value
9000
AUTHENTIK_PORT_HTTPSPorttcp

Container Port: 9443

Target
9443
Value
9443
Redis HostVariable

Container Variable: AUTHENTIK_REDIS__HOST

Target
AUTHENTIK_REDIS__HOST
Default
redis
PostgreSQL HostVariable

Container Variable: AUTHENTIK_POSTGRESQL__HOST

Target
AUTHENTIK_POSTGRESQL__HOST
Default
postgresql
PostgreSQL DB UserVariable

Container Variable: AUTHENTIK_POSTGRESQL__USER

Target
AUTHENTIK_POSTGRESQL__USER
Default
authentik
PostgreSQL DB NameVariable

Container Variable: AUTHENTIK_POSTGRESQL__NAME

Target
AUTHENTIK_POSTGRESQL__NAME
Default
authentik
PostgreSQL DB PasswordVariable

Container Variable: AUTHENTIK_POSTGRESQL__PASSWORD

Target
AUTHENTIK_POSTGRESQL__PASSWORD
Error ReportingVariable

Container Variable: AUTHENTIK_ERROR_REPORTING__ENABLED: true or false

Target
AUTHENTIK_ERROR_REPORTING__ENABLED
Value
true
APP KeyVariable

https://passwordsgenerator.net/

Target
AUTHENTIK_SECRET_KEY
Redis PasswordVariable

Container Variable: AUTHENTIK_REDIS__PASSWORD

Target
AUTHENTIK_REDIS__PASSWORD
Custom TemplatesPathrw

Container Path: /templates

Target
/templates
Docker SocketPathro

Container Path: /var/run/docker.sock

Target
/var/run/docker.sock
mediaPathrw

Container Path: /media

Target
/media