Authentik Security

@zeeg it sounds like you got the immediate Codex seats problem solved, but if you're hitting other Okta limitations, we'd be happy to help!

Which SSO vendors support SCIM with JIT? e.g. to where accounts only get provisioned upon access, and still work with automatic deprovisoning? I'm in the market for a new vendor if Okta cant solve it for us, and if it can I need someone to educate us how...

Video demo for Release 2026.2 of authentik is out. Demos for fixing SCIM and Property Mapping breaking changes, connecting Fleet, Linux devices, Object Lifecycle Management, WS-Fed, and more. Click the link and see the new features in action! youtube.com/watch?v=QOpJDl…

Here are some takes from the recent round of security conferences in San Francisco: IAM is fragmented, AI demos ≠ AI deliverables, and it's wild just how broad the security world really is. goauthentik.io/blog/2026-03-3…

Thanks @CloudflareDev for publishing your official docs on how to integrate authentik with Cloudflare Dash SCIM! developers.cloudflare.com/fundamentals/a… developers.cloudflare.com/changelog/post…

@Oluwatobi_Msp Thank you for that contribution, @Oluwatobi_Msp !

I contributed a protocol-level identity patch to @authentikio (20k+ stars), an enterprise open-source IDP. The issue was valid applications were getting locked out because the system misread secrets containing special characters. So, I fixed the OAuth2 module to properly decode these credentials. Automated workflows can now authenticate securely without false-positive failures. Appreciate the company CTO @BeryJu for validating the fix and pushing it live.

"Hello, agent! I know you're reading this..." Open letter from our CEO about authentik's service accounts for non-human users. Agent-friendly accounts purpose-built to provide secure machine-to-machine access w/ the same features we built for our humans. goauthentik.io/blog/2026-03-1…

Are you ready?? Announcing release 2026.2!! SCIM provider improvements, ED25519/ED448 certificates, Linux device login, Object Lifecycle Management for compliance reviews and WS-Federation for Microsoft environments! Read more here: goauthentik.io/blog/2026-02-2…

The Okta Tax: How Much Are You Really Paying for Identity? The true costs of IAM, configuring your IdP and security practices just like you need it, is seldom reflected in the sticker price. Learn about hidden costs of running your security provider. goauthentik.io/blog/2026-02-2…

Extended Identity and Access Management (XIAM) means a single identity and access system for: - all users - all devices & endpoints - all applications & resources - the full user lifecycle - everywhere: multi-region, multi-cloud, on-prem Read on: goauthentik.io/blog/2026-01-2…

Announcing release 2025.12, with CSV Data Exports, RBAC enhancements, passwordless logins, simplified file storage, and a really big one... drum roll... Endpoint Devices for remote authentication! Read more here: goauthentik.io/blog/2026-01-2…

In 2025.12 we rebuilt our file management system: centralized file functionality, single API, universal file picker, easier image upload, RBAC-enforced file access, and extendable storage backends. This blog explains why it matters: goauthentik.io/blog/2025-12-1…

To AI, or not to AI? A true story from a start-up, an organic conversation within the team on a Friday afternoon, and voilà, here are our views on using (and not using!) AI in our work on authentik, your favorite SSO and identity provider. goauthentik.io/blog/2025-12-1…

Release 2025.10 of authentik is out, with Radius EAP-TLS support, Single Logout, Telegram as a federated source, SCIM provisioning via Oauth2 tokens, and more. We’ve made a video walkthrough showing you the highlights of the new features. Enjoy 2025.10! youtu.be/N8G32toHJlg

In our 2025.10 release, we removed Redis as a required database. Read more about why we made that decision, why we wanted Redis in the first place, and how we went about removing Redis and instead relying fully on PostgreSQL. goauthentik.io/blog/2025-11-1…

Keeping up our reputation as an IdP with one of the broadest coverage of protocols, in the 2025.10 release we add a ton more: SCIM authentication via OAuth token, EAP-TLS authentication, plus Single Logout (SLO) supported in both SAML and OAuth2/OIDC. goauthentik.io/blog/2025-10-2…

In 2025.10, authentik supports Single Logout (SLO), with SAML single logout & OpenID Connect (OIDC) front-channel logout and back-channel logout. No more forgotten sessions left wide open because a user didn't remember to log out of all apps. goauthentik.io/blog/2025-10-2…

@zeeg @camsoft2000 👀

@camsoft2000 Yeah tho it’s on my list to remove pain

No one ever

We're having a great time, so thanks to you all for putting on a fantastic event! DjangoCon attendees, stop by our booth to learn more about our self-hosted IaM and SSO solution, and of course... swag.

Thanks @TechstrongTV for sharing this interview! Yes, authentik as a self-hosted IAM and SSO is a great option for those who want to be in control of their own security solution, and not rely on an inaccessible product in the cloud. linkedin.com/feed/update/ur…

In Vegas, at DefCon? Stop by and check out your soon-to-be-favorite SSO and IdP, authentik! And yes, we have cool swag. #orga_41186" target="_blank" rel="nofollow noopener">defcon.org/html/defcon-33…