authentik
Open Source — Free
-
Highlights
Supports OIDC, SAML, LDAP, SCIM, RADIUS, Kerberos, and Proxy
-
Included
-
Highlights
OpenID CertifiedTM for OpenID Connect
-
Included
-
Highlights
Web-based RDP/SSH access
-
Included
-
Highlights
OAuth 2.0 token exchange and key-bound ID tokens
-
Included
-
Highlights
Multi-account switching
-
Included
-
Highlights
Custom object attributes for users, groups, and more
-
Included
-
Highlights
Covers B2B and B2C use cases
-
Included
Enterprise — Standard
-
Highlights
Privileged Access Management
-
Included
-
Highlights
Agent accounts for non-human identity
-
Included
-
Highlights
Google Workspace integration
-
Included
-
Highlights
Microsoft Entra ID integration
-
Included
-
Highlights
Client certificate authentication (mTLS)
-
Included
-
Highlights
Chrome Enterprise Device Trust connector
-
Included
-
Highlights
Shared Signals Framework (ABM) support
-
Included
-
Highlights
Password history compliance checks
-
Included
-
Highlights
Enhanced audit logging for compliance
-
Included
-
Highlights
Scheduled user offboarding
-
Included
-
Highlights
Embed external OAuth/SAML sources
-
Included
-
Highlights
OAuth2 authentication in SCIM
-
Included
-
Highlights
Windows local device login
-
Included
-
Highlights
Self-hosted event maps
-
Included
-
Highlights
Exportable CSV reports
-
Included
-
Highlights
Radius EAP-TLS
-
Included
-
Highlights
Advanced device compliance (in development)
-
Included
-
Highlights
Ticket-based support for subscriptions over $1k
-
Included