Authentik

aid: authentik
name: Authentik
description: |
  Authentik is an open source identity provider with a comprehensive REST API for managing users, groups, flows, providers, sources, policies, and outposts. It supports OAuth2, OIDC, SAML, LDAP, SCIM, and RADIUS protocols with official client SDKs in TypeScript, Python, Go, Rust, Kotlin, and Swift.
type: Index
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
tags:
  - Authentication
  - Authorization
  - Identity Provider
  - LDAP
  - OAuth
  - Open Source
  - OpenID Connect
  - SAML
  - SCIM
  - Self-Hosted
url: >-
  https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/apis.yml
created: '2026-03-25'
modified: '2026-04-19'
specificationVersion: '0.19'
apis:
  - aid: authentik:authentik-rest-api
    name: Authentik REST API
    description: |
      The authentik REST API v3 provides complete management of the authentik identity platform including users, groups, tokens, flows, providers, sources, policies, outposts, events, and configuration. Every authentik instance includes a built-in API browser at /api/v3/.
    humanURL: https://api.goauthentik.io/
    baseURL: https://your-authentik-instance.example.com/api/v3
    tags:
    - Authentication
    - Identity
    - REST
    - Users
    properties:
    - type: Documentation
      url: https://docs.goauthentik.io/developer-docs/api/
    - type: OpenAPI
      url: https://api.goauthentik.io/#/Schema/schema_retrieve
    - type: APIReference
      url: https://api.goauthentik.io/
    - type: SDK
      url: https://pypi.org/project/authentik-client/
    - type: SDK
      url: https://www.npmjs.com/package/@goauthentik/api
    - type: GitHubRepository
      url: https://github.com/goauthentik/authentik
common:
  - type: LinkedIn
    url: https://www.linkedin.com/company/authentik-security
  - type: Website
    url: https://goauthentik.io
  - type: Documentation
    url: https://docs.goauthentik.io
  - type: GitHubOrganization
    url: https://github.com/goauthentik
  - type: GitHubRepository
    url: https://github.com/goauthentik/authentik
  - type: ChangeLog
    url: https://github.com/goauthentik/authentik/releases
  - type: Support
    url: https://github.com/goauthentik/authentik/discussions
  - type: Community
    url: https://discord.gg/jg33eMhnj6
  - type: Pricing
    url: https://goauthentik.io/pricing
  - type: Features
    data:
    - name: Comprehensive REST API
      description: Full REST API covering all authentik features with built-in Swagger UI at /api/v3/ on every instance.
    - name: Multi-Protocol Support
      description: Native support for OAuth2, OIDC, SAML, LDAP, SCIM, RADIUS, and SSTP protocols for broad integration coverage.
    - name: Flow Engine
      description: Customizable authentication and enrollment flows with visual flow designer for configuring multi-step authentication processes.
    - name: Multi-Language SDKs
      description: Official API client SDKs in TypeScript, Python, Go, Rust, Kotlin, and Swift auto-generated from the OpenAPI schema.
    - name: Terraform Provider
      description: Official Terraform provider for infrastructure-as-code management of authentik resources.
    - name: Helm Deployment
      description: Official Helm chart for Kubernetes deployment with configurable replicas, persistence, and external database support.
    - name: RBAC
      description: Role-based access control for granular permission management across authentik resources and administrative functions.
  - type: UseCases
    data:
    - name: Self-Hosted Identity Provider
      description: Deploy a complete identity provider on-premises or in private cloud with full data sovereignty.
    - name: SSO Gateway
      description: Provide single sign-on for all internal applications using OIDC, SAML, or LDAP protocol support.
    - name: B2C Identity
      description: Build customer-facing registration and authentication flows with customizable enrollment and recovery processes.
    - name: Zero Trust Access
      description: Implement zero trust application access with forward auth proxy integration and per-application policies.
  - type: Integrations
    data:
    - name: Nginx/Traefik/Caddy
      description: Forward auth integration with major reverse proxies for transparent application authentication.
    - name: Kubernetes
      description: Native Kubernetes deployment via Helm chart with optional operator and RBAC integration.
    - name: LDAP Directory
      description: LDAP outpost that exposes authentik users to LDAP-compatible applications without a directory server.
    - name: Grafana
      description: Native OAuth2 integration with Grafana for unified authentication in monitoring stacks.
    - name: Nextcloud
      description: OIDC or SAML integration with Nextcloud for unified login in self-hosted file storage.
  - type: Solutions
    data:
    - name: Self-Hosted IAM
      description: Complete identity and access management platform deployable on any infrastructure with no vendor lock-in.
    - name: Application Gateway
      description: Secure and authenticate any application using forward auth with optional MFA and per-user access policies.
maintainers:
  - FN: Kin Lane
    email: [email protected]