Pricing
Open Source
For homelab users and simple use cases
- Supports OIDC, SAML, LDAP, SCIM, RADIUS, Kerberos, and Proxy
- OpenID Certified™ for OpenID Connect
- Web-based RDP/SSH access
- OAuth 2.0 token exchange and key-bound ID tokens
- Multi-account switching
- Custom object attributes for users, groups, and more
- Covers B2B and B2C use cases
- Community Discord
- No support
Enterprise
For access to enterprise functionality
- Everything in Open Source, plus:
- Privileged Access Management
- Agent accounts for non-human identity
- Google Workspace integration
- Microsoft Entra ID integration
- Client certificate authentication (mTLS)
- Chrome Enterprise Device Trust connector
- Shared Signals Framework (ABM) support
- Password history compliance checks
- Enhanced audit logging for compliance
- Scheduled user offboarding
- Embed external OAuth/SAML sources
- OAuth2 authentication in SCIM
- Windows local device login
- Self-hosted event maps
- Exportable CSV reports
- Radius EAP-TLS
- Advanced device compliance (in development)
- Ticket-based support for subscriptions over $1k
Enterprise Plus
For custom contracts and expert support
- Everything in Enterprise, plus:
- Billing and purchase via invoice
- Dedicated, customized support and SLAs
- Volume discounts at thousands of users
- Support for multi-instance deployments
- FIPS compliance for FedRAMP requirements
*An external user is typically a customer, partner, or client accessing your digital services.
External users can't access the application dashboard and only use authentik in the background to provide SSO to applications.
Internal users can access applications and manage their accounts directly from the dashboard.
See our enterprise docs for more information.
Frequently Asked Questions
Can I migrate from my existing identity provider to authentik?
Yes! authentik supports standard protocols like SAML, OIDC, and LDAP, making migration from other identity providers straightforward.
We also provide guides for migrating from common providers and can assist Enterprise customers with migration planning.
Is authentik suitable for both small and large organizations?
Absolutely. Our open source version works great for small teams and personal use, while our Enterprise and Enterprise Plus tiers scale to support organizations with thousands of users, offering advanced features and dedicated support as your needs grow.
How does authentik handle security and compliance requirements?
Security is at the core of authentik's design. We offer features like MFA, conditional access policies, audit logging, and FIPS compliance (Enterprise tier) to help meet various security and compliance requirements including GDPR, HIPAA, and FedRAMP. authentik is also OpenID Certified™.
Can you host my authentik instance for me?
We do not currently provide a hosted version of authentik. However, we make it easy to self-host with your container solution of choice or a one-click installation using our AWS CloudFormation template.
Can I purchase paid support?
We only offer support as part of an enterprise software subscription, including 'Enterprise' plans over $1k. Non-enterprise users can get community support via GitHub and our Discord.
Will any feature of the open source version ever become enterprise-only?
No. As part of our core principles, we will not move any features from the open source version to the enterprise version. Some features from the enterprise version may move to the open source version over time.
Are you planning to add X to authentik?
We're always curious to hear what our customers are interested in and what they want to see in authentik, so if you have any questions about features send an email to [email protected].