Auth

Authentik

Self-hosted reverse proxy and identity provider focused on SSO, MFA, and infrastructure security.

Overview

Authentik acts as both an identity provider and an authentication proxy, letting teams secure existing applications without rewriting login logic. It supports LDAP, OIDC, SAML, and MFA enforcement with a policy-based flow engine. The platform is fully open-source, Docker-native, and designed for self-hosted environments.

Best for

reverse proxy SSO
MFA gateway
securing legacy/internal tools

Trade-offs

vs Stytch

Authentik provides deep infrastructure-level SSO/MFA control and self-hosting; Stytch offers instant cloud APIs, templates, and faster cloud deployment.

What XeroHack pre-wires

When you pick Authentik in the interview, the engine emits these files into your scaffold:

Docker compose
Nginx proxy configs
OAuth2 proxy
MFA policy templates

Coupon

No active coupon for this tool right now. Sign in to be notified when one is available.