[kurante]

What do folks think about authentik[0]?

I tried to set up Keycloak but after fiddling with it for awhile before giving up and trying something else. It felt really weird that I was just extracting a tar and running a jar instead of some pre-packaged solution, but that might just be me.

authentik was pretty easy to set up for my homelab, but maybe I'm missing something given all the positive recommendations for Keycloak?

[0]: https://goauthentik.io/

[risson]

Authentik dev here, AMA

[axutio]

Using Authentik as a part of my selfhosted setup, mostly positive things to say. I tried with Keycloak first but had too much trouble getting the Docker image to work, so switched to Authentik.

I also checked out some other options along the way, and ultimately realized that pretty much all of the options come with enterprise-oriented features that are just added complexity for the self-hosting use case.

Ultimately, I've gotten at least somewhat familiar with all the complexities of Authentik, so I'd have a hard time switching off. Would definitely love to see a solution geared towards selfhosting that's more barebones, though.

[Jnr]

I set up Keycloak using Docker and it was very simple to do.

I did not really try authentik yet since all the advanced features I needed worked with Keycloak, but I do have it running in a container to play with at some point in time.

[5e92cb50239222b]

AFAIK it has a bus factor of one, keep that in mind if you are going to build anything "serious" on top of it. I found it easier to configure than Keycloak, it lets you write short Python snippets for custom authorization logic, but it's about as heavy on resources as Keycloak. I hope he develops the project into a successful business, for users' sake if nothing else.

[miduil]

I was considering using authentik, but I'm not very keen towards having a Django application taking over SSO authentication.

[vruiz]

why is that? too heavy or is there another reason?

[miduil]

Yes, Django is a quite some decently sized CMS framework, with it's occasional security quirks and attack surface. I expected it to be some lightweight go application to be honest, based on their domain.