{"data":{"slug":"authentik","name":"authentik","tagline":"MIT-core self-hosted IdP; enterprise/ is not MIT","category":"nextjs","categoryName":"Next.js","url":"https://goauthentik.io","github":"https://github.com/goauthentik/authentik","pricing":"open-source","hook":"authentik is the IdP you self-host when Okta is the lock-in and Keycloak is the other mountain.","whatsGood":"MIT outside enterprise/. OIDC, SAML, LDAP, RADIUS, proxy. OSS self-host is Free. Docker Compose or Kubernetes. Flows you can actually read.","theCatch":"enterprise/ is not MIT — EE license, paid seats. No hosted hatch: goauthentik.io/pricing says they do not currently provide a hosted version. You run Postgres and the stack.","verdict":"MIT-core IdP. Self-host is the free path; there is no authentik Cloud.","addedAt":"2026-09-03","featured":false,"domain":"Auth","subSpecialty":"Auth","capabilities":["auth","identity"],"surfaces":["Self-host"],"ecosystem":["Python"],"licenseModel":"OSS/MIT","githubStars":25340},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/authentik","html":"/gems/authentik","markdown":"/gems/authentik.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}