# authentik

> MIT-core self-hosted IdP; enterprise/ is not MIT

**Category:** Next.js  
**Pricing:** open-source  
**URL:** https://goauthentik.io  
**GitHub:** https://github.com/goauthentik/authentik  
**Added:** 2026-09-03

---

## The Hook

authentik is the IdP you self-host when Okta is the lock-in and Keycloak is the other mountain.

## What's Good

MIT outside enterprise/. OIDC, SAML, LDAP, RADIUS, proxy. OSS self-host is Free. Docker Compose or Kubernetes. Flows you can actually read.

## The Catch

enterprise/ is not MIT — EE license, paid seats. No hosted hatch: goauthentik.io/pricing says they do not currently provide a hosted version. You run Postgres and the stack.

## Verdict

MIT-core IdP. Self-host is the free path; there is no authentik Cloud.