authentik and Harbor SSO integration
Signing in to the Harbor container registry with authentik over OIDC: the OIDC auth mode, group claims for project roles, CLI secrets for docker login, and switching an existing Harbor from database auth.

Single sign-on from authentik to the registries, secret stores, CI servers, virtualization consoles and monitoring tools platform teams run, using the integration guides authentik publishes.
Signing in to the Harbor container registry with authentik over OIDC: the OIDC auth mode, group claims for project roles, CLI secrets for docker login, and switching an existing Harbor from database auth.
Logging in to HashiCorp Vault or OpenBao with authentik through the OIDC auth method: roles and redirect URIs for the UI and CLI, group claims mapped to Vault policies, and breaking glass when SSO is down.
Connecting Jenkins to authentik with OpenID Connect: the OIDC plugin settings, group claims for matrix or role-based authorization, and keeping an admin path for configuration as code.
Adding authentik as an OpenID Connect authentication source in Forgejo or Gitea: auto-discovery URL, group claims for admin and organization mapping, and linking existing accounts.
Signing in to Rancher with authentik over OIDC: the generic OIDC auth provider, group claims for global and cluster roles, and keeping the local admin for recovery.
Connecting Portainer to authentik with OAuth: client settings, automatic user creation, and automatic team membership and admin mapping available in Portainer Business Edition.
Federating VMware vCenter to authentik through the vCenter Okta identity provider flow with OIDC and SCIM: the vSphere version required, VMware Identity Services, and provisioning users and groups.
Signing in to MinIO object storage with authentik over OpenID Connect: policy claims mapped to MinIO policies, console and API access, and the community edition status the guide warns about.
Configuring SAML single sign-on from authentik to HCP Terraform (Terraform Cloud): the SAML provider, team mapping from groups, and organization settings.
Signing in to AWX or Red Hat Ansible Automation Platform with authentik over SAML: enterprise authentication settings, organization and team mapping from attributes, and superuser flags.
Putting the Wazuh dashboard behind authentik with SAML: OpenSearch security plugin configuration, role mapping from groups, and admin access for the SOC team.
Configuring Zabbix frontend SAML sign-in with authentik: php-openssl and certificate placement, user provisioning and group mapping to Zabbix user roles.
Signing in to OpenSearch Dashboards with authentik over OpenID Connect: security plugin OIDC settings, backend roles from group claims, and multi-tenancy in OpenSearch.
Configuring SAML sign-in from authentik to JFrog Artifactory: the license tiers that include SAML, group mapping, and API tokens for build tools after SSO.
Signing backup administrators in to Veeam Backup & Replication with authentik over SAML: the SAML provider, Veeam identity provider settings and protecting the backup console with MFA.
Signing in to Apache Guacamole with authentik over OpenID Connect, and when authentik's own RAC provider can replace a separate Guacamole deployment for browser-based remote access.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.