Integration pages for connecting authentik to directories it reads from, SaaS directories it provisions into, and the self-hosted and cloud applications it signs users into, based on the authentik documentation and integrations catalog.
Syncing users and groups from Active Directory into authentik through an LDAP source: service account rights, nested groups, computer account filtering, LDAPS for password write-back and the Windows Server 2025 LDAP signing default.
Using the authentik Kerberos source for transparent browser login on domain-joined machines, syncing users from a KDC with a keytab, and the reverse proxy caching issue that breaks negotiation.
Keeping authentik as the source of truth and pushing users and groups into an Entra ID tenant with the Enterprise Entra ID provider: matching existing accounts, sync timing, deletion behavior and filtering service accounts.
Provisioning Google Workspace users and groups from authentik with the Enterprise Google Workspace provider: matching by email and name, suspension instead of deletion, sync timing and property mappings.
Pushing users and groups from authentik into SaaS and self-hosted apps over SCIM 2.0: sync triggers, vendor compatibility modes, group filter behavior that leaves old memberships in place, and pairing SCIM with SSO.
Signing users into Nextcloud with authentik over OIDC, SAML or LDAP, sending quotas and groups through scope mappings, the server-side encryption case that requires LDAP, and the direct login fallback.
Configuring GitLab to use authentik for SAML or OIDC sign-in, ACS and issuer settings after the 2026.5 SAML change, and group handling for self-managed GitLab instances.
Using authentik as the generic OAuth provider for Grafana: redirect URIs, environment variables, and mapping authentik application entitlements to Grafana roles.
Adding authentik as an OpenID Connect realm in Proxmox VE, mapping entitlements to Proxmox groups with the realm suffix, and setting the realm up from the CLI across a cluster.
Federating AWS sign-in through authentik with SAML into IAM Identity Center, provisioning users with SCIM so they exist before login, and aligning the SAML NameID with the Identity Center username.
Connecting Argo CD to authentik over OIDC, either directly or through Dex, and mapping authentik groups to Argo CD RBAC roles for GitOps teams.
Signing users in to a self-hosted Matrix Synapse homeserver with authentik over OpenID Connect: provider settings, Synapse oidc_providers configuration, user ID mapping and what happens to existing local accounts.
Connecting Mattermost to authentik: OAuth 2.0 for Team Edition versus SAML for Enterprise Edition, property mappings Mattermost needs, and group or role sync limits by edition.
Adding authentik as an OAuth identity provider in Rocket.Chat: custom OAuth settings, username and email claims, merging existing users, and role mapping.
Signing in to OpenProject with authentik over OpenID Connect: the Enterprise add-on the OpenProject side requires, first and last name property mappings, and group-based project access.
Signing agents and customers in to the Zammad helpdesk with authentik over OpenID Connect or SAML: which protocol to choose, attribute mapping and automatic account creation.
Using authentik as the OIDC provider for the Outline knowledge base: generic OIDC environment variables, scopes, team assignment and restricting who can sign up.
Putting self-hosted AI chat behind company sign-in by connecting Open WebUI to authentik over OAuth: environment settings, role and group claims for admin and user access, and disabling local signup.
Synchronizing users and groups from FreeIPA or Red Hat Identity Management into authentik with an LDAP source: service account, sync settings, password validation against FreeIPA and group mapping.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.