authentik and FortiGate SSL VPN SAML integration
Authenticating FortiGate SSL VPN users against authentik with SAML: the SAML application, importing the signing certificate, the SAML SSO server and user group, and mapping groups to VPN portals.
authentik for VPN, firewall and network access
Using authentik to authenticate VPN users, firewall administrators, mesh networks and Wi-Fi clients over SAML, OIDC, LDAP or RADIUS, with MFA where the protocol allows it.
authentik and FortiGate administrator SAML login
Signing firewall administrators in to the FortiGate management interface through authentik with SAML, separate from VPN users, with MFA and admin profiles mapped from groups.
authentik and Palo Alto GlobalProtect SAML integration
Authenticating GlobalProtect VPN users with authentik over SAML: the SAML identity provider profile, authentication profile on portal and gateway, and group-based access.
authentik and Palo Alto firewall administrator SAML login
Using authentik for SAML sign-in to the Palo Alto Networks next-generation firewall web interface: admin roles from attributes and keeping a local emergency admin.
authentik and Cisco Secure Firewall Management Center SAML login
Configuring SAML single sign-on from authentik to Cisco Secure Firewall Management Center for administrators, with role mapping and MFA.
authentik and pfSense LDAP authentication
Authenticating pfSense administrators and VPN users against authentik through an LDAP outpost: the LDAP provider and service account, search base, groups and code-based MFA in the bind password.
authentik and OPNsense LDAP authentication
Using authentik's LDAP outpost as the authentication server for OPNsense administrators and VPN users: provider settings, bind account, group mapping and TLS.
authentik and Tailscale OIDC integration
Using authentik as a custom OIDC identity provider for a Tailscale tailnet: the WebFinger endpoint Tailscale requires on your domain, the OIDC provider settings and moving users from another IdP.
authentik and Headscale OIDC integration
Signing users in to a self-hosted Headscale control server with authentik over OIDC: Headscale OIDC settings, allowed groups and domains, and node registration through the browser.
authentik and NetBird OIDC integration
Using authentik as the identity provider for self-hosted NetBird: OIDC and device authorization settings, the management API service account, and group sync for access policies.
Wi-Fi and 802.1X authentication with authentik RADIUS and EAP-TLS
Authenticating Wi-Fi and wired 802.1X clients with authentik's RADIUS outpost and EAP-TLS: the Enterprise requirement, a private CA instead of a public one, the mutual TLS stage flow and certificate rollout to devices.
VPN login with MFA through authentik RADIUS
Adding MFA to VPNs and network devices that only speak RADIUS: PAP-only password authentication, appending TOTP, Duo or static codes to the password, why SMS codes cannot work, and when SAML on the VPN is better.
