Using self-hosted authentik as the identity provider for SaaS applications such as Microsoft 365, Slack, Atlassian Cloud and Salesforce, including the plan requirements on the SaaS side.
Federating a Microsoft 365 domain to authentik: SAML 2.0 versus WS-Federation, immutable ID and IDPEmail mappings, the Enterprise license WS-Federation needs, passive-only authentication and the MFA claim to send carefully.
Signing users in to Google Workspace with authentik over SAML: users that must exist first, matching primary emails, super administrator sign-in behavior, and when to add Enterprise provisioning.
Connecting Slack to authentik with SAML and optional SCIM: Slack plans that allow custom SAML and SCIM, the owner account needed, property mappings and deprovisioning leavers.
Configuring Zoom single sign-on with authentik over SAML: the Zoom account types and vanity URL required, attribute mapping and user provisioning on first login.
Using authentik as the SAML identity provider for Jira, Confluence and other Atlassian Cloud apps: the Atlassian Guard subscription, verified domains, user types and authentication policies.
Signing users in to Salesforce with authentik over SAML with just-in-time provisioning: the attributes JIT needs, profile assignment and SCIM provisioning.
Enforcing SAML SSO for a GitHub Enterprise Cloud organization through authentik, and the separate Enterprise Managed Users setup with SCIM provisioning: which model fits and what changes for developers.
Connecting Notion workspaces to authentik: Business versus Enterprise plan requirements for SAML and SCIM, domain verification, allowed email domains and one SCIM token per workspace.
Configuring HubSpot single sign-on with authentik: the HubSpot tiers that include SSO, the Super Admin needed, and how HubSpot matches users by email.
Signing users in to Box with authentik over SAML: Business or Enterprise account requirement, automatic user creation from SSO and the name attributes it needs.
Signing engineers in to Sentry with authentik over SAML and provisioning users and teams with SCIM: the plan needed for SCIM on Sentry SaaS and the order of setup.
Configuring Elastic Cloud organization SSO with authentik: Enterprise subscription and claimed domains, the required Organization owner role mapping and the groups attribute.
Enforcing SSO for a Docker organization through authentik: the Docker Business subscription, verified domains and matching emails, default teams and SCIM provisioning.
Keeping Cloudflare Access for application access while authentik is the identity provider behind it: the OpenID Connect login method, group claims in Access policies, and when to replace Access with authentik outposts instead.
Configuring SSO from authentik to ChatGPT workspaces: SAML or OIDC options in the guide, domain verification on the OpenAI side, and controlling which groups can reach AI tools.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.