#102
A
Rank #29
Authentik
Full-featured open-source identity provider supporting SAML, OIDC, LDAP, and SCIM — a legitimate self-hosted alternative to Okta/Auth0. One of the more properly-architected security products in this batch.
79.0
/ 100
⚙ Full Stack
Python/Django backend plus a Go-based proxy/outpost component, Postgres for identity data, Redis for caching and background task queuing via Celery.
📈 Scaling Analysis
Django + Celery + Postgres is a well-understood scaling pattern, and the outpost architecture (separate lightweight Go proxies for protected apps) genuinely decouples the IdP core from per-app auth traffic — a real, working scale mechanism rather than a theoretical one.
🚀 Running on Nexlayer
Server, worker, postgres, and redis pods are the minimum; set AUTHENTIK_HOST to the Nexlayer domain and reference redis.pod:6379 / postgres.pod:5432 internally. mirror.gcr.io/library/python covers the base image; outpost components for proxying other apps' auth need their own pod if used.