mirror of
https://github.com/goauthentik/authentik
synced 2026-05-14 19:06:39 +02:00
9d18237260
Adds scripts/container-sandbox and a node-install-containerized Makefile target that runs the npm install steps inside an ephemeral Linux microVM via Apple's container runtime (macOS 15+, Apple Silicon). The container mounts the repo at /work and sees nothing else — no ~/.ssh, no ~/.aws, no Keychain — providing kernel-level isolation on top of the .npmrc ignore-scripts defense from the parent PR. Opt-in only. Default 'make node-install' is unchanged and identical across platforms. README documents the workflow tradeoffs (Linux binaries in node_modules, exclusive with the native install). Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
 |
 |
 |
 |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!
License
