authentik vs OpenAM
authentik
goauthentik.ioOpenAM
openidentityplatform.orgSide by side
| Figure | authentik | OpenAM |
|---|---|---|
| Price from | $5/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 1 |
| Spec score · OAuth Server Software | 8.5 (#9) | 7.6 (#26) |
| Authentication | It supports multi-factor authentication with TOTP and WebAuthn/passkeys, including hardware or software authenticators. | It includes more than 20 authentication modules that can be arranged into multi-factor or adaptive authentication sequences. |
| Deployment | authentik can run on customers’ own infrastructure, including Docker and Kubernetes, and the pricing FAQ says there is currently no hosted version. | The maker documents deploying OpenAM in a Docker container and configuring it to use OpenDJ as its data store. |
| Intended users | The Open Source plan is described as being for homelab users and simple use cases, while Enterprise Plus is described as being for custom contracts and expert support. | The maker describes OpenAM as suited to companies with multiple sites and applications that need users to authenticate once for access across them. |
| Protocols | Listed protocols include OAuth2/OpenID Connect, SAML2, LDAP, RADIUS, SCIM, and Kerberos. | OpenAM can act as an identity provider using SAML, OAuth 2.0, or OpenID Connect 1.0. |
| Support | The open-source plan lists community Discord and no support; paid support is offered as part of enterprise software subscriptions, with ticket support for Enterprise subscriptions over $1k. | Free community support is available through GitHub Discussions and documentation; independent approved vendors offer SLAs, consulting, implementation, and migration services. |
Plans
authentik
- FreeFree
- Enterprise$5 a month
- Open SourceFree
- Enterprise Plus$20,000 a year
In their own words
authentik
authentik is an open-source, self-hostable identity and access management product for workforce single sign-on, customer identity, zero-trust security, legacy application integration and API security. It supports OAuth2/OpenID Connect, SAML2, LDAP, RADIUS, SCIM and Kerberos, as well as WS-Federation. MFA options include TOTP, WebAuthn/passkeys, email, SMS, Duo and static tokens. Access policies can consider factors such as user attributes, time and location. Security features include audit logging, session binding, GeoIP and impossible-travel detection, and client certificate authentication with mTLS. It can run on customer infrastructure, including Docker and Kubernetes; the pricing FAQ says there is no hosted version currently. The authentik Agent integrates with Windows, macOS and Linux for local device login and CLI authentication. A free open-source plan includes community Discord support but no product support. Enterprise costs $5 a month, billed annually, at $5 per user per month; external users are $0.02 per month and service accounts have no cost.
OpenAM
OpenAM has no write-up on Specifiction yet; its figures are above.