authentik hosting: one login for everything you use.
Staff sign in once and get into every application. We install authentik, keep it updated and watch over it.
Short answer
authentik is an identity provider: the place where your accounts live and where your applications send people to sign in. It handles single sign-on through SAML and OpenID Connect, two-factor authentication and password resets that users do themselves. We put it on a server of ours in the Netherlands and look after it. It can replace Okta.
When you start thinking about this
- Staff have ten passwords and write three of them down.
- Someone leaves and you are not sure where their account is still open.
- You want two-factor authentication everywhere, but not set up separately in ten places.
- A customer or regulator asks who can reach which system.
What authentik does for you
Signing in
- One sign-in page on an address under your own domain
- Single sign-on for applications that speak SAML or OpenID Connect
- Two-factor authentication with an app or a security key
Users
- Users and groups in one place
- A group decides which applications someone may open
- Resetting a password without having to ask us
Our part
- The installation, and the link to the applications you already have
- Updates, and a backup every day with a copy outside the data centre
- Watching over the server and the sign-in page
Facts about authentik
- Licence
- MIT for the open source core. authentik is a trademark of its maker, and Jevana is not affiliated with the project.
- Replaces
- Okta, and Entra ID for applications outside Microsoft 365
- Paid edition
- The maker sells an enterprise edition with extra features; you do not need it for the basics
- Own use
- Jevana signs in with it itself
- Where
- An instance of your own, in the Netherlands, under your own domain
Questions
What is authentik and what is it used for?
authentik is software that handles signing in to your applications in one place. Staff log in once, with a second step added, and then reach the applications you have assigned to them. Accounts and groups are managed there too. You use it once you have more than a few systems that each keep their own password.
Can authentik work with Microsoft 365?
Yes, but it does not replace Microsoft 365. For Microsoft applications, Entra ID stays the place to sign in. authentik is meant for the rest: your wiki, your ticket system, your own web applications and the open source tools we run for you. If we set up the link, users can reach both sides with a single account.
What happens to our accounts if we leave Jevana?
You take them with you. authentik is open source and keeps users, groups and settings in an ordinary database. When you leave we hand over an export and the configuration, so you can run it yourself or have someone else take over. Passwords are not readable in that data, so users set a new one once after the move.
Is authentik too heavy for a small company?
No. An office of ten can work with it very well, especially if a few of its applications already support a central login. If you only use Microsoft 365, you do not need it. A large organisation with a lot of its own software will look at Keycloak first. We tell you when one of the two fits better.
Goes well with
-
Keycloak
Identity and access management for larger organisations and for software you build yourself.
-
Vaultwarden
A password vault for your team, in an environment of your own that we keep up to date.
-
Microsoft 365 security
Two-step verification, conditional access and Defender: what is in your licence, switched on and checked.
-
Password management
A password vault for the whole team, so shared passwords no longer sit in a spreadsheet.
Tell us what you run.
An introduction costs nothing. You talk straight away to one of the two people who will actually do the work.
or email info@jevana.systems