Direct naar inhoud
085 013 4500NL
Authentik logoApps catalogue

Authentik hosting

Authentik is an open-source identity provider — SSO, MFA and user management for all your apps, on your own server.

Free consultationAuthentik documentation
From
From
€29.00per month

Excl. VAT. Monthly cancellable.

  • Own Docker container + persistent volume
  • Daily backup with 14-day retention
  • 24/7 monitoring + Dutch support

Available immediately. No long-term contracts.

Authentik (formerly 'passbook') is the modern open-source identity provider: SSO via SAML/OIDC/LDAP, MFA with TOTP/WebAuthn/Duo, user management with group membership and flexible login flows. For IT teams that want to escape Microsoft Entra ID (Azure AD) as the sole SSO source, or want internal control over their identity stack.

Authentik combines the best of Keycloak (enterprise feature set) with a much more modern UI and flexible 'flows' (visually configure login steps: 'verify password → ask MFA → check IP whitelist → log in'). For SME teams that want to give SSO to their Nextcloud, GitLab, Outline and own apps: a complete solution in one.

We host Authentik in a Docker stack (Python + Postgres + Redis) and connect your domain. Add SAML and OIDC applications via the admin UI, your users come via local registration or via LDAP sync from your AD.

Who it's for

Authentik is ideal for

SSO for open-source apps

One login for Nextcloud, GitLab, Outline, Grafana, Mattermost and all your own apps. Reduces password fatigue, increases security.

MFA enforcement

Force TOTP or WebAuthn for admin roles. Granular policies: office IP no MFA, external yes.

Replacement for Microsoft Entra ID

For companies that don't want to be vendor-locked with Microsoft — give your employees SSO via an open-source IDP.

B2B portals with customer accounts

Build a customer portal where your B2B customers log in with their own accounts. Groups per organisation, rights per group.

What's included

Included in every deployment

SAML 2.0 + OIDC + LDAP

All standard protocols. Works with almost any modern SaaS or open-source app.

Visual flow builder

Configure login steps drag-and-drop: 'password → MFA → IP check → login'.

MFA with TOTP, WebAuthn, Duo

Multi-factor with modern standards. Hardware keys (YubiKey) supported via WebAuthn.

User self-service portal

Users can reset their own passwords, configure MFA, view sessions. Reduces IT load.

LDAP sync (Active Directory)

Sync users from existing Microsoft AD or OpenLDAP. Authentik becomes single source for SSO.

Outpost architecture

Embedded proxies for non-SSO apps (legacy webapps behind a reverse proxy with Authentik auth).

How it works

Live within one business day

1. Order

Click order, pick your subdomain and plan. Pay monthly, cancel any time.

2. We deploy

Container runs within minutes in our NL data centres. Auto-SSL, daily backups and monitoring are set up automatically.

3. Manage in the portal

Update, restart or scale from the customer portal. We watch updates and security.

Frequently asked questions about Authentik hosting

Functionally very similar for basic SSO and MFA. Authentik is self-hosted (data in NL, no Microsoft account required) and has a more flexible flow builder. Microsoft Entra is stronger in Conditional Access and deep Microsoft 365 integration. For non-M365 companies: Authentik fine.

Yes, via LDAP sync. Authentik pulls in users + groups and synchronises changes periodically (configurable). Passwords can still validate via AD (delegated auth) or live in Authentik itself.

Almost anything with SAML or OIDC support: GitLab, Nextcloud, Outline, Grafana, Mattermost, Jenkins, Argo CD, and most SaaS tools. For apps without native SSO: Authentik's outpost proxy acts as auth gateway.

Start with 1-2 apps (e.g. Nextcloud + Outline) where you let your internal users log in via Authentik. Add MFA for admins. Then gradually more apps and LDAP sync. We help with the initial setup.

In our own Dutch data centres in Eindhoven and Den Bosch. Data never leaves the Netherlands — GDPR-compliant and outside US cloud jurisdiction (no CLOUD Act risk).

Every deployment gets daily off-site backups with 30-day retention. Restore yourself from the customer portal or open a ticket with our service desk.

By default you get a virtualcomputing.app subdomain with automatic Let's Encrypt SSL. Want to use your own domain (app.yourcompany.com)? Set it up in the portal — we'll show you the CNAME settings.

Cancel monthly, no penalties. Upon cancellation you get an export of your data or the Docker volume to import elsewhere. No vendor lock-in.

Updates, security patches and uptime monitoring are always included. Our Dutch service desk responds via email or phone (+31 85 013 4500) on business days 8-18.
Combine with

Other apps that fit alongside

Vaultwarden logo

Vaultwarden

€9.00 per month

View Nextcloud logo

Nextcloud

€29.00 per month

View Gitea logo

Gitea

€19.00 per month

View

Authentik can be live this afternoon at Virtual Computing

One click to order. We handle the container, SSL and backups in our Dutch data centres. Cancel monthly, no commitment.

Free consultation