August 2023 Summaries

The authentik Enterprise release provides dedicated support and account management, building on years of open source development with a focus on simplicity in deployment and upgrading, offering access to a Support center for Enterprise customers. This preview release includes features such as RBAC support, remote desktop access, and an authentik mobile app for multi-factor authentication in future releases. The company has grown significantly since becoming a company last fall and is committed to engaging with its open source community through Discord server conversations and problem-solving. `The Enterprise version's open core model ensures that all features will be available as source code, always, and the company acknowledges the support from its open source community in achieving this goal. `The preview release is available now in 2023.8, with instructions for deployment provided in the documentation. The company invites feedback and suggestions on future direction from customers, encouraging them to contact [email protected].

My experience reflects the tension between building commercially on top of open source software and adhering to the principles of those projects, particularly when it comes to licensing models. I initially used the GPL license for authentik but switched back to MIT as part of a company restructuring, driven by the need to balance commercial viability with the values of open source ideals. This experience highlights the importance of considering tradeoffs and finding alternative mechanisms to ensure accountability, such as becoming a public benefit company. The decision also underscores the complexity of navigating licensing models in commercial open source projects.

The author argues that identity has become boring and that companies are defaulting to buying pre-built solutions instead of building their own. This is due to the misconception that building software from scratch is wasteful or over-indulgent, and that buying a product is a complete solution. However, this framework ignores the complexity of real-world problems and the importance of customization and execution. The author suggests that companies should reconsider their approach to identity and build custom solutions or build on top of products that will grow with them, rather than defaulting to industry leaders. This requires a deeper understanding of the problem and its context, as well as a willingness to question assumptions and explore alternative approaches. By making identity "fun again," companies can find more rewarding and user-centric solutions that differentiate themselves from others in their market.

The tightrope walk of authentication: a balance of convenience and security` is a complex issue where customers' limited knowledge of digital security can lead to significant risks if they choose not to use robust security measures, such as Single Sign-On (SSO), due to budget constraints. Ensuring user convenience while maintaining strong security measures is challenging, but it's essential to strike a balance between the two. The authentik approach offers flexibility in tailoring-made security measures, versatility through supporting multiple protocols and services, transparency through its open-source nature, and prioritizing user understanding and needs by empowering users to choose, understand, and control their own security measures. By adopting this approach, SSO providers can mitigate the risk of misunderstanding or underestimating the importance of security measures, ensuring users are both protected and empowered.

We recently held an authentic hacking event, where participants from around the world, spanning four continents and six time zones, contributed to the authentik project over a five-day period. The contributors made various contributions, including improving email configurations, adding Kerberos as a new authentication protocol, and enhancing documentation on user management. The event was marked by positive energy, teamwork, and learning from one another's work styles. The top three winners were recognized for their outstanding contributions, with the winner being @Baloc who added substantial value to the authentik project through procedural docs about user management. The event highlighted the strength of community, the importance of embracing new challenges, and the benefits of building with others from diverse backgrounds.