October 2025 Summaries

Authentik is an open-source identity provider that consolidates identity needs into a single platform, serving as an alternative to services like Okta and Keycloak. The 2025.10 release introduces significant updates including the addition of Single Logout (SLO) support for SAML and OAuth2, the integration of Telegram as an authentication source, and the removal of Redis in favor of PostgreSQL for caching and tasks. Enhancements include OAuth token support for SCIM providers, EAP-TLS support for RADIUS, and new desktop integrations for Windows, macOS, and Linux. The release also addresses important changes such as the adjustment of the email_verified claim in OAuth scope mappings to enhance security. New integration guides for various applications, including Cloudflare and Digital Ocean, have been introduced, and community contributions are encouraged to further expand these resources. Users are advised to consult the upgrade documentation for a smooth transition to this version.

Authentik is an open-source Identity Provider designed to consolidate various identity needs into one platform, serving as an alternative to solutions like Okta and Keycloak. The platform supports both SAML single logout and the newer OpenID Connect (OIDC) front-channel and back-channel logout, which enhance user session termination across applications. Single logout ensures that when a user logs out of authentik, they are automatically logged out of all connected applications, thus preventing security risks associated with orphaned sessions. Front-channel logout works via the user's browser, while back-channel logout uses direct server communication, offering more reliability and control, especially for administrative tasks. Despite the advantages of back-channel logout, it is less commonly adopted compared to front-channel logout. Authentik is committed to providing both methods to enhance user experience and security, offering these standards as part of their free, open-source platform.