March 2026 Summaries

Authentik is an open-source Identity Provider aiming to unify identity management and replace platforms like Okta, Keycloak, and Ping by offering a comprehensive solution that reduces complexity in identity and access management (IAM). At the BSidesSF conference, Authentik Security discussed the evolution of single sign-on and the challenges faced by fragmented IAM systems, which often rely on multiple point solutions that increase complexity and cost. The conference highlighted a growing trend where companies are prioritizing AI integration into their offerings, although many claims of AI capabilities remain superficial. This environment underscores the necessity for a cohesive system that supports both human and non-human users with finely scoped permissions and passwordless access. The discussions also emphasized a shift toward in-house identity solutions, as organizations seek more reliable and secure alternatives to third-party SaaS providers. Authentik aims to address these needs by offering a flexible, secure identity solution that can be deployed in private cloud or on-premise environments, allowing organizations to streamline access for a diverse user base.

Authentik is an open-source Identity Provider (IdP) designed to unify identity management across both human and non-human users, replacing traditional IdPs like Okta, Keycloak, and Ping. Developed by Authentik Security, this platform addresses the growing need for managing "non-human identities" by offering service accounts with expiring tokens and comprehensive role-based access control (RBAC) permissions, allowing for precise management of access to applications and infrastructure. Authentik emphasizes automation over manual, error-prone processes, providing APIs for every action and enabling users to manage both human and non-human identities seamlessly within a single system. By using widely accepted standards, Authentik ensures that non-human users receive the same security capabilities and restrictions as human users, thus streamlining identity and access management while maintaining high security levels.