Side by side
authentik vs Duende IdentityServer
Both stand on oauth server software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APILinuxMac+3
authentik covers a broad set of identity protocols and use cases, with a self-hosted deployment model. Organizations considering it should account for operating their own infrastructure and the support differences between plans.
Visit authentik Free plan AndroidAPIiPhone+5
Visit Duende IdentityServer The facts
| authentik | Duende IdentityServer | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Linux, Mac, Self-hosted, Web, Windows | Android, API, iPhone, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Enterprise: $5 a month | Lite: $5,750 a year |
| Plans published | 4 | 4 |
| Maker | Not published | Not published |
| Website | goauthentik.io | duendesoftware.com |
| On oauth server software | #8 of 32 | #12 of 32 |
authentik: what it does well
- Supports multiple identity protocols, including SAML2 and LDAP.
- Offers TOTP and WebAuthn/passkey authentication.
- Conditional access can use attributes, time, and location.
- Runs on customer infrastructure, including Docker and Kubernetes.
- Includes audit logging and mTLS client authentication.
What to know first
- There is currently no hosted version.
- The open-source plan has no support.
- Enterprise pricing is billed annually.
Duende IdentityServer: what it does well
Alternatives to authentik Alternatives to Duende IdentityServer The whole list