mirror of
https://github.com/goauthentik/authentik.git
synced 2026-06-17 19:09:11 +03:00
Oleksii Kondratiuk
002178e2e1
* website/integrations/infrastructure: add RabbitMQ Add a community-supported integration document for RabbitMQ 4.x using the `rabbitmq_auth_backend_oauth2` plugin. The same configuration supports both Management UI login via OpenID Connect and AMQP / HTTP API authentication with a JWT used as the password. Includes the required scope mapping (aud claim + synthetic-SA groups injection for the client_credentials grant), the two groups (rabbitmq-administrator and rabbitmq-monitoring) used by RabbitMQ's scope_aliases, and the application policy bindings that gate login at the authentik layer. * website/integrations/infrastructure: tighten SA bypass to internal_service_account Use `request.user.type == "internal_service_account"` instead of a suffix match on the username plus the broader `service_account` type. `internal_service_account` is the authentik user type assigned only to the synthetic SA that the OAuth2 provider creates for each `client_credentials` grant; manually-created service accounts use the plain `service_account` type. The previous check would let any admin- created `service_account` whose username ended with `-client_credentials` through the application policy, which is broader than intended. * Update formatting, change language, remove line breaks * Update. --------- Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dominic R <dominic@goauthentik.io>
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
 |
 |
 |
 |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!
License
