authentik vs Kanidm

authentik vs Kanidm
Fact	authentik	Kanidm
Language	Python	Rust
Licence	Other	MPL-2.0
Stars	26k	5.4k
Latest	version/2026.8.3	v1.11.2
Last push	2026-10-06	2026-10-05
Release cadence	about 4 days between releases	about 20 days between releases
Active contributors	38+ commit authors on the default branch in the last 90 days	12 commit authors on the default branch in the last 90 days
Flags	none	none

How they relate

Both replace Keycloak. Alternatives to Keycloak →
Full replacementauthentikFlows and policies edited in a web UI, plus an outpost proxy for apps without SSO.
PartialKanidmOpenID Connect and LDAP, without SAML.
Both replace Okta. Alternatives to Okta →
Full replacementauthentikSSO over OpenID Connect, SAML, LDAP and a forward-auth proxy, with visual flows.
PartialKanidmIdentity server with OAuth2, OpenID Connect, LDAP, passkeys and RADIUS.

v1.11.22026-09-11This update resolves 1 security issue which may cause auth confusion in some very specific client LDAP applications. We…
v1.11.12026-08-14> KNOWN ISSUE: This version contains an issue where on a fresh install you may receive an error message such as:
v1.11.02026-08-02This is the latest stable release of the Kanidm Identity Management project. Every release is the combined effort of our
v1.10.52026-08-02This update resolves 1 security issue which may allow denial of service by an unauthenticated user. We have no evidence…
v1.10.42026-06-23This update resolves 1 security issue which may allow denial of service by an unauthenticated user. We have no evidence…

unsigned The latest release, version/2026.8.3, carries no signature GitHub could verify.

Loading the security report

unsigned The latest release, v1.11.2, carries no signature GitHub could verify.

Loading the security report