What you can do with Authentik
Every task in plain language. Pick one, and we can help you get access.
1,193 things you can do
Authentik
Authentik is an open source identity provider from Authentik Security Inc., a public benefit company, exposing a 1,193-operation REST API at /api/v3 on every self-hosted instance. The published OpenAPI covers users, groups, applications, tokens, RBAC, flows, stages, policies, property mappings, outposts, events, blueprints, endpoint devices, privileged access management and agent accounts. authent
Identity & Access Management
Request access to resourcesDelete a grant requestApprove or deny a grant requestRevoke an active access grantDelegate owner access to an agentBind a request rule to a targetReplace a request rule bindingDelete a request rule bindingChange some rule binding settingsAdd a child binding to a rule bindingReplace a rule child bindingDelete a rule child bindingChange a child binding's target or parentCreate an access request ruleReplace an access request ruleDelete an access request ruleChange some request rule settingsCreate an account lockdown stageReplace an account lockdown stage's settingsDelete an account lockdown stageChange one setting on an account lockdown stageDelete a stage of any typeCreate a Duo authenticator stageReplace a Duo authenticator stage's settingsDelete a Duo authenticator stageChange one setting on a Duo stageImport one Duo device for a userBulk import Duo devices automaticallyCreate an email authenticator stageReplace an email authenticator stage's settingsDelete an email authenticator stageChange one setting on an email authenticator stageCreate a Google Device Trust endpoint stageReplace a Google Device Trust stage's settingsDelete a Google Device Trust endpoint stageChange one setting on a Google Device Trust stageCreate an SMS authenticator stageReplace an SMS authenticator stage's settingsDelete an SMS authenticator stageChange one setting on an SMS stageCreate a static recovery code stageReplace a static recovery code stage's settingsDelete a static recovery code stageChange one setting on a static code stageCreate a TOTP authenticator stageReplace a TOTP stage's settingsDelete a TOTP authenticator stageChange one setting on a TOTP stageCreate an MFA validation stageReplace an MFA validation stage's settingsDelete an MFA validation stageChange one setting on an MFA validation stageCreate a WebAuthn passkey setup stageReplace a WebAuthn stage's settingsDelete a WebAuthn passkey setup stageChange one setting on a WebAuthn stageCreate a captcha stageReplace a captcha stage's settingsDelete a captcha stageChange one setting on a captcha stageCreate a consent stageReplace a consent stage's settingsDelete a consent stageChange one setting on a consent stageCreate a deny stageReplace a deny stage's settingsDelete a deny stageChange a deny stage's messageCreate a dummy test stageReplace a dummy stage's settingsDelete a dummy test stageToggle error throwing on a dummy stageCreate an email verification stageReplace an email verification stage's settingsDelete an email verification stageChange one setting on an email verification stageCreate an endpoint device stageReplace an endpoint device stage's settingsDelete an endpoint device stageChange one setting on an endpoint stageCreate an identification stageReplace an identification stage's settingsDelete an identification stageChange one setting on an identification stageCreate an invitationReplace an invitation's detailsRevoke an invitationChange one detail of an invitationEmail an invitation linkCreate an invitation stageReplace an invitation stage's settingsDelete an invitation stageToggle invite-optional on an invitation stageCreate a mutual TLS stageReplace a mutual TLS stage's settingsDelete a mutual TLS stageChange one setting on a mutual TLS stageCreate a password stageReplace a password stage's settingsDelete a password stageChange one setting on a password stageCreate a prompt form fieldReplace a prompt form fieldDelete a prompt form fieldChange one property of a prompt fieldCreate a prompt stageReplace a prompt stage's settingsDelete a prompt stageChange one setting on a prompt stageCreate a redirect stageReplace a redirect stage's settingsDelete a redirect stageChange a redirect stage's targetCreate a source stageReplace a source stage's settingsDelete a source stageChange one setting on a source stageCreate a user delete stageReplace a user delete stageDelete a user delete stageRename a user delete stageCreate a user login stageReplace a user login stage's settingsDelete a user login stageChange one session setting on a login stageCreate a user logout stageReplace a user logout stageDelete a user logout stageRename a user logout stageCreate a user write stageReplace a user write stage's settingsDelete a user write stageChange one setting on a user write stageDelete a source of any typeReplace a group-source connection of any typeDelete a group-source connection of any typeEdit part of a group-source connection of any typeLink a group to a Kerberos sourceReplace a Kerberos group connectionDelete a Kerberos group connectionEdit part of a Kerberos group connectionLink a group to a LDAP sourceReplace a LDAP group connectionDelete a LDAP group connectionEdit part of a LDAP group connectionLink a group to a OAuth sourceReplace a OAuth group connectionDelete a OAuth group connectionEdit part of a OAuth group connectionLink a group to a Plex sourceReplace a Plex group connectionDelete a Plex group connectionEdit part of a Plex group connectionLink a group to a SAML sourceReplace a SAML group connectionDelete a SAML group connectionEdit part of a SAML group connectionLink a group to a Telegram sourceReplace a Telegram group connectionDelete a Telegram group connectionEdit part of a Telegram group connectionAdd a Kerberos sourceReplace a Kerberos source's configurationDelete a Kerberos sourceChange settings on a Kerberos sourceAdd an LDAP sourceReplace an LDAP source's configurationDelete an LDAP sourceChange settings on an LDAP sourceAdd an OAuth or OIDC login sourceReplace an OAuth source's configurationDelete an OAuth sourceChange settings on an OAuth sourceAdd a Plex login sourceReplace a Plex source's configurationDelete a Plex sourceChange settings on a Plex sourceRedeem a Plex token to start sign-inLink a Plex account to a signed-in userAdd a SAML login sourceReplace a SAML source's configurationDelete a SAML sourceChange settings on a SAML sourceAdd a SCIM provisioning sourceReplace a SCIM source's configurationDelete a SCIM sourceChange settings on a SCIM sourceRecord a SCIM-provisioned groupReplace a SCIM group recordDelete a SCIM group recordEdit part of a SCIM group recordRecord a SCIM-provisioned userReplace a SCIM user recordDelete a SCIM user recordEdit part of a SCIM user recordAdd a Telegram login sourceReplace a Telegram source's configurationDelete a Telegram sourceChange settings on a Telegram sourceConnect a Telegram account to a userReplace a user-source connection of any typeDelete a user-source connection of any typeEdit part of a user-source connection of any typeLink a user to a Kerberos principalReplace a Kerberos user connectionDelete a Kerberos user connectionEdit part of a Kerberos user connectionLink a user to an LDAP entryReplace a LDAP user connectionDelete a LDAP user connectionEdit part of a LDAP user connectionLink a user to an OAuth accountReplace a OAuth user connectionDelete a OAuth user connectionEdit part of a OAuth user connectionLink a user to a Plex accountReplace a Plex user connectionDelete a Plex user connectionEdit part of a Plex user connectionLink a user to a SAML identityReplace a SAML user connectionDelete a SAML user connectionEdit part of a SAML user connectionLink a user to a Telegram accountReplace a Telegram user connectionDelete a Telegram user connectionEdit part of a Telegram user connectionReplace a remote access connection tokenRevoke a remote access connection tokenChange part of a connection tokenCreate a remote access endpointReplace a remote access endpointDelete a remote access endpointChange part of a remote access endpointDelete any property mapping by IDCreate a notification webhook mappingReplace a notification webhook mappingDelete a notification webhook mappingEdit part of a notification webhook mappingCreate a Google Workspace provider mappingReplace a Google Workspace provider mappingDelete a Google Workspace provider mappingEdit part of a Google Workspace provider mappingCreate a Microsoft Entra provider mappingReplace a Microsoft Entra provider mappingDelete a Microsoft Entra provider mappingEdit part of a Microsoft Entra provider mappingCreate a RAC remote access property mappingReplace a RAC remote access property mappingDelete a RAC remote access property mappingEdit part of a RAC remote access property mappingCreate a RADIUS provider property mappingReplace a RADIUS provider property mappingDelete a RADIUS provider property mappingEdit part of a RADIUS provider property mappingCreate a SAML provider property mappingReplace a SAML provider property mappingDelete a SAML provider property mappingEdit part of a SAML provider property mappingCreate a SCIM provider mappingReplace a SCIM provider mappingDelete a SCIM provider mappingEdit part of a SCIM provider mappingCreate an OAuth2 scope mappingReplace an OAuth2 scope mappingDelete an OAuth2 scope mappingEdit part of an OAuth2 scope mappingCreate a Kerberos source property mappingReplace a Kerberos source property mappingDelete a Kerberos source property mappingEdit part of a Kerberos source property mappingCreate an LDAP source property mappingReplace an LDAP source property mappingDelete an LDAP source property mappingEdit part of an LDAP source property mappingCreate an OAuth source property mappingReplace an OAuth source property mappingDelete an OAuth source property mappingEdit part of an OAuth source property mappingCreate a Plex source property mappingReplace a Plex source property mappingDelete a Plex source property mappingEdit part of a Plex source property mappingCreate a SAML source property mappingReplace a SAML source property mappingDelete a SAML source property mappingEdit part of a SAML source property mappingCreate a SCIM source property mappingReplace a SCIM source property mappingDelete a SCIM source property mappingEdit part of a SCIM source property mappingCreate a Telegram source property mappingReplace a Telegram source property mappingDelete a Telegram source property mappingEdit part of a Telegram source property mappingCreate an application entitlementReplace an application entitlementDelete an application entitlementEdit fields on an entitlementCreate an applicationReplace an applicationDelete an applicationEdit fields on an applicationRevoke a sessionRevoke all sessions for several usersCreate a brandReplace a brandDelete a brandEdit fields on a brandCreate a groupReplace a groupDelete a groupEdit fields on a groupAdd a user to a groupRemove a user from a groupDefine a custom object attributeReplace a custom attribute definitionDelete a custom attribute definitionEdit a custom attribute definitionCreate a tokenReplace a tokenDelete a tokenEdit fields on a tokenSet a token's secret keyCreate an application and provider togetherRevoke a user consentCreate a userReplace a userDelete a userEdit fields on a userImpersonate a userCreate an account recovery linkEmail an account recovery linkSet a user's passwordSet a password from a Django hashLock down a user accountExport users to a fileStop impersonating a userCreate a service accountSwitch the browser to another userAdd a stage to a flowReplace a flow stage bindingRemove a stage from a flowChange part of a flow stage bindingAnswer a flow challenge and advanceCreate a flowReplace a flow's settingsDelete a flowChange part of a flowClear the flow cacheCreate an initial permission setReplace an initial permission setDelete an initial permission setPatch fields of an initial permission setGrant permissions to a roleRevoke permissions from a roleCreate a roleReplace a roleDelete a roleRename a roleAdd a user to a roleRemove a user from a roleDelete a policy of any typeClear the policy cacheBind a policy, user or group to a targetReplace a policy bindingDelete a policy bindingChange individual fields of a bindingCreate a dummy test policyReplace a dummy policyDelete a dummy policyChange fields of a dummy policyCreate an event matcher policyReplace an event matcher policyDelete an event matcher policyChange fields of an event matcher policyCreate an expression policyReplace an expression policyDelete an expression policyEdit an expression policy's codeCreate a GeoIP policyReplace a GeoIP policyDelete a GeoIP policyChange fields of a GeoIP policyCreate a password strength policyReplace a password strength policyDelete a password strength policyTweak rules of a password strength policyCreate a password expiry policyReplace a password expiry policyDelete a password expiry policyChange a password expiry periodCreate a reputation policyReplace a reputation policyDelete a reputation policyChange a reputation policy's thresholdReset a reputation scoreCreate a password uniqueness policyReplace a password uniqueness policyDelete a password uniqueness policyShowing 400 of 1,193. Search above to find the rest.