Replace Okta
If your Okta bill crossed $500/month, a 4 GB Authentik VPS pays for itself in days. Same SAML, same OAuth2, no per-user pricing.
Authentik VPS Hosting
Self-hosted SSO.
No per-user pricing.
Run Authentik on AMD EPYC + pure NVMe. OAuth2, SAML, OpenID, LDAP, MFA.
Independent cloud since 2008 · Root SSH · Docker-ready in minutes.
Starting at $2.48/mo · 50% off · No credit card required
~ ssh root@idp-prod-001 connected
root@idp-prod-001:~# curl -L -O https://goauthentik.io/docker-compose.yml
100% [=====================] 4.2 KB
root@idp-prod-001:~# docker compose up -d
[+] Running 5/5 ✔ server, worker, redis, postgres, ldap
root@idp-prod-001:~# curl -s localhost:9000/-/health/live/
{"status":"alive"}
root@idp-prod-001:~# _
Authentik VPS at a glance
Cloudzy hosts Authentik on Linux VPS plans across 12 regions in North America, Europe, the Middle East, and Asia, starting at $2.48 per month. Plans run from 512 MB to 64 GB DDR5 on فضای ذخیرهسازی NVMe با 40 Gbps uplinks and a dedicated IPv4 for OAuth2 redirects. Servers provision in 60 seconds, run on AMD EPYC, and ship Ubuntu images ready for the official Authentik Docker Compose stack. Cloudzy has been independent since 2008, rated 4.6 / 5 by 708+ reviewers در Trustpilot.
- Starting price
- $2.48 / month
- Recommended
- 4 GB DDR5
- Provisioning
- 60 seconds
- منطقهها
- ۱۲ منطقه در سراسر جهان
- آپتایم SLA
- 99.95%
- بازگشت وجه
- 14 days
Why builders pick Cloudzy
An IdP that never goes down.
The four things buyers actually compare us on, done right.
Auth that doesn't drop
Latest-gen AMD EPYC, NVMe-only storage, DDR5 memory, 40 Gbps uplinks. Token issuance stays under 100 ms even at burst load.
Risk-free trial
14-day money-back guarantee on every plan. No questions asked. Test Authentik with real apps before committing.
99.95% uptime SLA
Automated monitoring across 12 regions. Status publicly tracked at status.cloudzy.com, when SSO is down, every app is down. Don't let that happen.
24/7 human support
Real engineers on chat in minutes, not hours. We don't configure your SAML flows, but the Linux, Docker, and networking layer is fully on us.
Protocols + features
Every auth protocol.
Wired into one IdP.
Authentik handles modern OAuth2 / OIDC, legacy SAML, LDAP for old-school apps, plus SCIM provisioning and a forward-auth proxy for everything else. Mix protocols across your stack from one admin UI.
Custom flows + policies via Python expressions
OAuth2
OIDC + access tokens
SAML 2.0
Legacy app SSO
LDAP proxy
Read-only directory
WebAuthn
Hardware keys · TouchID
TOTP MFA
Authenticator apps
SCIM
User provisioning
Forward auth
Reverse-proxy SSO
Policies
Allow/deny rules
Use cases
Why teams self-host Authentik
on Cloudzy.
Internal tool SSO
Wrap any internal dashboard, admin panel, or homelab app behind Authentik's reverse proxy. SSO without touching the app's source code.
Customer-facing IdP
Embed Authentik as the auth layer for your SaaS. OAuth2 for your API, SAML for enterprise customers, magic links for casual users, all from one IdP.
Compliance + audit
Keep user data on infrastructure you fully control. Authentik logs every login, every policy decision, every admin change, useful when your auditors ask.
Zero-trust gateway
Authentik's proxy provider terminates SSL, enforces MFA, and forwards auth headers to internal services. Tailscale-style access without the per-seat cost.
Replace AD for small teams
Run Authentik with the LDAP outpost as a lightweight directory for sub-100-user shops. Cheaper than Azure AD, no Microsoft licensing weirdness.
60s
Provisioning
40 Gbps
Uplink
NVMe-only
Storage
12
منطقهها
99.95%
آپتایم SLA
14 days
بازگشت وجه
شبکه جهانی
12 regions. Four continents.
Pick the closest one.
Place Authentik close to your apps, auth latency stays under 30 ms, login feels instant.
us-utah-1us-dal-1us-lax-1us-nyc-1us-mia-1eu-ams-1eu-lon-1eu-fra-1eu-zrh-1me-dxb-1ap-sgp-1ap-tyo-1
قیمتگذاری
فقط برای آنچه مصرف میکنید بپردازید. That's it.
Hourly, monthly, or yearly. No egress fees. No commitments. Currently ۵۰٪ تخفیف all plans.
512 MB DDR5
Test deploy · Lab use
$2.48/ماه
$4.95/mo۵۰%-
Deploy now ۱۴ روز ضمانت بازگشت وجه
- 1 vCPU @ EPYC
- 20 GB NVMe
- 1 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
1 GB DDR5
Solo dev · Personal SSO
$3.48/ماه
$6.95/mo۵۰%-
Deploy now ۱۴ روز ضمانت بازگشت وجه
- 1 vCPU @ EPYC
- 25 GB NVMe
- 1 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
2 GB DDR5
Small team · 50 users
$7.475/ماه
$14.95/mo۵۰%-
Deploy now ۱۴ روز ضمانت بازگشت وجه
- 1 vCPU @ EPYC
- 60 GB NVMe
- 3 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
محبوبترین
4 GB DDR5
Production · 100+ users
$14.47/ماه
$28.95/mo۵۰%-
Deploy now ۱۴ روز ضمانت بازگشت وجه
- 2 vCPU @ EPYC
- 120 GB NVMe
- 5 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
FAQ. Authentik VPS
Common questions, straight answers.
What is Authentik?
Authentik is an open-source identity provider, a self-hosted alternative to Okta, Auth0, and Keycloak. It handles SSO via OAuth2, SAML, OpenID Connect, and LDAP, plus multi-factor authentication, user invitations, and policy-based access control across all your internal apps.
Why self-host instead of using Okta?
Okta charges per user per month. A self-hosted Authentik VPS is one flat bill regardless of user count, keeps user data on infrastructure you control, and gives you full audit visibility. Tradeoff: you handle the patching and backups.
How much RAM does Authentik need?
Authentik runs on 2 GB for a small team, 4 GB DDR5 for typical SMB deployments with PostgreSQL co-resident. Heavy LDAP sync, lots of policies, or a large user directory pushes you toward 8 GB. The Docker Compose stack pulls 5 containers, so don't go below 2 GB.
Can I run Authentik with Docker?
Yes, the official Docker Compose stack is the recommended deploy method. Every Cloudzy VPS comes Docker-ready on Ubuntu. Pull the compose file from the Authentik docs, set the secret key, run docker compose up, and you have a working IdP in about 10 minutes.
How fast does it provision?
VPS itself is live in 60 seconds after payment. Pulling the Authentik containers and running the initial setup wizard takes another 10 minutes. The default admin user gets created on first boot, log in, configure a flow, and you're protecting apps within an hour.
What protocols does Authentik support?
OAuth2, OpenID Connect, SAML 2.0, LDAP (read-only proxy), SCIM, and a built-in proxy that lets you put any internal web app behind SSO without touching the app's auth code. Useful for tools that don't ship with native SAML support.
How do I back up the user directory?
Authentik stores everything in PostgreSQL. Schedule pg_dump via cron and ship the dump to S3, or take Cloudzy snapshots before each upgrade. The Authentik admin UI also has a built-in backup/restore for the configuration files.
Can I scale up later?
Yes. RAM, vCPU, and storage all hot-plug live from the panel. Most upgrades complete in under 60 seconds without rebuilding. Move from 4 GB to 16 GB without touching your Authentik configuration or breaking active sessions.
Does it support MFA?
Yes. TOTP authenticator apps, WebAuthn (hardware keys, Touch ID), SMS, email magic links, and recovery codes, all configurable per-user or per-policy. You can require MFA for admins and skip it for low-risk apps from the same dashboard.
Is there a money-back guarantee?
Yes, 14 days from purchase, no questions asked, full refund. Apply from the panel or email [email protected]. Plenty of time to deploy Authentik, configure a few apps, and decide if self-hosting is right for your team.
آمادهایم وقتی شما آمادهاید.
Authentik in 60 seconds.
Pick a region, deploy, docker compose up. Your IdP boots while you read this.
بدون نیاز به کارت اعتباری · ضمانت بازگشت وجه ۱۴ روزه · لغو در هر زمان