Skip to content

Backstage Plugin — Authentik#

npm version CI OpenSSF Scorecard License

A Backstage catalog backend module that ingests users and groups from Authentik and maps them to Backstage User and Group entities — so your identity provider becomes the source of truth for the catalog.

What it does#

  • Polls Authentik's REST API on a configurable schedule.
  • Creates a User entity for every Authentik user (including avatar, email, and group memberships).
  • Creates a Group entity for every Authentik group, preserving parent/child hierarchy and active membership.
  • Annotates every entity with authentik.goauthentik.io/pk for traceability back to Authentik.

Quick start#

yarn --cwd packages/backend add @naqa92/backstage-plugin-catalog-backend-module-authentik

// packages/backend/src/index.ts
backend.add(import('@naqa92/backstage-plugin-catalog-backend-module-authentik'));

# app-config.yaml
catalog:
  providers:
    authentik:
      baseUrl: https://authentik.example.com
      token: ${AUTHENTIK_TOKEN}
      excludeGroups: []

See Install and Configure for the full setup.

Compatibility#

Plugin version Backstage version
0.1.x >=1.30

License#

Apache-2.0 — see LICENSE.