{"id":38286416,"url":"https://github.com/opalsecurity/opal-authentik-connector","last_synced_at":"2026-01-17T02:03:51.096Z","repository":{"id":298918393,"uuid":"869695530","full_name":"opalsecurity/opal-authentik-connector","owner":"opalsecurity","description":null,"archived":false,"fork":false,"pushed_at":"2025-09-11T15:19:18.000Z","size":3506,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-09-11T18:31:09.204Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/opalsecurity.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-10-08T18:18:13.000Z","updated_at":"2025-09-11T15:19:22.000Z","dependencies_parsed_at":"2025-08-19T00:16:19.069Z","dependency_job_id":"d8a73221-56c8-4aea-91f2-b37be16c017e","html_url":"https://github.com/opalsecurity/opal-authentik-connector","commit_stats":null,"previous_names":["opalsecurity/opal-authentik-connector"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/opalsecurity/opal-authentik-connector","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opalsecurity%2Fopal-authentik-connector","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opalsecurity%2Fopal-authentik-connector/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opalsecurity%2Fopal-authentik-connector/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opalsecurity%2Fopal-authentik-connector/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/opalsecurity","download_url":"https://codeload.github.com/opalsecurity/opal-authentik-connector/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opalsecurity%2Fopal-authentik-connector/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28492047,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-17T00:50:05.742Z","status":"online","status_checked_at":"2026-01-17T02:00:07.808Z","response_time":85,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-01-17T02:03:50.294Z","updated_at":"2026-01-17T02:03:51.020Z","avatar_url":"https://github.com/opalsecurity.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# opal-authentik-connector\n\n## Setup\n### Setup the custom connector source code\n\nClone the custom connector repository\n\n```bash\ngit clone https://github.com/opalsecurity/opal-authentik-connector.git\n```\n\n\nThe following environment variables are required to run the Authentik custom connector. You can see them in `.env.sample`.\n\n```bash\nAUTHENTIK_TOKEN=\u003cpopulate-in-next-step\u003e\nAUTHENTIK_HOST=\u003cauthentik-host\u003e\nAUTHENTIK_SCHEME=\u003chttp or https\u003e\n\nOPAL_SIGNING_SECRET=\u003cpopulate-later\u003e\n```\n\nYou can deploy the Authentik custom connector to your own infrastructure, as long as it is accessible over the internet.\n### Setting up a service account in Authentik\n\nNow we need to get an API token from Authentik. Note that we cannot use a user’s API token, we have to create a service account and create an API token for that. \n\nOpen up the admin panel for Authentik\n\nOpen Directory → Users\n\n![assets/authentik_service_account_0.png](assets/authentik_service_account_0.png)\n\nClick “Create Service Account”\n\n![Screenshot 2024-10-10 at 11.20.42 AM.png](assets/opal_service_account_1.png)\n\nSet whatever username you’d like, disable “Create Group” and “Expiring” as we do not want the service account to expire. Then hit Create\n\n![Screenshot 2024-10-10 at 11.21.45 AM.png](assets/opal_service_account_2.png)\n\nGo to Directory → Users and open the service account\n\n![Screenshot 2024-10-10 at 5.39.02 PM.png](assets/opal_service_account_3.png)\n\nSelect “Permissions” and assign the following permissions:\n\n- Add user to group\n- Can view Group\n- Can view User\n- Remove user from group\n\n![Screenshot 2024-10-10 at 5.40.09 PM.png](assets/opal_service_account_4.png)\n\nGo to Directory → Tokens and App Passwords\n\n![Screenshot 2024-10-10 at 11.22.41 AM.png](assets/opal_service_account_5.png)\n\nClick “Create”\n\n![Screenshot 2024-10-10 at 11.24.53 AM.png](assets/opal_service_account_6.png)\n\nUse any identifier you’d like, make sure “User” is set to the service account created above, “Intent” is “API Token” and “Expiring” is set to off\n\n![Screenshot 2024-10-10 at 11.26.28 AM.png](assets/opal_service_account_7.png)\n\nNow click the copy icon to copy your newly created token, and paste it into your `.env` file or other secret store\n\n![Screenshot 2024-10-10 at 11.28.22 AM.png](assets/opal_service_account_8.png)\n\n# Setup Custom Connector in Opal\n\nGo to Catalog → Add\n\n![Screenshot 2024-10-10 at 12.00.19 PM.png](assets/opal_custom_connector_0.png)\n\nGo to Custom → Custom App\n\n![Screenshot 2024-10-10 at 12.01.41 PM.png](assets/opal_custom_connector_1.png)\n\nConfigure the app name, app admin and description. \nUpload the Authentik icon as the app icon, you can find the icon under `assets/authentik.png`.\n\n![Screenshot 2024-10-10 at 12.06.02 PM.png](assets/opal_custom_connector_4.png)\n\nSelect “Use custom app connector”, set the identifier to whatever you’d like, and set “Base URL” to the host name (with protocol) where your custom connector is hosted, e.g `https://examplehostname.com`\n\n![Screenshot 2024-10-10 at 12.02.54 PM.png](assets/opal_custom_connector_2.png)\n\nClick Signing Secret → Generate, copy the signing secret and set it as the `OPAL_SIGNING_SECRET` in the environment where your custom connector is hosted. \n\nEnable “Connector Groups” and make sure “Nested Resources” is disabled\n\n![Screenshot 2024-10-10 at 12.06.02 PM.png](assets/opal_custom_connector_3.png)\n\nNow click “Create”\n\nYour custom connector should be ready now! Sync the app and your groups should show up.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopalsecurity%2Fopal-authentik-connector","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fopalsecurity%2Fopal-authentik-connector","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopalsecurity%2Fopal-authentik-connector/lists"}