Derek Coleman & Associates Inc logoDerek Coleman & Associates Inc

Home / Support / authentik on Ubuntu 24.04 LTS

authentik on Ubuntu 24.04 LTS — Support & Quick Start

authentik on Ubuntu 24.04 LTS — authentik is a modern open-source identity provider: SSO, MFA, and user lifecycle management with SAML, OAuth2/OIDC, and LDAP support. Published by Derek Coleman & Associates Inc on the Azure Marketplace, deployed in your own Azure subscription.

Email support Product page Azure Marketplace listing

At a glance

Application ports9000 (HTTP), 9443 (HTTPS, self-signed)
Open in browserhttp://<VM-IP>:9000/
Admin credential filesudo cat /opt/authentik/admin-password
Sign in asakadmin
Service(s)authentik (systemd unit wrapping `docker compose` in /opt/authentik), docker
Configuration/opt/authentik/docker-compose.yml; /opt/authentik/.env (secrets, root-only)
Logscd /opt/authentik && sudo docker compose logs -f
Versionauthentik 2024.12.3 (Docker Compose stack)
PlatformUbuntu 24.04 LTS

Quick start

  1. Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
  2. Allow inbound SSH (22) for yourself plus the application port(s): 9000 (HTTP) and, if you want TLS, 9443 — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
  3. Open http://<VM-IP>:9000/ in your browser and sign in as akadmin (see First login below).
  4. Create your first application and provider (OAuth2/OIDC, SAML or LDAP outpost), then put authentik behind HTTPS on your own domain.

First login / credentials

This image generates its admin credential on the VM at first boot — nothing is pre-set. SSH into the VM with the username + key you chose at deploy, then print the generated credential:

ssh <your-username>@<VM-IP>
sudo cat /opt/authentik/admin-password

Sign in as akadmin.

  1. Print the credential file: AUTHENTIK_BOOTSTRAP_PASSWORD is the password for the built-in `akadmin` user; AUTHENTIK_BOOTSTRAP_TOKEN is an API token — keep both secret.
  2. Open http://<VM-IP>:9000/ and sign in as akadmin.
  3. Change the password (Admin interface → Directory → Users → akadmin) and delete the file once stored securely.

Sign in as akadmin with AUTHENTIK_BOOTSTRAP_PASSWORD from the file. The file also holds a bootstrap API token; rotate it after first login.

Still stuck?

Email support@dcassociatesgroup.com (response within 1 business day) or send a message via the contact form. Include the offer name, VM size, region, and any log output — sudo journalctl -u <service> -n 100 usually tells the story.