Account types
authentik supports several account types that represent people and machine identities. The account type determines how an account is created, how it authenticates, and how it is used.
The available account types are:
- Internal users: typically workforce identities for business-to-business (B2B) use cases, such as employees and partners accessing workplace applications. Internal users can access the authentik application dashboard and the user settings menu.
- External users: typically customer identities for business-to-consumer (B2C) use cases, such as customers accessing your digital services. External users can not access the authentik application dashboard or the user settings menu.
- Agent accounts: non-human identities that act on behalf of a parent user.
- Service accounts: non-human identities created by an administrator for integrations and automation.
- Internal service accounts: non-human identities created and managed by authentik for internal components. They can not be created by administrators.
Choose an account type
Use the following table to choose an account type:
| Requirement | Account type |
|---|---|
| A user that needs access to the application dashboard | Internal user |
| A user that does not need access to the application dashboard | External user |
| An administrator needs a machine identity for an integration or automation | Service account |
| An integration needs to act on behalf of a specific user | Agent account |