Skip to main content

External users

External users are typically customer identities for business-to-consumer (B2C) use cases, such as customers accessing your digital services.

External users cannot access the application dashboard. They therefore do not have access to the settings menu. They can however change their password and perform other changes via direct links to the appropriate flow.

For an overview of all account types, see Account types.

For information on creating and managing external users, see Managing users.

Application access​

External users typically authenticate to a single default application. After successful authentication, authentik redirects them to the application configured for the authentication request or to the brand's default application.

Configure a default application for brands used by external users. Without a default application, an external user who signs in without requesting a specific application receives an access-denied page.

Access user settings​

External users cannot access the user settings menu through the application dashboard because they do not have access to the dashboard.

To allow an external user to change their password, enroll an MFA device, or perform other changes that are usually accessed via user settings, you must direct them to the appropriate flow.

When to use external users​

Use an external user account for:

  • Customers accessing your digital services in a business-to-consumer (B2C) deployment.
  • Users who need access to a single application.
  • Users who should not see the application dashboard or other available applications.

Use an internal user when someone needs access to the application dashboard to launch multiple applications or manage their user settings from the user interface.