Softwr

Cybersecurity · head to head

authentik vs Bidnet Direct

authentik logo

authentik

Cybersecurity

Open-source identity provider with flexible authentication flows

From
Free
Free plan
Yes
Full reviewWebsite
Bidnet Direct logo

Bidnet Direct

Government

Regional bid notification network where agencies post free and suppliers pay for alerts

From
On request
Free plan
No
Full reviewWebsite

The short version

  • Only authentik has a free tier, so it costs nothing to try first.
  • Each has a real cost: authentik smaller project than Keycloak, with a correspondingly smaller community and fewer integration guides; Bidnet Direct suppliers pay for aggregation, not access: the same solicitations are generally published free on individual agency and state portals, so the subscription is only worth it if searching manually costs more than the fee.
  • They diverge on capability: authentik covers Configurable flows, Bidnet Direct covers Regional purchasing groups.
  • Prices and features above were last checked on 31 August 2026.

Where they differ

Only the attributes on which authentik and Bidnet Direct actually diverge.

Attributes where authentik and Bidnet Direct differ
AttributeauthentikBidnet Direct
Starting priceFreeOn request
Pricing modelOpen-source core with a paid enterprise tierquote
Free tierYesNo
PlatformsDocker, Kubernetes, Linux, Self-hostedWeb
CategoryCybersecurityGovernment

Identical on both: user rating (Not yet rated).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in authentik

  • Configurable flows
  • Protocol support
  • Application proxy
  • Modern admin interface

Only in Bidnet Direct

  • Regional purchasing groups
  • Free agency publication
  • Supplier notification
  • Vendor registration
  • Bid document distribution
  • Award postings
  • Supplier diversity reporting

What people use each for

The jobs each tool is most often brought in to do.

authentik

  • Self-hosted SSO across internal services without commercial identity pricingnot Bidnet Direct
  • Putting authentication in front of applications that have none, via the proxynot Bidnet Direct
  • Teams who tried Keycloak and wanted something less heavynot Bidnet Direct

Bidnet Direct

  • A small municipal purchasing department that needs competitive responses without building or paying for its own bid portalnot authentik
  • A contractor that wants notification of every relevant solicitation across a state rather than checking dozens of agency websitesnot authentik
  • A state cooperative wanting a single regional portal so suppliers register once for many agenciesnot authentik
  • An agency required to demonstrate outreach to certified diverse suppliers on every solicitationnot authentik

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

authentik

  • Smaller project than Keycloak, with a correspondingly smaller community and fewer integration guides
  • The flow model is flexible but conceptually unfamiliar, and simple setups can feel over-abstracted
  • Enterprise support and some governance features sit behind the paid tier
  • Self-hosted identity is still yours to secure, patch and keep available

Bidnet Direct

  • Suppliers pay for aggregation, not access: the same solicitations are generally published free on individual agency and state portals, so the subscription is only worth it if searching manually costs more than the fee.
  • Supplier pricing is not published and varies by geography and category breadth, which makes it difficult for a small contractor to judge value before a sales conversation.
  • Category matching produces a high volume of irrelevant alerts for suppliers whose work does not map neatly onto procurement commodity codes, so the notification stream needs constant tuning.
  • Bidnet is now one brand inside SOVRA, which divested six business units in 2025 under new private equity ownership, so portfolio priorities can change independently of any individual product's customers.
  • For agencies it is a publication and notification network rather than a sourcing system: bid evaluation, scoring and contract management need a separate tool.

Pricing, plan by plan

authentik

Free
  • Open sourceFree
    • Full identity provider
    • All protocols
    • Community support

Bidnet Direct

On request
  • Supplier subscription$undefined/year
    • Matched opportunity notifications
    • Access to regional purchasing group solicitations
    • Priced by geographic and category coverage
  • Agency participation$undefined/year
    • Solicitation publication and vendor registry
    • Free or low cost to participating public agencies
    • Supplier diversity reporting

Which should you pick?

Choose authentik if

  • You need configurable flows.
  • You want to start without paying.
  • You work on Docker, Kubernetes, Linux, Self-hosted.
  • You also want protocol support.
authentik review

Choose Bidnet Direct if

  • You need regional purchasing groups.
  • You also want free agency publication.
Bidnet Direct review

Questions people ask

Is authentik or Bidnet Direct better?
Neither clearly leads. authentik starts at Free and Bidnet Direct at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, authentik or Bidnet Direct?
authentik has a free tier; the other does not. Paid plans start at Free for authentik and On request for Bidnet Direct.
Does authentik or Bidnet Direct run on more platforms?
authentik runs on Docker, Kubernetes, Linux, Self-hosted. Bidnet Direct runs on Web.
Can I use authentik for free?
Yes. authentik has a free tier, so you can try it without paying. Bidnet Direct starts at On request.
What is authentik best used for?
authentik is most often used for self-hosted sso across internal services without commercial identity pricing, putting authentication in front of applications that have none, via the proxy, teams who tried keycloak and wanted something less heavy. Of those, self-hosted sso across internal services without commercial identity pricing and putting authentication in front of applications that have none, via the proxy are not what Bidnet Direct is typically brought in for.
What can authentik do that Bidnet Direct cannot?
authentik covers Configurable flows, Protocol support, Application proxy, Modern admin interface. Bidnet Direct covers Regional purchasing groups, Free agency publication, Supplier notification, Vendor registration.

Answered from the vendors’ own pages

authentik: Is authentik free?

The open-source edition is free and complete for most use. An enterprise tier adds support and additional features.

Bidnet Direct: Do government agencies pay?

Generally not, or very little. The network is funded by supplier subscriptions, which is why agencies get an existing supplier pool without paying for it.

authentik: authentik or Keycloak?

authentik is generally reported as easier to run and administer; Keycloak is more established with a larger community and Red Hat behind it.

Bidnet Direct: Is it worth it for a supplier?

Only if aggregation saves you more than it costs. The solicitations are public and available free elsewhere; you are buying alerting and search across many agencies at once.

authentik: Can authentik protect apps with no login of their own?

Yes. Its application proxy places authentication in front of services that have no built-in authentication.

Bidnet Direct: Who owns it now?

SOVRA, the rebranded procurement business of mdf commerce, which was acquired by KKR. Bidnet Direct remains a named product within that portfolio.

Bidnet Direct: Does it evaluate bids?

No. It publishes and distributes. Scoring, evaluation and contract management require a sourcing platform.

Share

Related pages

More on authentik

More on Bidnet Direct

Keep looking

Other head to heads