Softwr

Cybersecurity · head to head

authentik vs Trimble Unity Maintain

authentik logo

authentik

Cybersecurity

Open-source identity provider with flexible authentication flows

From
Free
Free plan
Yes
Full reviewWebsite
Trimble Unity Maintain logo

Trimble Unity Maintain

Government

GIS-centric public asset and work management, the product formerly sold as Cityworks

From
On request
Free plan
No
Full reviewWebsite

The short version

  • Only authentik has a free tier, so it costs nothing to try first.
  • Each has a real cost: authentik smaller project than Keycloak, with a correspondingly smaller community and fewer integration guides; Trimble Unity Maintain esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.
  • They diverge on capability: authentik covers Configurable flows, Trimble Unity Maintain covers Built on ArcGIS.
  • Prices and features above were last checked on 1 September 2026.

Where they differ

Only the attributes on which authentik and Trimble Unity Maintain actually diverge.

Attributes where authentik and Trimble Unity Maintain differ
AttributeauthentikTrimble Unity Maintain
Starting priceFreeOn request
Pricing modelOpen-source core with a paid enterprise tierquote
Free tierYesNo
PlatformsDocker, Kubernetes, Linux, Self-hostedWeb, iOS, Android, Windows
CategoryCybersecurityGovernment

Identical on both: user rating (Not yet rated).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in authentik

  • Configurable flows
  • Protocol support
  • Application proxy
  • Modern admin interface

Only in Trimble Unity Maintain

  • Built on ArcGIS
  • Service requests
  • Work order management
  • Permits and licensing
  • Mobile field access
  • Storeroom and inventory
  • Operational Insights
  • AgileAssets convergence

What people use each for

The jobs each tool is most often brought in to do.

authentik

  • Self-hosted SSO across internal services without commercial identity pricingnot Trimble Unity Maintain
  • Putting authentication in front of applications that have none, via the proxynot Trimble Unity Maintain
  • Teams who tried Keycloak and wanted something less heavynot Trimble Unity Maintain

Trimble Unity Maintain

  • A water utility wanting valve exercising and hydrant flushing recorded against the same GIS features the engineering team maintainsnot authentik
  • A city consolidating a citizen service request line, work orders and inspections into one location-based systemnot authentik
  • A state transportation department managing pavement and bridge assets with linear referencing rather than point assetsnot authentik
  • A public works department that has already licensed ArcGIS Enterprise and wants to avoid rekeying its asset inventorynot authentik

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

authentik

  • Smaller project than Keycloak, with a correspondingly smaller community and fewer integration guides
  • The flow model is flexible but conceptually unfamiliar, and simple setups can feel over-abstracted
  • Enterprise support and some governance features sit behind the paid tier
  • Self-hosted identity is still yours to secure, patch and keep available

Trimble Unity Maintain

  • Esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.
  • The product is mid-rename from Cityworks to Trimble Unity Maintain with transition timelines Trimble has not committed to publicly, leaving contracts, documentation and integrator experience split between two names.
  • CVE-2025-0994, a deserialisation flaw in Cityworks, was exploited in the wild and listed by CISA in February 2025, which makes on-premise deployments a patching obligation rather than a set-and-forget install.
  • Because assets live in the GIS, changing the asset model is a GIS division change, so maintenance teams cannot restructure their own hierarchy without another department in the loop.
  • It is built for North American public sector practice, and the permitting, funding source and reporting models do not map cleanly onto other countries or onto private industrial estates.

Pricing, plan by plan

authentik

Free
  • Open sourceFree
    • Full identity provider
    • All protocols
    • Community support

Trimble Unity Maintain

On request
  • Trimble Unity Maintain$undefined/year
    • Annual subscription sized by population served, asset volume and user count
    • Esri ArcGIS Enterprise or ArcGIS Online licensing required separately
    • Hosted and on-premise deployment priced differently

Which should you pick?

Choose authentik if

  • You need configurable flows.
  • You want to start without paying.
  • You work on Docker, Kubernetes, Linux, Self-hosted.
  • You also want protocol support.
authentik review

Choose Trimble Unity Maintain if

  • You need built on arcgis.
  • You work on Web, iOS, Android, Windows.
  • You also want service requests.
Trimble Unity Maintain review

Questions people ask

Is authentik or Trimble Unity Maintain better?
Neither clearly leads. authentik starts at Free and Trimble Unity Maintain at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, authentik or Trimble Unity Maintain?
authentik has a free tier; the other does not. Paid plans start at Free for authentik and On request for Trimble Unity Maintain.
Does authentik or Trimble Unity Maintain run on more platforms?
authentik runs on Docker, Kubernetes, Linux, Self-hosted. Trimble Unity Maintain runs on Web, iOS, Android, Windows.
Can I use authentik for free?
Yes. authentik has a free tier, so you can try it without paying. Trimble Unity Maintain starts at On request.
What is authentik best used for?
authentik is most often used for self-hosted sso across internal services without commercial identity pricing, putting authentication in front of applications that have none, via the proxy, teams who tried keycloak and wanted something less heavy. Of those, self-hosted sso across internal services without commercial identity pricing and putting authentication in front of applications that have none, via the proxy are not what Trimble Unity Maintain is typically brought in for.
What can authentik do that Trimble Unity Maintain cannot?
authentik covers Configurable flows, Protocol support, Application proxy, Modern admin interface. Trimble Unity Maintain covers Built on ArcGIS, Service requests, Work order management, Permits and licensing.

Answered from the vendors’ own pages

authentik: Is authentik free?

The open-source edition is free and complete for most use. An enterprise tier adds support and additional features.

Trimble Unity Maintain: Is Cityworks discontinued?

Not discontinued, renamed. It is becoming Trimble Unity Maintain, converging with AgileAssets, and Trimble has not published a final transition date.

authentik: authentik or Keycloak?

authentik is generally reported as easier to run and administer; Keycloak is more established with a larger community and Red Hat behind it.

Trimble Unity Maintain: Do I need Esri ArcGIS?

Yes. The product is built on ArcGIS and cannot be deployed without an Esri licence.

authentik: Can authentik protect apps with no login of their own?

Yes. Its application proxy places authentication in front of services that have no built-in authentication.

Trimble Unity Maintain: Was there a security incident?

Yes. CVE-2025-0994 in Cityworks was exploited in the wild and added to the CISA known exploited vulnerabilities catalogue in February 2025.

Trimble Unity Maintain: Can it handle roads and pavement as well as pipes?

Yes, through the AgileAssets lineage now inside the Unity Maintain family, which adds linear referencing for transportation assets.

Share

Related pages

More on authentik

More on Trimble Unity Maintain

Keep looking

Other head to heads