AuthentikSSO: one login for shop and panel
Customers sign in through your identity provider – authentik, Keycloak, Zitadel, Pocket ID or any OIDC provider. More secure, simpler, centrally managed.
Features
Ready-made presets
authentik, Keycloak, Zitadel and Pocket ID out of the box, plus generic OIDC with discovery.
Single logout
Signing out of Paymenter also ends the session at the identity provider.
Pterodactyl and Pelican
Optionally create or link matching panel accounts on login, including a connection test.
Central security
Manage two-factor sign-in, password rules and lockouts in one place.
Privacy-aware debugging
Debug logs mask personal data automatically.
Alongside or exclusive
SSO button next to the normal login or as the only way in – new customers created automatically if you like.
Up and running in a few steps
-
1
Create a provider
Set up an OAuth2/OpenID provider in your identity provider.
-
2
Connect the extension
Enter discovery URL, client ID and secret.
-
3
Test
Sign in with a test account – done.
Frequently asked questions
Paymenter 1.5.8 or newer. Exact compatibility is listed in each version's changelog.
No. Every Holzmodem extension works without changes to the Paymenter core and without extra Composer packages, so Paymenter updates stay possible at any time.
Any provider that speaks OpenID Connect with discovery. authentik, Keycloak, Zitadel and Pocket ID have ready-made presets.
Yes: our guide “Single sign-on with authentik” walks you through the setup step by step.
Questions about AuthentikSSO?
Ask a question