Comment by Valodim

6 months ago

So what is the point of this, if the user still needs a master password?

Access control -- can make it easy to add/sync users in Authentik using one username

Creating, deleting, blocking accounts is the main one - you only do it once for a user and they get access to all your services. It also lets you do MFA and security checks on login (like on a new device) which can prevent break-ins even if your users use easily crackable passwords.

SSO handles authentication (proving who you are) while the master password is still needed for decryption (as the encryption key is derived from it).