Asas module

authentik for single sign-on

Alternative to Okta

One password and two-factor authentication for all systems; provision a user once across all apps with proper roles.

Available on request: We have run it in our lab; it has not run at a client yet.

Request it + Add to request All systems in IT operations and security

System facts

Alternative to
Okta, Microsoft Entra ID
Built on
authentik (MIT (open-core; enterprise parts licensed) license)
Hosting
We host it for you in Egypt: Link Datacenter in Egypt or Huawei Cloud, Cairo region
Language
Interface in Arabic
Sign-in
With your company's single sign-on
Ordering
As part of a bundle
Status
Available on request
Price
We send it to you after a short call

What it does for you

A unified identity gateway for your organization: employees sign in once with a single credential to access email, file storage, ERP systems, and internal applications, viewing only the tools authorized for their role. Provision an employee once and their accounts and permissions propagate across all systems in under 10 seconds; when someone leaves, deprovision them centrally in one place to instantly terminate access to everything.

It is the core identity foundation of Asas by FoundationCX: every module connects through it, and it can be deployed independently to federate your existing infrastructure.

Alternative to

If you are looking for an alternative to Okta, Auth0, or Microsoft Entra ID, this replaces:

  • Microsoft Entra ID (formerly Azure AD).
  • Okta and Auth0.
  • Managing separate usernames and passwords across disconnected software systems.

What you get

  • Single master credential across all enterprise business applications.
  • Customized "My Applications" user portal showing only apps authorized for that employee's role.
  • Single-point user provisioning: Adding an employee automatically provisions email, cloud storage, and ERP accounts.
  • Centralized instant deprovisioning that terminates active web sessions across all connected tools.
  • Multi-factor authentication (MFA): Authenticator apps (TOTP), FIDO2 Passkeys, and hardware security keys.
  • Self-service password resets reducing administrative helpdesk tickets.
  • Granular access policies: Password complexity rules and mandatory MFA enforcement for elevated roles.
  • Comprehensive audit logging capturing every login attempt and permission modification.
  • Broad standards support: Connects modern systems via OIDC, SAML, LDAP, and RADIUS, with forward-auth proxies for legacy web apps.

Built on authentik, an open-source identity provider and unified access gateway.

Arabic and hosting in Egypt

  • Arabic: The end-user application portal is fully localized in Arabic.
  • Hosting: We host it for you in Egypt, ensuring corporate employee identity databases remain under national sovereignty (infrastructure design).

From ready-made to built for you

  1. 01 As-is The authentik identity gateway pre-configured for Asas modules.
  2. 02 Configured for your workflow Organizational departments, role groupings, application visibility rules, and MFA policies.
  3. 03 Customized Connecting third-party business tools, whether open-source or commercial, that support standard identity protocols.
  4. 04 Built for you Integrating bespoke in-house software or proprietary client portals into the central authentication gateway.

Customization and building from scratch are part of our software and application development service.

Works with

Part of: Asas business suite , Egyptian office , Egyptian company

  • File storage and sharing

    Nextcloud Files

    Asas module

    Storage for company files, shared department folders, and granular permissions, with data kept in Egypt.

    Alternative to: Google Drive, Dropbox, OneDrive

    • Demo
    • Full Arabic
    • In Egypt
    Details + Add to request

  • Asas business suite

    Our product

    One suite in Arabic in Egypt: accounting, inventory, HR, CRM, email, files, documents, and meetings, with single sign-on.

    Alternative to: Google Workspace, Microsoft 365, Odoo

    • Demo
    • Full Arabic
    • In Egypt
    Details + Add to request

  • Shared document editing

    Collabora Online

    Asas module

    Real-time browser editing for Word, Excel, and PowerPoint files in Arabic, collaborating simultaneously.

    Alternative to: Google Docs, Microsoft 365 Office Online

    • Demo
    • Full Arabic
    • In Egypt
    Details + Add to request

  • Team chat

    Nextcloud Talk

    Asas module

    Team chats and channels replacing personal WhatsApp groups, with all messages stored on your company server in Egypt.

    Alternative to: Slack, Microsoft Teams chat, Manual work and spreadsheets

    • On request
    • Partial Arabic
    • In Egypt
    Details + Add to request

  • Video meetings

    Nextcloud Talk

    Asas module

    Video and audio meeting rooms with screen sharing and recording, with no time limits, on your server.

    Alternative to: Zoom, Microsoft Teams, Google Meet

    • On request
    • Partial Arabic
    • In Egypt
    Details + Add to request

  • Shared calendar and contacts

    Nextcloud Calendar

    Asas module

    A calendar for each employee, shared team calendars, meeting booking, and a contact directory syncing with phones.

    Alternative to: Google Calendar, Outlook Calendar

    • On request
    • Partial Arabic
    • In Egypt
    Details + Add to request

Who it is for

  • Small and medium enterprises where staff juggle multiple credentials across disparate systems.
  • Any company experiencing staff turnover seeking guaranteed instant access revocation when employees depart.

Frequently asked questions

Is it an alternative to Okta or Microsoft Entra ID?

Yes, for core enterprise identity needs: federated authentication using OIDC, SAML, and LDAP, multi-factor authentication with Passkeys, access policies, and audit logs, without per-user licensing fees.

What is Single Sign-On (SSO)?

A mechanism allowing an employee to authenticate once with a single password to gain access to all authorized enterprise systems without entering credentials into each application separately.

What happens when an employee departs the company?

You deactivate their account in the identity portal alone, which terminates access across email, file storage, and ERP tools while revoking open sessions.

Can we integrate systems outside the Asas ecosystem?

Yes, any application supporting standard OIDC, SAML, or LDAP protocols—including modern project management and CRM tools.

Does it support two-factor authentication?

Yes, using authenticator apps or Passkeys, and MFA can be enforced as mandatory for sensitive roles.

Our limits

  • The software is from its developer (authentik); our role is hosting, configuration, integration, operation, and support.

Single sign-on: Request it

Request it info@foundationcx.com