* Cherry-pick #20338 to version-2026.2 (with conflicts)
This cherry-pick has conflicts that need manual resolution.
Original PR: #20338
Original commit: e056dbdadd
* Fix conflict
* Fix conflicts
---------
Co-authored-by: Dominic R <dominic@sdko.org>
Co-authored-by: dewi-tik <dewi@goauthentik.io>
website/docs: add okta source doc (#20296)
* Begin
* Add steps
* Apply suggestions
* Update website/docs/users-sources/sources/social-logins/okta/index.md
* Apply suggestion from @dominic-r
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@sdko.org>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@sdko.org>
* new first steps docs
* moved email config up to match Docker
* first draft
* moved sections and retitled some
* more content, tweaks
* dewis edits
* added Dewi ideas, more content, tweaks
* more content, green tips, other fixes
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* conflicts?
* dominic's eedits, more content
* another fine Dominic edit
* more dewi and dominic edits, links
* a bunch of things
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* tweaks
* thanks Teffen
* new styles, more content
* few more dominic edits, tweaks
* formatting fights on tips
* fix some alignments
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* changes from Jens
* work on bindings docs that was needed for the first steps docs
* links, more tweaks
* more edits, more TODOs done
* add mermaid diagram, more links, more content
* fix sidebar, tweaks
* tweak
* more link fixing
* fix heading size
* more dewi and dominic edits
* more dewi and dominic edits
* teffen enhancements yay and more bindings rearchitecting
* added note about stage bindings being the only type of binding that you can bind to yeehaw
---------
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
* clean up roles and permissions
This was purposefully not included in `2025.12` to split the changes up.
The main content of this patch is in the migrations. Everything else
follows more or less automatically.
* add breaking change warning to release notes
* add `ak_groups` --> `groups` deprecated proxy
* fixup! add `ak_groups` --> `groups` deprecated proxy
* fixup! add `ak_groups` --> `groups` deprecated proxy
* fixup! add `ak_groups` --> `groups` deprecated proxy
* add configuration warning to default notifications blueprint
* add rudimentary tests for User.ak_groups
* remove no longer used permissions
* clarify deprecation
Co-authored-by: Jens L. <jens@goauthentik.io>
Signed-off-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
* remove integration changes
These will be included in a separate PR once this is released.
---------
Signed-off-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
Co-authored-by: Jens L. <jens@goauthentik.io>
* Updates m2m doc, add mention to proxy provider about finding logs, updates filename/links/redirects
* Apply suggestions from code review
Co-authored-by: Jens L. <jens@goauthentik.io>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Prettier
* wip
* Removed section and changed some wording
* Add section
* Update website/docs/add-secure-apps/providers/proxy/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Jens L. <jens@goauthentik.io>
Co-authored-by: Dominic R <dominic@sdko.org>
* Merge changes
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Remove tags from Entra docs
* Minor improvements
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Apply suggestion from @tanberry
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Apply suggestions
* Update website/docs/users-sources/sources/social-logins/plex/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/google/workspace/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/google/cloud/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/mailcow/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/twitch/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/entra-id/scim/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/twitter/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Apply suggestions
* Update website/docs/users-sources/sources/social-logins/google/cloud/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/google/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/google/cloud/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
* tweaks
* a little more cleanup
* more headings
* merged with latest /main, tweak
* Update website/docs/add-secure-apps/providers/saml/create-saml-provider.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/create-saml-provider.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/create-saml-provider.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/create-saml-provider.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* WIP
* WIP
* WIP
* WIP
* WIP
* Codespell
* WIP
* Remove unneccessary section
* Fixed headers
* WIP
* WIP
* WIP
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Applied suggestions from Tana
* Fix link
* Update website/docs/add-secure-apps/providers/saml/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Improved opening paragraph
* Update website/docs/add-secure-apps/providers/saml/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/saml/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Improved sentence
* Update website/docs/add-secure-apps/providers/saml/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Tana M Berry <tana@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@sdko.org>
* Create directories, oauth, scim and overview docs
* Minor changes to overview
* Update sidebar and complete docs
* Update website/docs/users-sources/sources/social-logins/entra-id/scim/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/entra-id/scim/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Apply suggestions
* Fix table of contents
* Language change
* Language change
* Apply dominic's suggestions
* Update website/docs/users-sources/sources/social-logins/entra-id/oauth/index.mdx
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Co-authored-by: Dominic R <dominic@sdko.org>
* Update sidebar, update doc and files
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update sidebar, update doc and files
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/social-logins/entra-id/index.mdx
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Applied suggestions
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
* website/docs: add LDAP docs for forward deletion and `memberUid`
* reword LDAP docs
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
---------
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
* website: use "administrator" instead of "admin" for Admin interface
* website: some manual touches
---------
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
* Updates all source documents with note on how to add source to login page
* Updated the wording on the guide itself
* Updated wording on notes
* Fixes capitalization on header
* Fixed broken links in google docs
* website/docs: add LDAP 'Lookup using user attribute' docs
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
* Updated the doc to new template, removed incorrect screenshot, clarified instructions
* Change in group field explanation as per Marc's comment
* Added examples for filters and changed some language.
* Removed additional info link
* fixup
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
* Minor formatting changes
* Update website/docs/users-sources/sources/protocols/ldap/index.md
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
* Update website/docs/users-sources/sources/directory-sync/active-directory/index.md
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
* Update website/docs/users-sources/sources/directory-sync/active-directory/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Added more information to service account creation and LDAPS testing
* Added examples for fields based on issue #3801
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Co-authored-by: Dominic R <dominic@sdko.org>
* Beginning of work
* Added instructions for skipobject to each source
* removed saml
* removed oauth
* Updates
* Added provider SkipObject instructions
* combined examples into one
* modified kerberos python snippet as per suggestion from Marc
* Update website/docs/add-secure-apps/providers/property-mappings/index.md
Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/users-sources/sources/protocols/kerberos/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Clarified how to use the exception
* Update website/docs/add-secure-apps/providers/property-mappings/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Update website/docs/add-secure-apps/providers/property-mappings/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* fixed missing ) after gws
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* fixed missing . from /scim
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* fixing broken links
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
* Fixed links
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@sdko.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
authentik-automation[bot]
Connor Peshek
Tana M Berry
Teffen Ellis
Simonyi Gergő
Dewi Roberts
Tom Crasset
rain capsule
Borut Mrak
Anduin Xue
TMUniversal
Alexander Tereshkin
Patrick
Jens L.
Dominic R
dependabot[bot]
Lehlogonolo N. Masubelele
Marc 'risson' Schmitt
Marcelo Elizeche Landó