mirror of
https://github.com/goauthentik/authentik.git
synced 2026-06-17 19:09:11 +03:00
Chris
626e23b87a
fix(rbac): ensure migration 0056 runs before group field is removed Migration 0010 removes the `group` FK from the Role model, but migration 0056 (authentik_core) queries `group_id` on Role as part of a data migration to move guardian permissions to RBAC roles. When upgrading from 2025.x, Django's migration executor can schedule 0010 before 0056 because neither depends on the other — only 0056 depends on 0008. This causes a FieldError at runtime: Cannot resolve keyword 'group_id' into field. Adding 0056 as a dependency of 0010 enforces the correct ordering: the data migration that reads `group_id` must complete before the schema migration that removes it.
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
 |
 |
 |
 |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!
License
