website/docs/releases/2023/v2023.10.md
Requests with missing trailing slash are no longer redirected
In previous versions, requests to a path like /api/v3/core/users would be redirected to [...]/users/. This redirect would cause mutating requests (such as POST, PUT and PATCH) to fail as they would get redirected to [...]/users/. The redirect has been disabled, which will not have an impact on a correctly configured setup.
It is only possible to upgrade to 2023.10 from 2023.8. This is due to a bug in the migrations which will be fixed in a future release (#7326).
Warning: The first 2024.x version of this chart will see a rework that will include breaking changes. The breaking changes will be noted in the next Release notes.
RBAC (preview)
With this release we're introducing the ability to finely configure permissions within authentik. These permissions can be used to delegate different tasks, such as user management, application creation and more to users without granting them full superuser permissions. With this system, a least-privilege system can also be implemented much more easily. See more info here
LDAP Provider improvements
The LDAP Provider now has an expanded schema, increasing the compatibility with clients that use the LDAP schema to parse data and .NET applications on Windows.
Improved Proxy provider logout
The proxy provider will now terminate all sessions when a user logs out of authentik or their session expires.
LDAP Source structure mirroring
The LDAP Source has a new default property mapping called authentik default LDAP Mapping: DN to User Path which will map the LDAP users' DN to the user path in authentik, keeping the same structure as the directory the source syncs from.
OAuth Source OIDC auto-refresh
OAuth sources that have a OIDC Well-known URL or OIDC JWKS URL set will periodically be updated to use the correct configuration based on the configured URLs.
This release does not introduce any new requirements.
To upgrade, download the new docker-compose file and update the Docker stack with the new version, using these commands:
wget -O docker-compose.yml https://goauthentik.io/version/2023.10/docker-compose.yml
docker-compose up -d
The -O flag retains the downloaded file's name, overwriting any existing local file with the same name.
Upgrade the Helm Chart to the new version, using the following commands:
helm repo update
helm upgrade authentik authentik/authentik -f values.yaml --version ^2023.10
<pre> for order field on bound elements (#7031)PUT /core/transactional/applications/GET /rbac/permissions/GET /rbac/permissions/{id}/GET /rbac/permissions/assigned_by_roles/POST /rbac/permissions/assigned_by_roles/{uuid}/assign/PATCH /rbac/permissions/assigned_by_roles/{uuid}/unassign/GET /rbac/permissions/assigned_by_users/POST /rbac/permissions/assigned_by_users/{id}/assign/PATCH /rbac/permissions/assigned_by_users/{id}/unassign/GET /rbac/permissions/roles/GET /rbac/permissions/users/GET /rbac/roles/POST /rbac/roles/GET /rbac/roles/{uuid}/PUT /rbac/roles/{uuid}/DELETE /rbac/roles/{uuid}/PATCH /rbac/roles/{uuid}/GET /rbac/roles/{uuid}/used_by/GET /authenticators/admin/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
PUT /authenticators/admin/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
DELETE /authenticators/admin/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
PATCH /authenticators/admin/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
GET /authenticators/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
PUT /authenticators/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
DELETE /authenticators/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
PATCH /authenticators/totp/{id}/Changed: id in path
A unique integer value identifying this TOTP Device.
POST /core/groups/{group_uuid}/add_user/Changed: group_uuid in path
A UUID string identifying this Group.
POST /core/groups/{group_uuid}/remove_user/Changed: group_uuid in path
A UUID string identifying this Group.
GET /enterprise/license/{license_uuid}/Changed: license_uuid in path
A UUID string identifying this License.
PUT /enterprise/license/{license_uuid}/Changed: license_uuid in path
A UUID string identifying this License.
DELETE /enterprise/license/{license_uuid}/Changed: license_uuid in path
A UUID string identifying this License.
PATCH /enterprise/license/{license_uuid}/Changed: license_uuid in path
A UUID string identifying this License.
GET /outposts/instances/{uuid}/health/Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/radius/{id}/Changed response : 200 OK
application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
GET /policies/event_matcher/{policy_uuid}/Changed response : 200 OK
application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licensePUT /policies/event_matcher/{policy_uuid}/Changed content type : application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licenseChanged response : 200 OK
application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licensePATCH /policies/event_matcher/{policy_uuid}/Changed content type : application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licenseChanged response : 200 OK
application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licenseGET /providers/radius/{id}/Changed response : 200 OK
application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
PUT /providers/radius/{id}/Changed content type : application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
Changed response : 200 OK
application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
PATCH /providers/radius/{id}/Changed content type : application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
Changed response : 200 OK
application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
GET /sources/oauth/source_types/Changed response : 200 OK
Changed content type : application/json
Changed items (object): > Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_urlAdded property oidc_well_known_url (string)
Added property oidc_jwks_url (string)
DELETE /authenticators/admin/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/admin/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
PUT /authenticators/admin/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
PATCH /authenticators/admin/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
DELETE /authenticators/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
PUT /authenticators/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
PATCH /authenticators/static/{id}/Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/static/{id}/used_by/Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/totp/{id}/used_by/Changed: id in path
A unique integer value identifying this TOTP Device.
DELETE /core/groups/{group_uuid}/Changed: group_uuid in path
A UUID string identifying this Group.
GET /core/groups/{group_uuid}/Changed: group_uuid in path
A UUID string identifying this Group.
Changed response : 200 OK
Changed content type : application/json
New required properties:
roles_objAdded property roles (array)
Items (string):
Added property roles_obj (array)
Items (object): > Role serializer
Property pk (string)
Property name (string)
PUT /core/groups/{group_uuid}/Changed: group_uuid in path
A UUID string identifying this Group.
Changed content type : application/json
roles (array)Changed response : 200 OK
Changed content type : application/json
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
PATCH /core/groups/{group_uuid}/Changed: group_uuid in path
A UUID string identifying this Group.
Changed content type : application/json
roles (array)Changed response : 200 OK
Changed content type : application/json
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
GET /core/groups/{group_uuid}/used_by/Changed: group_uuid in path
A UUID string identifying this Group.
GET /core/tokens/{identifier}/Changed response : 200 OK
application/json
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)PUT /core/tokens/{identifier}/Changed response : 200 OK
application/json
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)PATCH /core/tokens/{identifier}/Changed response : 200 OK
application/json
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)GET /core/users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
uuiduuid (string)PUT /core/users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
uuiduuid (string)PATCH /core/users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
uuiduuid (string)GET /enterprise/license/{license_uuid}/used_by/Changed: license_uuid in path
A UUID string identifying this License.
GET /events/rules/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
PUT /events/rules/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
PATCH /events/rules/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
DELETE /outposts/instances/{uuid}/Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/instances/{uuid}/Changed: uuid in path
A UUID string identifying this Outpost.
PUT /outposts/instances/{uuid}/Changed: uuid in path
A UUID string identifying this Outpost.
PATCH /outposts/instances/{uuid}/Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/instances/{uuid}/used_by/Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/radius/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > RadiusProvider Serializer
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
GET /policies/bindings/{policy_binding_uuid}/Changed response : 200 OK
application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)PUT /policies/bindings/{policy_binding_uuid}/Changed content type : application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed response : 200 OK
application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)PATCH /policies/bindings/{policy_binding_uuid}/Changed content type : application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed response : 200 OK
application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)POST /policies/event_matcher/Changed content type : application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licenseChanged response : 201 Created
application/json
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licenseGET /policies/event_matcher/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Event Matcher Policy Serializer
Changed property app (string)
authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticatorChanged property model (string)
authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.licensePOST /providers/radius/Changed content type : application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
Changed response : 201 Created
application/json
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
GET /providers/radius/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > RadiusProvider Serializer
mfa_support (boolean)
When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
GET /providers/saml/{id}/Changed response : 200 OK
application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
PUT /providers/saml/{id}/Changed content type : application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
Changed response : 200 OK
application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
PATCH /providers/saml/{id}/Changed content type : application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
Changed response : 200 OK
application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
GET /sources/oauth/{slug}/Changed response : 200 OK
application/json
Changed property type (object)
Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_urlAdded property oidc_well_known_url (string)
Added property oidc_jwks_url (string)
PUT /sources/oauth/{slug}/Changed response : 200 OK
application/json
Changed property type (object)
Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_urlAdded property oidc_well_known_url (string)
Added property oidc_jwks_url (string)
PATCH /sources/oauth/{slug}/Changed response : 200 OK
application/json
Changed property type (object)
Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_urlAdded property oidc_well_known_url (string)
Added property oidc_jwks_url (string)
POST /core/groups/Changed content type : application/json
roles (array)Changed response : 201 Created
Changed content type : application/json
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
GET /core/groups/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
POST /core/tokens/Changed response : 201 Created
application/json
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)GET /core/tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)GET /core/user_consent/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)POST /core/users/Changed response : 201 Created
Changed content type : application/json
New required properties:
uuiduuid (string)GET /core/users/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > User Serializer
New required properties:
uuiduuid (string)GET /core/users/me/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer for information a user can retrieve about themselves
New required properties:
system_permissionsAdded property system_permissions (array)
Get all system permissions assigned to the user
Items (string):
POST /events/rules/Changed response : 201 Created
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
GET /events/rules/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > NotificationRule Serializer
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
GET /oauth2/access_tokens/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)GET /oauth2/authorization_codes/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)GET /oauth2/refresh_tokens/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)POST /policies/bindings/Changed content type : application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed response : 201 Created
application/json
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)GET /policies/bindings/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > PolicyBinding Serializer
Added property failure_result (boolean)
Result if the Policy execution fails.
Changed property timeout (integer)
Timeout after which Policy execution is terminated.
Changed property group_obj (object)
Group Serializer
New required properties:
roles_objAdded property roles (array)
Added property roles_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
uuiduuid (string)POST /providers/saml/Changed content type : application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
Changed response : 201 Created
application/json
default_relay_state (string)
Default relay_state value for IDP-initiated logins
GET /providers/saml/Added: default_relay_state in query
Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > SAMLProvider Serializer
default_relay_state (string)
Default relay_state value for IDP-initiated logins
POST /sources/oauth/Changed response : 201 Created
application/json
Changed property type (object)
Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_urlAdded property oidc_well_known_url (string)
Added property oidc_jwks_url (string)
GET /sources/oauth/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > OAuth Source Serializer
Changed property type (object)
Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_urlAdded property oidc_well_known_url (string)
Added property oidc_jwks_url (string)
GET /stages/authenticator/sms/{stage_uuid}/Changed response : 200 OK
application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
PUT /stages/authenticator/sms/{stage_uuid}/Changed content type : application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
Changed response : 200 OK
application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
PATCH /stages/authenticator/sms/{stage_uuid}/Changed content type : application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
Changed response : 200 OK
application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
GET /stages/deny/{stage_uuid}/Changed response : 200 OK
application/json
deny_message (string)PUT /stages/deny/{stage_uuid}/Changed content type : application/json
deny_message (string)Changed response : 200 OK
application/json
deny_message (string)PATCH /stages/deny/{stage_uuid}/Changed content type : application/json
deny_message (string)Changed response : 200 OK
application/json
deny_message (string)GET /core/user_consent/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > UserConsent Serializer
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)GET /oauth2/access_tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and RefreshToken
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)GET /oauth2/authorization_codes/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and ExpiringBaseGrant
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)GET /oauth2/refresh_tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and RefreshToken
Changed property user (object)
User Serializer
New required properties:
uuiduuid (string)POST /stages/authenticator/sms/Changed content type : application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
Changed response : 201 Created
application/json
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
GET /stages/authenticator/sms/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > AuthenticatorSMSStage Serializer
verify_only (boolean)
When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
POST /stages/deny/Changed content type : application/json
deny_message (string)Changed response : 201 Created
application/json
deny_message (string)GET /stages/deny/Added: deny_message in query
Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > DenyStage Serializer
deny_message (string)