website/docs/releases/2024/v2024.10.md
We have no breaking changes this release!
Chrome Device Trust :ak-enterprise :ak-preview
This is a new stage for Enterprise clients that verifies the user through the Chrome Verified Access API. This stage only works with Google Chrome. You'll need to bring your own Verified Access API instance via Google Cloud.
JWE support for OAuth
You can now configure JSON Web Encryption with the OAuth 2.0 Provider, which will encrypt all the tokens created by authentik, using the configured encryption key.
Captcha on identification stage
We've added an optional Captcha stage baked into an Identification stage to run in the background while the user inputs their information. Using this will hopefully result in lower total time per flow for the end user.
Invalidation flows for providers
The sign-out experience when the session in an application ends can be configured now. Previously where this was always a static page, any flow can be used now. This can be used for additional validation, or redirecting the user to a custom URL.
Autoselect 2FA device
Users who configure multiple 2FA devices will now land on their last used device's prompt, skipping the device picker. This should result in lower total average time per flow for the end user.
New structure for authentik's technical documentation
We've restructured the documentation in authentik to be more task-based, with sections, titles, and headings that follow the workflow of installing, configuring, and using the product. Previously, our docs were organized by components. This new focus on tasks increases findability within the Table of Contents, and provide a high-level guide of the typical workflows with authentik.
This release does not introduce any new requirements. You can follow the upgrade instructions below; for more detailed information about upgrading authentik, refer to our Upgrade documentation.
:::warning When you upgrade, be aware that the version of the authentik instance and of any outposts must be the same. We recommended that you always upgrade any outposts at the same time you upgrade your authentik instance. :::
To upgrade, download the new docker-compose file and update the Docker stack with the new version, using these commands:
wget -O docker-compose.yml https://goauthentik.io/version/2024.10/docker-compose.yml
docker compose up -d
The -O flag retains the downloaded file's name, overwriting any existing local file with the same name.
Upgrade the Helm Chart to the new version, using the following commands:
helm repo update
helm upgrade authentik authentik/authentik -f values.yaml --version ^2024.10
None check to a device's extra_description (cherry-pick #11904) (#11906)/media (cherry-pick #12092) (#12108)GET /admin/version/history/GET /admin/version/history/{id}/GET /authenticators/admin/endpoint/POST /authenticators/admin/endpoint/GET /authenticators/admin/endpoint/{uuid}/PUT /authenticators/admin/endpoint/{uuid}/DELETE /authenticators/admin/endpoint/{uuid}/PATCH /authenticators/admin/endpoint/{uuid}/GET /authenticators/endpoint/GET /authenticators/endpoint/{uuid}/GET /authenticators/endpoint/{uuid}/used_by/GET /propertymappings/source/kerberos/POST /propertymappings/source/kerberos/GET /propertymappings/source/kerberos/{pm_uuid}/PUT /propertymappings/source/kerberos/{pm_uuid}/DELETE /propertymappings/source/kerberos/{pm_uuid}/PATCH /propertymappings/source/kerberos/{pm_uuid}/GET /propertymappings/source/kerberos/{pm_uuid}/used_by/GET /sources/group_connections/kerberos/GET /sources/group_connections/kerberos/{id}/PUT /sources/group_connections/kerberos/{id}/DELETE /sources/group_connections/kerberos/{id}/PATCH /sources/group_connections/kerberos/{id}/GET /sources/group_connections/kerberos/{id}/used_by/GET /sources/kerberos/POST /sources/kerberos/GET /sources/kerberos/{slug}/PUT /sources/kerberos/{slug}/DELETE /sources/kerberos/{slug}/PATCH /sources/kerberos/{slug}/GET /sources/kerberos/{slug}/sync/status/GET /sources/kerberos/{slug}/used_by/GET /sources/user_connections/kerberos/POST /sources/user_connections/kerberos/GET /sources/user_connections/kerberos/{id}/PUT /sources/user_connections/kerberos/{id}/DELETE /sources/user_connections/kerberos/{id}/PATCH /sources/user_connections/kerberos/{id}/GET /sources/user_connections/kerberos/{id}/used_by/GET /stages/authenticator/endpoint_gdtc/POST /stages/authenticator/endpoint_gdtc/GET /stages/authenticator/endpoint_gdtc/{stage_uuid}/PUT /stages/authenticator/endpoint_gdtc/{stage_uuid}/DELETE /stages/authenticator/endpoint_gdtc/{stage_uuid}/PATCH /stages/authenticator/endpoint_gdtc/{stage_uuid}/GET /stages/authenticator/endpoint_gdtc/{stage_uuid}/used_by/GET /authenticators/admin/all/Changed response : 200 OK
Changed content type : application/json
Changed items (object): > Serializer for Duo authenticator devices
New required properties:
extra_descriptionAdded property extra_description (string)
Get extra description
Changed property pk (integer -> string)
GET /authenticators/all/Changed response : 200 OK
Changed content type : application/json
Changed items (object): > Serializer for Duo authenticator devices
New required properties:
extra_descriptionAdded property extra_description (string)
Get extra description
Changed property pk (integer -> string)
GET /policies/event_matcher/{policy_uuid}/Changed response : 200 OK
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstagePUT /policies/event_matcher/{policy_uuid}/Changed content type : application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageChanged response : 200 OK
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstagePATCH /policies/event_matcher/{policy_uuid}/Changed content type : application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageChanged response : 200 OK
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageGET /providers/all/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/oauth2/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
PUT /providers/oauth2/{id}/Changed content type : application/json
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
PATCH /providers/oauth2/{id}/Changed content type : application/json
Added property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
GET /providers/proxy/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /providers/proxy/{id}/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /providers/proxy/{id}/Changed content type : application/json
invalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/rac/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /providers/rac/{id}/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /providers/rac/{id}/Changed content type : application/json
invalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/radius/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /providers/radius/{id}/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /providers/radius/{id}/Changed content type : application/json
invalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/saml/import_metadata/Changed content type : multipart/form-data
New required properties:
invalidation_flowinvalidation_flow (string)GET /providers/scim/{id}/Changed response : 200 OK
application/json
verify_certificates (boolean)PUT /providers/scim/{id}/Changed content type : application/json
verify_certificates (boolean)Changed response : 200 OK
application/json
verify_certificates (boolean)PATCH /providers/scim/{id}/Changed content type : application/json
verify_certificates (boolean)Changed response : 200 OK
application/json
verify_certificates (boolean)GET /core/applications/{slug}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /core/applications/{slug}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /core/applications/{slug}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /outposts/instances/{uuid}/Changed response : 200 OK
application/json
Changed property providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /outposts/instances/{uuid}/Changed response : 200 OK
application/json
Changed property providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /outposts/instances/{uuid}/Changed response : 200 OK
application/json
Changed property providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /policies/event_matcher/Changed content type : application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageChanged response : 201 Created
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageGET /policies/event_matcher/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Event Matcher Policy Serializer
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.sources.kerberosauthentik.enterprise.stages.authenticator_endpoint_gdtcChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageGET /providers/all/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/ldap/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /providers/ldap/{id}/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /providers/ldap/{id}/Changed content type : application/json
invalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/oauth2/Changed content type : application/json
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
Changed response : 201 Created
Changed content type : application/json
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
GET /providers/oauth2/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
POST /providers/proxy/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 201 Created
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/proxy/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > ProxyProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/rac/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 201 Created
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/rac/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/radius/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 201 Created
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/radius/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > RadiusProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/saml/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /providers/saml/{id}/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /providers/saml/{id}/Changed content type : application/json
invalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/scim/Changed content type : application/json
verify_certificates (boolean)Changed response : 201 Created
application/json
verify_certificates (boolean)GET /providers/scim/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > SCIMProvider Serializer
verify_certificates (boolean)GET /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /rbac/permissions/assigned_by_roles/{uuid}/assign/Changed content type : application/json
Changed property model (string)
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstagePATCH /rbac/permissions/assigned_by_roles/{uuid}/unassign/Changed content type : application/json
Changed property model (string)
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstagePOST /rbac/permissions/assigned_by_users/{id}/assign/Changed content type : application/json
Changed property model (string)
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstagePATCH /rbac/permissions/assigned_by_users/{id}/unassign/Changed content type : application/json
Changed property model (string)
Added enum values:
authentik_sources_kerberos.kerberossourceauthentik_sources_kerberos.kerberossourcepropertymappingauthentik_sources_kerberos.userkerberossourceconnectionauthentik_sources_kerberos.groupkerberossourceconnectionauthentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstageGET /sources/saml/{slug}/Changed response : 200 OK
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
PUT /sources/saml/{slug}/Changed content type : application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
Changed response : 200 OK
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
PATCH /sources/saml/{slug}/Changed content type : application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
Changed response : 200 OK
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
POST /core/applications/Changed response : 201 Created
application/json
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /core/applications/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Application Serializer
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /core/user_consent/{id}/Changed response : 200 OK
application/json
Changed property application (object)
Application Serializer
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /oauth2/access_tokens/{id}/Changed response : 200 OK
application/json
Changed property provider (object)
OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
GET /oauth2/authorization_codes/{id}/Changed response : 200 OK
application/json
Changed property provider (object)
OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
GET /oauth2/refresh_tokens/{id}/Changed response : 200 OK
application/json
Changed property provider (object)
OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
POST /outposts/instances/Changed response : 201 Created
application/json
Changed property providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /outposts/instances/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Outpost Serializer
Changed property providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /outposts/ldap/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > LDAPProvider Serializer
New required properties:
unbind_flow_slugunbind_flow_slug (string)
Get slug for unbind flow, defaulting to brand's default flow.
POST /providers/ldap/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 201 Created
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/ldap/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > LDAPProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/saml/Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 201 Created
Changed content type : application/json
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/saml/Added: invalidation_flow in query
Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > SAMLProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rac/connection_tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > ConnectionToken Serializer
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /rac/endpoints/Changed response : 201 Created
application/json
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rac/endpoints/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rbac/permissions/assigned_by_roles/Changed: model in query
GET /rbac/permissions/assigned_by_users/Changed: model in query
POST /sources/saml/Changed content type : application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
Changed response : 201 Created
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
GET /sources/saml/Changed: name_id_policy in query
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > SAMLSource Serializer
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName
Removed enum value:
urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName
GET /stages/identification/{stage_uuid}/Changed response : 200 OK
application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
PUT /stages/identification/{stage_uuid}/Changed content type : application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
Changed response : 200 OK
application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
PATCH /stages/identification/{stage_uuid}/Changed content type : application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
Changed response : 200 OK
application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
GET /stages/password/{stage_uuid}/Changed response : 200 OK
application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendPUT /stages/password/{stage_uuid}/Changed content type : application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendChanged response : 200 OK
application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendPATCH /stages/password/{stage_uuid}/Changed content type : application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendChanged response : 200 OK
application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendPUT /core/transactional/applications/Changed content type : application/json
Changed property provider (object)
Updated authentik_providers_oauth2.oauth2provider provider_model:
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
Updated authentik_providers_radius.radiusprovider provider_model:
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Updated authentik_providers_scim.scimprovider provider_model:
verify_certificates (boolean)Updated authentik_providers_proxy.proxyprovider provider_model:
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Updated authentik_providers_rac.racprovider provider_model:
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Updated authentik_providers_saml.samlprovider provider_model:
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Updated authentik_providers_ldap.ldapprovider provider_model:
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /core/user_consent/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > UserConsent Serializer
Changed property application (object)
Application Serializer
Changed property provider_obj (object)
Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property backchannel_providers_obj (array)
Changed items (object): > Provider Serializer
New required properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /flows/executor/{flow_slug}/Changed response : 200 OK
Changed content type : application/json
Added 'ak-stage-session-end' component:
Property flow_info (object)
Contextual flow information for a challenge
Property title (string)
Property background (string)
Property cancel_url (string)
Property layout (string)
Enum values:
stackedcontent_leftcontent_rightsidebar_leftsidebar_rightProperty component (string)
Property response_errors (object)
Property pending_user (string)
Property pending_user_avatar (string)
Property application_name (string)
Property application_launch_url (string)
Property invalidation_flow_url (string)
Property brand_name (string)
Added 'xak-flow-frame' component:
Property flow_info (object)
Contextual flow information for a challenge
Property component (string)
Property response_errors (object)
Property url (string)
Property loading_overlay (boolean)
Property loading_text (string)
Updated ak-stage-authenticator-validate component:
Changed property device_challenges (array)
Changed items (object): > Single device challenge
New required properties:
last_usedlast_used (string)Updated ak-stage-identification component:
Added property captcha_stage (object)
Site public key
Property flow_info (object)
Contextual flow information for a challenge
Property component (string)
Property response_errors (object)
Property pending_user (string)
Property pending_user_avatar (string)
Property site_key (string)
Property js_url (string)
POST /flows/executor/{flow_slug}/Changed content type : application/json
Added 'xak-flow-frame' component:
component (string)Updated ak-stage-identification component:
captcha_token (string)Updated ak-stage-authenticator-validate component:
Changed property selected_challenge (object)
Single device challenge
New required properties:
last_usedlast_used (string)Changed response : 200 OK
Changed content type : application/json
Added 'ak-stage-session-end' component:
Added 'xak-flow-frame' component:
Updated ak-stage-authenticator-validate component:
Changed property device_challenges (array)
Changed items (object): > Single device challenge
New required properties:
last_usedlast_used (string)Updated ak-stage-identification component:
captcha_stage (object)
Site public key
GET /oauth2/access_tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and RefreshToken
Changed property provider (object)
OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
GET /oauth2/authorization_codes/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and ExpiringBaseGrant
Changed property provider (object)
OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
GET /oauth2/refresh_tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and RefreshToken
Changed property provider (object)
OAuth2Provider Serializer
New required properties:
invalidation_flowAdded property invalidation_flow (string)
Flow used ending the session from a provider.
Added property encryption_key (string)
Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
Changed property signing_key (string)
Key used to sign the tokens.
POST /stages/identification/Changed content type : application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
Changed response : 201 Created
application/json
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
GET /stages/identification/Added: captcha_stage in query
Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > IdentificationStage Serializer
captcha_stage (string)
When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.
POST /stages/password/Changed content type : application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendChanged response : 201 Created
application/json
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendGET /stages/password/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > PasswordStage Serializer
Changed property backends (array)
Selection of backends to test the password against.
Changed items (string):
Added enum value:
authentik.sources.kerberos.auth.KerberosBackendGET /providers/rac/{id}/Changed response : 200 OK
Changed content type : application/json
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /providers/rac/{id}/Changed content type : application/json
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /providers/rac/{id}/Changed content type : application/json
invalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 200 OK
Changed content type : application/json
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /providers/rac/Changed content type : application/json
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed response : 201 Created
Changed content type : application/json
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /providers/rac/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PUT /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
PATCH /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /sources/kerberos/{slug}/Changed response : 200 OK
application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
PUT /sources/kerberos/{slug}/Changed content type : application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
Changed response : 200 OK
application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
PATCH /sources/kerberos/{slug}/Changed content type : application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
Changed response : 200 OK
application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
GET /rac/connection_tokens/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > ConnectionToken Serializer
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /rac/endpoints/Changed response : 201 Created
application/json
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /rac/endpoints/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
POST /sources/kerberos/Changed content type : application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
Changed response : 201 Created
application/json
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
GET /sources/kerberos/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > Kerberos Source Serializer
spnego_server_name (string)
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
PUT /core/transactional/applications/Changed content type : application/json
Changed property provider (object)
Updated authentik_providers_rac.racprovider provider_model:
New optional properties:
invalidation_flowinvalidation_flow (string)
Flow used ending the session from a provider.
GET /stages/captcha/{stage_uuid}/Changed response : 200 OK
application/json
interactive (boolean)PUT /stages/captcha/{stage_uuid}/Changed content type : application/json
interactive (boolean)Changed response : 200 OK
application/json
interactive (boolean)PATCH /stages/captcha/{stage_uuid}/Changed content type : application/json
interactive (boolean)Changed response : 200 OK
application/json
interactive (boolean)GET /flows/executor/{flow_slug}/Changed response : 200 OK
Changed content type : application/json
Updated ak-stage-captcha component:
New required properties:
interactiveinteractive (boolean)POST /flows/executor/{flow_slug}/Changed content type : application/json
Updated ak-provider-oauth2-device-code component:
code (integer -> string)Changed response : 200 OK
Changed content type : application/json
Updated ak-stage-captcha component:
New required properties:
interactiveinteractive (boolean)POST /stages/captcha/Changed content type : application/json
interactive (boolean)Changed response : 201 Created
application/json
interactive (boolean)GET /stages/captcha/Changed response : 200 OK
application/json
Changed property results (array)
Changed items (object): > CaptchaStage Serializer
interactive (boolean)