website/docs/releases/2025/v2025.8.mdx
OAuth2/OpenID Connect back-channel logout: :ak-preview A server-to-server notification mechanism that allows authentik to notify OAuth2/OpenID providers whenever a user's session is terminated. Learn more.
Event map: :ak-enterprise View geolocation of user events on a map.
Advanced search: :ak-enterprise Search for users and event logs with custom query language to filter on their properties and attributes.
Email stage rate limiting: The email stage can now be configured to set a maximum number of emails that can be sent within a specified time period.
The authentik worker and background tasks have been reworked for better observability of tasks, and better configurability of scheduled tasks.
This rework also allowed us to not depend on Redis for background tasks. However, we replaced the engine used to manage these tasks, and as such, don't have a seamless migration path.
For instances with a high level of traffic, such as many users logging in, many sign up requests, etc., some tasks may be lost during the upgrade. Instances with low traffic can upgrade during periods of downtime.
To prevent losing tasks during the upgrade, instances with a high level of traffic should follow these instructions:
import TabItem from "@theme/TabItem"; import Tabs from "@theme/Tabs";
<Tabs
groupId="platform"
defaultValue="docker-compose"
values={[
{label: 'docker-compose', value: 'docker-compose'},
{label: 'Kubernetes', value: 'kubernetes'},
]}>
<TabItem value="docker-compose">
```sh
docker compose exec worker bash -c 'DJANGO_SETTINGS_MODULE=authentik.root.settings celery -A authentik.root.celery inspect active'
docker compose exec worker bash -c 'DJANGO_SETTINGS_MODULE=authentik.root.settings celery -A authentik.root.celery inspect scheduled'
docker compose exec worker bash -c 'DJANGO_SETTINGS_MODULE=authentik.root.settings celery -A authentik.root.celery inspect reserved'
```
</TabItem>
<TabItem value="kubernetes">
```sh
kubectl exec -it deployment/authentik-worker -c worker -- bash -c 'DJANGO_SETTINGS_MODULE=authentik.root.settings celery -A authentik.root.celery inspect active'
kubectl exec -it deployment/authentik-worker -c worker -- bash -c 'DJANGO_SETTINGS_MODULE=authentik.root.settings celery -A authentik.root.celery inspect scheduled'
kubectl exec -it deployment/authentik-worker -c worker -- bash -c 'DJANGO_SETTINGS_MODULE=authentik.root.settings celery -A authentik.root.celery inspect reserved'
```
</TabItem>
</Tabs>
3. Wait for all these commands to report the old task queues as "empty" 4. Finish by upgrading the worker
beryju/authentik and beryju/authentik-*The beryju/authentik and beryju/authentik-* Docker images are no longer being updated. Users are now encouraged to use the following images:
Server image:
ghcr.io/goauthentik/server or authentik/serverOutpost images:
ghcr.io/goauthentik/ldap or authentik/ldapghcr.io/goauthentik/proxy or authentik/proxyghcr.io/goauthentik/rac or authentik/racghcr.io/goauthentik/radius or authentik/radiusWe recommend updating your Docker Compose files or other container configurations to use these new image paths.
The PostgreSQL database must now use the UTF8 encoding. This is the default encoding that PostgreSQL uses. Unless you have specifically chosen a different encoding when creating the authentik database, no change is needed.
The AUTHENTIK_WORKER__CONCURRENCY setting has been renamed AUTHENTIK_WORKER__THREADS. The old setting is still available as an alias and will be removed in a future release.
The following settings have been removed and no longer have an effect:
AUTHENTIK_BROKER__URLAUTHENTIK_BROKER__TRANSPORT_OPTIONSAUTHENTIK_RESULT_BACKEND__URLThe authentik_admin_workers metric has been renamed authentik_tasks_workers.
The following metrics have been removed:
authentik_system_tasksauthentik_system_tasks_time_secondsauthentik_system_tasks_statusInstead, the following metrics are now available:
authentik_tasks_totalauthentik_tasks_errors_totalauthentik_tasks_retries_totalauthentik_tasks_rejected_totalauthentik_tasks_in_progressauthentik_tasks_delayed_in_progressauthentik_tasks_duration_millisecondsThe tasks metrics are no longer exposed by the server, but by the worker. For Helm chart users, add the following values to enable a ServiceMonitor to scrape those metrics:
worker:
metrics:
enabled: true
serviceMonitor:
enabled: true
Due to Bitnami upcoming changes to availability of their container images, the Helm chart default values have been updated to instead use docker.io/library/postgres and docker.io/library/redis. If you are setting custom values for either PostgreSQL or Redis, please review the associated Helm chart changes to update your values.
Redis has also been updated from 8.0 to 8.2.
From this point on, we recommend using the bundled PostgreSQL dependency for demonstration and test purposes only. See our installation documentation for alternatives to run PostgreSQL in a production environment.
LDAP Provider improvements:
memberOf field pointing back to its parent if set. Contributed by @danieladugyan, thank you!Accessibility improvements: Better screen reader support within the admin interface for navigation, forms, and wizard elements.
Send event notifications to associated user: Configure notification rules to send the event notification to the user associated to the event. Read more in our notifications documentation.
Policy bindings performance improvements: Policy bindings evaluation avoids forking new processes for user and group policy bindings.
SCIM Source patch support: Add full patch support for all properties of users and groups.
Secret inputs in the admin interface are now hidden by default.
An integration is how authentik connects to third-party applications, directories, and other identity providers. The following integration guides were recently added.
This release does not introduce any new requirements. You can follow the upgrade instructions below; for more detailed information about upgrading authentik, refer to our Upgrade documentation.
:::warning When you upgrade, be aware that the version of the authentik instance and of any outposts must be the same. We recommend that you always upgrade any outposts at the same time you upgrade your authentik instance. :::
To upgrade, download the new Docker Compose file and update the Docker stack with the new version, using these commands:
wget -O docker-compose.yml https://goauthentik.io/version/2025.8/docker-compose.yml
docker compose up -d
The -O flag retains the downloaded file's name, overwriting any existing local file with the same name.
Upgrade the Helm Chart to the new version, using the following commands:
helm repo update
helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.8
cause to debug issues and better tests (#15057)writeOnly hacks from Form and HorizontalFormElement (#14649)aria-owns attribute triggers Chrome crash. (#16003)@goauthentik/elements (#15694)GET /tasks/schedules/GET /tasks/schedules/{id}/PUT /tasks/schedules/{id}/PATCH /tasks/schedules/{id}/POST /tasks/schedules/{id}/send/GET /tasks/tasks/GET /tasks/tasks/{message_id}/POST /tasks/tasks/{message_id}/retry/GET /tasks/workersGET /admin/metrics/GET /admin/workers/GET /core/applications/{slug}/metrics/GET /core/users/{id}/metrics/GET /events/events/per_month/GET /events/system_tasks/GET /events/system_tasks/{uuid}/POST /events/system_tasks/{uuid}/run/GET /admin/settings/Changed response : 200 OK
Changed content type : application/json
New required properties:
flagsAdded property flags (object)
policies_buffered_access_view (boolean)Changed property footer_links (object)
PUT /admin/settings/Changed content type : application/json
New required properties:
flagsAdded property flags (object)
Changed property footer_links (object)
Changed response : 200 OK
Changed content type : application/json
New required properties:
flagsAdded property flags (object)
Changed property footer_links (object)
PATCH /admin/settings/Changed content type : application/json
Added property flags (object)
Changed property footer_links (object)
Changed response : 200 OK
Changed content type : application/json
New required properties:
flagsAdded property flags (object)
Changed property footer_links (object)
GET /authenticators/admin/all/Changed response : 200 OK
Changed content type : application/json
Changed items (object): > Serializer for authenticator devices
New required properties:
external_idexternal_id (string)
Get external Device ID
GET /authenticators/all/Changed response : 200 OK
Changed content type : application/json
Changed items (object): > Serializer for authenticator devices
New required properties:
external_idexternal_id (string)
Get external Device ID
GET /core/application_entitlements/{pbm_uuid}/Changed response : 200 OK
application/json
attributes (object -> object)PUT /core/application_entitlements/{pbm_uuid}/Changed content type : application/json
attributes (object -> object)Changed response : 200 OK
application/json
attributes (object -> object)PATCH /core/application_entitlements/{pbm_uuid}/Changed content type : application/json
attributes (object -> object)Changed response : 200 OK
application/json
attributes (object -> object)GET /core/brands/{brand_uuid}/Changed response : 200 OK
application/json
attributes (object -> object)PUT /core/brands/{brand_uuid}/Changed content type : application/json
attributes (object -> object)Changed response : 200 OK
application/json
attributes (object -> object)PATCH /core/brands/{brand_uuid}/Changed content type : application/json
attributes (object -> object)Changed response : 200 OK
application/json
attributes (object -> object)POST /core/users/{id}/recovery/POST /core/users/{id}/recovery_email/GET /events/events/volume/Added: actions in query
Added: history_days in query
Changed response : 200 OK
Changed content type : application/json
Changed items (object): > Count of events of action created on day
New required properties:
actioncounttimeNew optional properties:
x_cordy_cordAdded property action (string)
Enum values:
loginlogin_failedlogoutuser_writesuspicious_requestpassword_setsecret_viewsecret_rotateinvitation_usedauthorize_applicationsource_linkedimpersonation_startedimpersonation_endedflow_executionpolicy_executionpolicy_exceptionproperty_mapping_exceptionsystem_task_executionsystem_task_exceptionsystem_exceptionconfiguration_errormodel_createdmodel_updatedmodel_deletedemail_sentupdate_availablecustom_Added property time (string)
Added property count (integer)
Deleted property x_cord (integer)
Deleted property y_cord (integer)
GET /events/rules/{pbm_uuid}/Changed response : 200 OK
Changed content type : application/json
New required properties:
destination_group_objNew optional properties:
group_objAdded property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_group_obj (object)
Property pk (string)
Property num_pk (integer)
Property name (string)
Property is_superuser (boolean)
Users added to this group will be superusers.
Property parent (string)
Property parent_name (string)
Property users (array)
Items (integer):
Property users_obj (array)
Items (object): > Stripped down user serializer to show relevant users for groups
Property pk (integer)
Property username (string)
Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only.
Property name (string)
User's display name.
Property is_active (boolean)
Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
Property last_login (string)
Property email (string)
Property attributes (object)
Property uid (string)
Property attributes (object)
Property roles (array)
Items (string):
Property roles_obj (array)
Items (object): > Role serializer
Property pk (string)
Property name (string)
Property children (array)
Property children_obj (array)
Items (object): > Stripped down group serializer to show relevant children for groups
Property pk (string)
Property name (string)
Property is_superuser (boolean)
Users added to this group will be superusers.
Property attributes (object)
Property group_uuid (string)
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Deleted property group_obj (object)
PUT /events/rules/{pbm_uuid}/Changed content type : application/json
Added property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Changed response : 200 OK
Changed content type : application/json
New required properties:
destination_group_objNew optional properties:
group_objAdded property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_group_obj (object)
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Deleted property group_obj (object)
PATCH /events/rules/{pbm_uuid}/Changed content type : application/json
Added property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Changed response : 200 OK
Changed content type : application/json
New required properties:
destination_group_objNew optional properties:
group_objAdded property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_group_obj (object)
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Deleted property group_obj (object)
GET /managed/blueprints/{instance_uuid}/Changed response : 200 OK
application/json
Changed property context (object -> object)
Changed property metadata (object -> object)
PUT /managed/blueprints/{instance_uuid}/Changed content type : application/json
context (object -> object)Changed response : 200 OK
application/json
Changed property context (object -> object)
Changed property metadata (object -> object)
PATCH /managed/blueprints/{instance_uuid}/Changed content type : application/json
context (object -> object)Changed response : 200 OK
application/json
Changed property context (object -> object)
Changed property metadata (object -> object)
POST /managed/blueprints/{instance_uuid}/apply/Changed response : 200 OK
application/json
Changed property context (object -> object)
Changed property metadata (object -> object)
GET /outposts/service_connections/kubernetes/{uuid}/Changed response : 200 OK
application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
PUT /outposts/service_connections/kubernetes/{uuid}/Changed content type : application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
Changed response : 200 OK
application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
PATCH /outposts/service_connections/kubernetes/{uuid}/Changed content type : application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
Changed response : 200 OK
application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
GET /policies/event_matcher/{policy_uuid}/Changed response : 200 OK
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.schedulePUT /policies/event_matcher/{policy_uuid}/Changed content type : application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.scheduleChanged response : 200 OK
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.schedulePATCH /policies/event_matcher/{policy_uuid}/Changed content type : application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.scheduleChanged response : 200 OK
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.scheduleGET /policies/reputation/scores/{reputation_uuid}/Changed response : 200 OK
application/json
Changed property ip_geo_data (object -> object)
Changed property ip_asn_data (object -> object)
GET /providers/google_workspace/{id}/sync/status/Deleted response : 404 Not Found
Task not found
Changed response : 200 OK
Changed content type : application/json
New optional properties:
tasksAdded property last_successful_sync (string)
Added property last_sync_status (string)
Enum values:
queuedconsumedrejecteddoneinfowarningerrorDeleted property tasks (array)
Changed property is_running (boolean)
GET /providers/google_workspace_groups/{id}/Changed response : 200 OK
application/json
attributes (object -> object)GET /providers/google_workspace_users/{id}/Changed response : 200 OK
application/json
attributes (object -> object)GET /providers/microsoft_entra/{id}/sync/status/Deleted response : 404 Not Found
Task not found
Changed response : 200 OK
Changed content type : application/json
New optional properties:
tasksAdded property last_successful_sync (string)
Added property last_sync_status (string)
Deleted property tasks (array)
Changed property is_running (boolean)
GET /providers/microsoft_entra_groups/{id}/Changed response : 200 OK
application/json
attributes (object -> object)GET /providers/microsoft_entra_users/{id}/Changed response : 200 OK
application/json
attributes (object -> object)GET /providers/rac/{id}/Changed response : 200 OK
application/json
settings (object -> object)PUT /providers/rac/{id}/Changed content type : application/json
settings (object -> object)Changed response : 200 OK
application/json
settings (object -> object)PATCH /providers/rac/{id}/Changed content type : application/json
settings (object -> object)Changed response : 200 OK
application/json
settings (object -> object)GET /providers/scim/{id}/sync/status/Deleted response : 404 Not Found
Task not found
Changed response : 200 OK
Changed content type : application/json
New optional properties:
tasksAdded property last_successful_sync (string)
Added property last_sync_status (string)
Deleted property tasks (array)
Changed property is_running (boolean)
GET /providers/scim_groups/{id}/Changed response : 200 OK
application/json
attributes (object -> object)GET /providers/scim_users/{id}/Changed response : 200 OK
application/json
attributes (object -> object)GET /sources/kerberos/{slug}/sync/status/Changed response : 200 OK
Changed content type : application/json
New optional properties:
tasksAdded property last_successful_sync (string)
Added property last_sync_status (string)
Deleted property tasks (array)
Changed property is_running (boolean)
GET /sources/ldap/{slug}/sync/status/Changed response : 200 OK
Changed content type : application/json
New optional properties:
tasksAdded property last_successful_sync (string)
Added property last_sync_status (string)
Deleted property tasks (array)
Changed property is_running (boolean)
GET /sources/scim_groups/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
PUT /sources/scim_groups/{id}/Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
Changed response : 200 OK
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
PATCH /sources/scim_groups/{id}/Changed content type : application/json
Added property external_id (string)
Changed property attributes (object -> object)
Changed response : 200 OK
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
GET /sources/scim_users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
PUT /sources/scim_users/{id}/Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
Changed response : 200 OK
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
PATCH /sources/scim_users/{id}/Changed content type : application/json
Added property external_id (string)
Changed property attributes (object -> object)
Changed response : 200 OK
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
GET /authenticators/admin/duo/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/admin/email/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/admin/endpoint/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/admin/sms/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/admin/totp/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/admin/webauthn/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/duo/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/email/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/endpoint/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/sms/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/totp/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/webauthn/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /core/application_entitlements/Changed content type : application/json
attributes (object -> object)Changed response : 201 Created
application/json
attributes (object -> object)GET /core/application_entitlements/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > ApplicationEntitlement Serializer
attributes (object -> object)GET /core/authenticated_sessions/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /core/brands/Changed content type : application/json
attributes (object -> object)Changed response : 201 Created
application/json
attributes (object -> object)GET /core/brands/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Brand Serializer
attributes (object -> object)GET /core/brands/current/Changed response : 200 OK
Changed content type : application/json
New required properties:
flagsflags (object)
policies_buffered_access_view (boolean)GET /core/groups/{group_uuid}/Added: include_children in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
PUT /core/groups/{group_uuid}/Changed content type : application/json
children (array)Changed response : 200 OK
Changed content type : application/json
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
PATCH /core/groups/{group_uuid}/Changed content type : application/json
children (array)Changed response : 200 OK
Changed content type : application/json
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
GET /core/tokens/{identifier}/Changed response : 200 OK
application/json
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PUT /core/tokens/{identifier}/Changed response : 200 OK
application/json
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PATCH /core/tokens/{identifier}/Changed response : 200 OK
application/json
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /core/users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
last_updatedlast_updated (string)PUT /core/users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
last_updatedlast_updated (string)PATCH /core/users/{id}/Changed response : 200 OK
Changed content type : application/json
New required properties:
last_updatedlast_updated (string)GET /crypto/certificatekeypairs/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /enterprise/license/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /events/events/{event_uuid}/Changed response : 200 OK
application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
PUT /events/events/{event_uuid}/Changed content type : application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
Changed response : 200 OK
application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
PATCH /events/events/{event_uuid}/Changed content type : application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
Changed response : 200 OK
application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
POST /events/rules/Changed content type : application/json
Added property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Changed response : 201 Created
Changed content type : application/json
New required properties:
destination_group_objNew optional properties:
group_objAdded property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_group_obj (object)
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Deleted property group_obj (object)
GET /events/rules/Added: destination_group__name in query
Deleted: group__name in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > NotificationRule Serializer
New required properties:
destination_group_objNew optional properties:
group_objAdded property destination_group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Added property destination_group_obj (object)
Added property destination_event_user (boolean)
When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both.
Deleted property group (string)
Define which group of users this notification should be sent and shown to. If left empty, Notification won't be sent.
Deleted property group_obj (object)
GET /events/transports/{uuid}/Changed response : 200 OK
application/json
Added property email_subject_prefix (string)
Added property email_template (string)
PUT /events/transports/{uuid}/Changed content type : application/json
Added property email_subject_prefix (string)
Added property email_template (string)
Changed response : 200 OK
application/json
Added property email_subject_prefix (string)
Added property email_template (string)
PATCH /events/transports/{uuid}/Changed content type : application/json
Added property email_subject_prefix (string)
Added property email_template (string)
Changed response : 200 OK
application/json
Added property email_subject_prefix (string)
Added property email_template (string)
POST /managed/blueprints/Changed content type : application/json
context (object -> object)Changed response : 201 Created
application/json
Changed property context (object -> object)
Changed property metadata (object -> object)
GET /managed/blueprints/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Info about a single blueprint instance file
Changed property context (object -> object)
Changed property metadata (object -> object)
GET /outposts/proxy/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /outposts/radius/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /outposts/service_connections/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /outposts/service_connections/docker/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /outposts/service_connections/kubernetes/Changed content type : application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
Changed response : 201 Created
application/json
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
GET /outposts/service_connections/kubernetes/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > KubernetesServiceConnection Serializer
kubeconfig (object -> object)
Paste your kubeconfig here. authentik will automatically use the currently selected context.
GET /policies/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /policies/bindings/{policy_binding_uuid}/Changed response : 200 OK
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PUT /policies/bindings/{policy_binding_uuid}/Changed response : 200 OK
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PATCH /policies/bindings/{policy_binding_uuid}/Changed response : 200 OK
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /policies/dummy/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /policies/event_matcher/Changed content type : application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.scheduleChanged response : 201 Created
application/json
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.scheduleGET /policies/event_matcher/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Event Matcher Policy Serializer
Changed property app (string)
Match events created by selected application. When left empty, all applications are matched.
Added enum values:
authentik.tasksauthentik.tasks.schedulesauthentik.enterprise.searchChanged property model (string)
Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
Added enum value:
authentik_tasks_schedules.scheduleGET /policies/expression/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /policies/password/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /policies/password_expiry/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /policies/reputation/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /policies/reputation/scores/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Reputation Serializer
Changed property ip_geo_data (object -> object)
Changed property ip_asn_data (object -> object)
GET /policies/unique_password/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/notification/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/google_workspace/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/microsoft_entra/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/rac/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/radius/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/saml/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/scim/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/provider/scope/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/source/kerberos/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/source/ldap/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/source/oauth/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/source/plex/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/source/saml/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /propertymappings/source/scim/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /providers/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /providers/google_workspace/{id}/Changed response : 200 OK
application/json
credentials (object -> object)PUT /providers/google_workspace/{id}/Changed content type : application/json
credentials (object -> object)Changed response : 200 OK
application/json
credentials (object -> object)PATCH /providers/google_workspace/{id}/Changed content type : application/json
credentials (object -> object)Changed response : 200 OK
application/json
credentials (object -> object)POST /providers/google_workspace_groups/Changed response : 201 Created
application/json
attributes (object -> object)GET /providers/google_workspace_groups/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > GoogleWorkspaceProviderGroup Serializer
attributes (object -> object)POST /providers/google_workspace_users/Changed response : 201 Created
application/json
attributes (object -> object)GET /providers/google_workspace_users/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > GoogleWorkspaceProviderUser Serializer
attributes (object -> object)POST /providers/microsoft_entra_groups/Changed response : 201 Created
application/json
attributes (object -> object)GET /providers/microsoft_entra_groups/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > MicrosoftEntraProviderGroup Serializer
attributes (object -> object)POST /providers/microsoft_entra_users/Changed response : 201 Created
application/json
attributes (object -> object)GET /providers/microsoft_entra_users/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > MicrosoftEntraProviderUser Serializer
attributes (object -> object)POST /providers/rac/Changed content type : application/json
settings (object -> object)Changed response : 201 Created
application/json
settings (object -> object)GET /providers/rac/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > RACProvider Serializer
settings (object -> object)GET /providers/radius/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /providers/saml/{id}/Changed response : 200 OK
application/json
Added property default_name_id_policy (string)
Enum values:
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddressurn:oasis:names:tc:SAML:2.0:nameid-format:persistenturn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectNameurn:oasis:names:tc:SAML:2.0:nameid-format:WindowsDomainQualifiedNameurn:oasis:names:tc:SAML:2.0:nameid-format:transienturn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedPUT /providers/saml/{id}/Changed content type : application/json
default_name_id_policy (string)Changed response : 200 OK
application/json
default_name_id_policy (string)PATCH /providers/saml/{id}/Changed content type : application/json
default_name_id_policy (string)Changed response : 200 OK
application/json
default_name_id_policy (string)GET /providers/scim/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /providers/scim_groups/Changed response : 201 Created
application/json
attributes (object -> object)GET /providers/scim_groups/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SCIMProviderGroup Serializer
attributes (object -> object)POST /providers/scim_users/Changed response : 201 Created
application/json
attributes (object -> object)GET /providers/scim_users/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SCIMProviderUser Serializer
attributes (object -> object)GET /providers/ssf/{id}/Changed response : 200 OK
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PUT /providers/ssf/{id}/Changed response : 200 OK
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PATCH /providers/ssf/{id}/Changed response : 200 OK
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
PUT /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
PATCH /rac/connection_tokens/{connection_token_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
GET /rac/endpoints/{pbm_uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
PUT /rac/endpoints/{pbm_uuid}/Changed content type : application/json
settings (object -> object)Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
PATCH /rac/endpoints/{pbm_uuid}/Changed content type : application/json
settings (object -> object)Changed response : 200 OK
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
GET /rbac/permissions/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /rbac/permissions/assigned_by_roles/{uuid}/assign/Changed content type : application/json
Changed property model (string)
Added enum value:
authentik_tasks_schedules.schedulePATCH /rbac/permissions/assigned_by_roles/{uuid}/unassign/Changed content type : application/json
Changed property model (string)
Added enum value:
authentik_tasks_schedules.schedulePOST /rbac/permissions/assigned_by_users/{id}/assign/Changed content type : application/json
Changed property model (string)
Added enum value:
authentik_tasks_schedules.schedulePATCH /rbac/permissions/assigned_by_users/{id}/unassign/Changed content type : application/json
Changed property model (string)
Added enum value:
authentik_tasks_schedules.scheduleGET /rbac/roles/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/oauth/{slug}/Changed response : 200 OK
application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidPUT /sources/oauth/{slug}/Changed content type : application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidChanged response : 200 OK
application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidPATCH /sources/oauth/{slug}/Changed content type : application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidChanged response : 200 OK
application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidGET /sources/saml/{slug}/Changed response : 200 OK
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedPUT /sources/saml/{slug}/Changed content type : application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedChanged response : 200 OK
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedPATCH /sources/saml/{slug}/Changed content type : application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedChanged response : 200 OK
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedGET /sources/scim/{slug}/Changed response : 200 OK
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PUT /sources/scim/{slug}/Changed response : 200 OK
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)PATCH /sources/scim/{slug}/Changed response : 200 OK
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)POST /sources/scim_groups/Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
Changed response : 201 Created
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
GET /sources/scim_groups/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SCIMSourceGroup Serializer
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
POST /sources/scim_users/Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
Changed response : 201 Created
Changed content type : application/json
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
GET /sources/scim_users/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SCIMSourceUser Serializer
New required properties:
external_idNew optional properties:
idAdded property external_id (string)
Changed property attributes (object -> object)
GET /ssf/streams/{uuid}/Changed response : 200 OK
application/json
Changed property provider_obj (object)
SSFProvider Serializer
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /stages/authenticator/webauthn_device_types/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /tenants/domains/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /tenants/tenants/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/admin/static/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /authenticators/static/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /core/applications/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /core/groups/Changed content type : application/json
children (array)Changed response : 201 Created
Changed content type : application/json
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
GET /core/groups/Added: include_children in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Group Serializer
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
POST /core/tokens/Changed response : 201 Created
application/json
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /core/tokens/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /core/user_consent/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)POST /core/users/Changed response : 201 Created
Changed content type : application/json
New required properties:
last_updatedlast_updated (string)GET /core/users/Added: date_joined in query
Added: date_joined__gt in query
Added: date_joined__lt in query
Added: last_updated in query
Added: last_updated__gt in query
Added: last_updated__lt in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > User Serializer
New required properties:
last_updatedlast_updated (string)POST /events/events/Changed content type : application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
Changed response : 201 Created
application/json
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
GET /events/events/Added: actions in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
GET /events/notifications/{uuid}/Changed response : 200 OK
application/json
Changed property event (object)
Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
PUT /events/notifications/{uuid}/Changed content type : application/json
Changed property event (object)
Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
Changed response : 200 OK
application/json
Changed property event (object)
Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
PATCH /events/notifications/{uuid}/Changed content type : application/json
Changed property event (object)
Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
Changed response : 200 OK
application/json
Changed property event (object)
Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
POST /events/transports/Changed content type : application/json
Added property email_subject_prefix (string)
Added property email_template (string)
Changed response : 201 Created
application/json
Added property email_subject_prefix (string)
Added property email_template (string)
GET /events/transports/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > NotificationTransport Serializer
Added property email_subject_prefix (string)
Added property email_template (string)
GET /flows/instances/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /outposts/instances/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /outposts/ldap/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /policies/bindings/Changed response : 201 Created
application/json
Changed property group_obj (object)
Group Serializer
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /policies/bindings/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > PolicyBinding Serializer
Changed property group_obj (object)
Group Serializer
New required properties:
children_objAdded property children (array)
Added property children_obj (array)
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /policies/geoip/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /providers/google_workspace/Changed content type : application/json
credentials (object -> object)Changed response : 201 Created
application/json
credentials (object -> object)GET /providers/google_workspace/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > GoogleWorkspaceProvider Serializer
credentials (object -> object)GET /providers/ldap/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /providers/microsoft_entra/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /providers/oauth2/{id}/Changed response : 200 OK
application/json
backchannel_logout_uri (string)PUT /providers/oauth2/{id}/Changed content type : application/json
backchannel_logout_uri (string)Changed response : 200 OK
application/json
backchannel_logout_uri (string)PATCH /providers/oauth2/{id}/Changed content type : application/json
backchannel_logout_uri (string)Changed response : 200 OK
application/json
backchannel_logout_uri (string)POST /providers/saml/Changed content type : application/json
default_name_id_policy (string)Changed response : 201 Created
application/json
default_name_id_policy (string)GET /providers/saml/Added: default_name_id_policy in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SAMLProvider Serializer
default_name_id_policy (string)POST /providers/ssf/Changed response : 201 Created
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /providers/ssf/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SSFProvider Serializer
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /rac/connection_tokens/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > ConnectionToken Serializer
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property endpoint_obj (object)
Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
POST /rac/endpoints/Changed content type : application/json
settings (object -> object)Changed response : 201 Created
application/json
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
GET /rac/endpoints/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Endpoint Serializer
Changed property provider_obj (object)
RACProvider Serializer
settings (object -> object)Changed property settings (object -> object)
GET /rbac/initial_permissions/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /rbac/permissions/assigned_by_roles/Changed: model in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /rbac/permissions/assigned_by_users/Changed: model in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/group_connections/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/group_connections/kerberos/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/group_connections/ldap/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/group_connections/oauth/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/group_connections/plex/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/group_connections/saml/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/kerberos/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/ldap/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /sources/oauth/Changed content type : application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidChanged response : 201 Created
application/json
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidGET /sources/oauth/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > OAuth Source Serializer
Changed property oidc_jwks (object -> object)
Changed property provider_type (string)
Added enum value:
entraidGET /sources/plex/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /sources/saml/Changed content type : application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedChanged response : 201 Created
application/json
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedGET /sources/saml/Changed: name_id_policy in query
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SAMLSource Serializer
Changed property name_id_policy (string)
NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
Added enum value:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecifiedPOST /sources/scim/Changed response : 201 Created
application/json
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /sources/scim/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SCIMSource Serializer
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /sources/user_connections/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/user_connections/kerberos/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/user_connections/ldap/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/user_connections/oauth/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/user_connections/plex/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /sources/user_connections/saml/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /ssf/streams/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > SSFStream Serializer
Changed property provider_obj (object)
SSFProvider Serializer
Changed property token_obj (object)
Token Serializer
Changed property user_obj (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /stages/authenticator/endpoint_gdtc/{stage_uuid}/Changed response : 200 OK
application/json
credentials (object -> object)PUT /stages/authenticator/endpoint_gdtc/{stage_uuid}/Changed content type : application/json
credentials (object -> object)Changed response : 200 OK
application/json
credentials (object -> object)PATCH /stages/authenticator/endpoint_gdtc/{stage_uuid}/Changed content type : application/json
credentials (object -> object)Changed response : 200 OK
application/json
credentials (object -> object)GET /stages/authenticator/webauthn/{stage_uuid}/Changed response : 200 OK
application/json
max_attempts (integer)PUT /stages/authenticator/webauthn/{stage_uuid}/Changed content type : application/json
max_attempts (integer)Changed response : 200 OK
application/json
max_attempts (integer)PATCH /stages/authenticator/webauthn/{stage_uuid}/Changed content type : application/json
max_attempts (integer)Changed response : 200 OK
application/json
max_attempts (integer)GET /stages/email/{stage_uuid}/Changed response : 200 OK
application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
PUT /stages/email/{stage_uuid}/Changed content type : application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
Changed response : 200 OK
application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
PATCH /stages/email/{stage_uuid}/Changed content type : application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
Changed response : 200 OK
application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
GET /stages/invitation/invitations/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/user_login/{stage_uuid}/Changed response : 200 OK
application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
PUT /stages/user_login/{stage_uuid}/Changed content type : application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
Changed response : 200 OK
application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
PATCH /stages/user_login/{stage_uuid}/Changed content type : application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
Changed response : 200 OK
application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
GET /core/user_consent/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > UserConsent Serializer
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)GET /events/notifications/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Notification Serializer
Changed property event (object)
Event Serializer
Changed property user (object -> object)
Changed property context (object -> object)
Changed property brand (object -> object)
GET /flows/bindings/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /flows/executor/{flow_slug}/Changed response : 200 OK
Changed content type : application/json
Updated ak-stage-authenticator-validate component:
Changed property device_challenges (array)
Changed items (object): > Single device challenge
Changed property device_class (string)
Added enum values:
statictotpwebauthnduosmsemailPOST /flows/executor/{flow_slug}/Changed content type : application/json
Updated ak-stage-authenticator-validate component:
Changed property selected_challenge (object)
Single device challenge
Changed property device_class (string)
Added enum values:
statictotpwebauthnduosmsemailChanged response : 200 OK
Changed content type : application/json
Updated ak-stage-authenticator-validate component:
Changed property device_challenges (array)
Changed items (object): > Single device challenge
Changed property device_class (string)
Added enum values:
statictotpwebauthnduosmsemailGET /oauth2/access_tokens/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)Changed property provider (object)
OAuth2Provider Serializer
backchannel_logout_uri (string)GET /oauth2/authorization_codes/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)Changed property provider (object)
OAuth2Provider Serializer
backchannel_logout_uri (string)GET /oauth2/refresh_tokens/{id}/Changed response : 200 OK
application/json
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)Changed property provider (object)
OAuth2Provider Serializer
backchannel_logout_uri (string)POST /providers/oauth2/Changed content type : application/json
backchannel_logout_uri (string)Changed response : 201 Created
application/json
backchannel_logout_uri (string)GET /providers/oauth2/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > OAuth2Provider Serializer
backchannel_logout_uri (string)GET /providers/proxy/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/all/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/authenticator/duo/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/authenticator/email/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /stages/authenticator/endpoint_gdtc/Changed content type : application/json
credentials (object -> object)Changed response : 201 Created
application/json
credentials (object -> object)GET /stages/authenticator/endpoint_gdtc/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > AuthenticatorEndpointGDTCStage Serializer
credentials (object -> object)GET /stages/authenticator/sms/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/authenticator/static/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/authenticator/totp/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/authenticator/validate/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /stages/authenticator/webauthn/Changed content type : application/json
max_attempts (integer)Changed response : 201 Created
application/json
max_attempts (integer)GET /stages/authenticator/webauthn/Added: max_attempts in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > AuthenticatorWebAuthnStage Serializer
max_attempts (integer)GET /stages/captcha/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/consent/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/deny/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/dummy/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /stages/email/Changed content type : application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
Changed response : 201 Created
application/json
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
GET /stages/email/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > EmailStage Serializer
Added property recovery_max_attempts (integer)
Added property recovery_cache_timeout (string)
The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3).
GET /stages/identification/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/invitation/stages/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/mtls/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/password/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/prompt/stages/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/redirect/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/source/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/user_delete/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)POST /stages/user_login/Changed content type : application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
Changed response : 201 Created
application/json
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
GET /stages/user_login/Added: remember_device in query
Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > UserLoginStage Serializer
remember_device (string)
When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)
GET /stages/user_logout/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)GET /stages/user_write/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)PUT /core/transactional/applications/Changed content type : application/json
Changed property provider (object)
Updated authentik_providers_rac.racprovider provider_model:
settings (object -> object)Updated authentik_providers_google_workspace.googleworkspaceprovider provider_model:
credentials (object -> object)Updated authentik_providers_saml.samlprovider provider_model:
default_name_id_policy (string)Updated authentik_providers_oauth2.oauth2provider provider_model:
backchannel_logout_uri (string)GET /oauth2/access_tokens/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and RefreshToken
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)Changed property provider (object)
OAuth2Provider Serializer
backchannel_logout_uri (string)GET /oauth2/authorization_codes/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and ExpiringBaseGrant
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)Changed property provider (object)
OAuth2Provider Serializer
backchannel_logout_uri (string)GET /oauth2/refresh_tokens/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteAdded property autocomplete (object)
Changed property results (array)
Changed items (object): > Serializer for BaseGrantModel and RefreshToken
Changed property user (object)
User Serializer
New required properties:
last_updatedlast_updated (string)Changed property provider (object)
OAuth2Provider Serializer
backchannel_logout_uri (string)GET /stages/prompt/prompts/Changed response : 200 OK
Changed content type : application/json
New required properties:
autocompleteautocomplete (object)