https://cybertoolchain.io/tools/authentik New releases and features in authentik, tracked by The Cyber Toolchain. en Tue, 18 Aug 2026 22:04:25 GMT https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0 https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0 Tue, 18 Aug 2026 22:04:25 GMT authentik 2026.8.0 adds SAML audience override, back-channel logout on deactivation, and configurable source-stage failure actions. • Adds an audience override field to SAML sources, allowing operators to specify a custom audience value in the SAML source configuration. • Adds a configurable failure action to enterprise source stages, controlling what happens when a source stage fails. • Sends back-channel logout requests to OAuth2 providers when a user is deactivated, ensuring downstream sessions are terminated. • Deletes all user sessions immediately when a user account is deactivated. • Includes the query string in post-authentication redirects for the proxy outpost, preserving URL parameters through the login flow. • Allows an empty message authenticator in the RADIUS provider, broadening compatibility with RADIUS clients that omit this field. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2026.5.5 https://github.com/goauthentik/authentik/releases/tag/version/2026.5.5 Wed, 15 Jul 2026 17:15:23 GMT authentik 2026.5.5 adds number and boolean support in AKQL queries on JSON fields and licensing usage totals in the admin UI. • Adds number and boolean type support in AKQL queries on JSON fields via the API search interface. • Adds usage totals display to the licensing section in the admin web UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2026.2.5 https://github.com/goauthentik/authentik/releases/tag/version/2026.2.5 Tue, 07 Jul 2026 16:56:46 GMT authentik 2026.2.5 adds SCIM discovery support and in-process per-IP rate throttling. • Adds discovery support to the SCIM provider, enabling automatic capability negotiation with SCIM endpoints. • Introduces in-process per-IP rate throttling to limit abusive request rates without an external component. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2026.2.4 https://github.com/goauthentik/authentik/releases/tag/version/2026.2.4 Thu, 28 May 2026 15:04:46 GMT Adds SSH hostkey lookup for federated authentication in Connectors Agent endpoints. • `endpoints/connectors/agent` now allows federated auth via SSH hostkey lookup Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2026.5.0 https://github.com/goauthentik/authentik/releases/tag/version/2026.5.0 Fri, 22 May 2026 00:40:51 GMT SCIM provider adds support for interactive OAuth2; SAML unified endpoint now handles XML declarations. • Adds `interactive_oauth2` configuration to the SCIM provider to allow interactive OAuth2 flows • Enables the SAML unified endpoint to handle incoming XML declarations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2026.2.3 https://github.com/goauthentik/authentik/releases/tag/version/2026.2.3 Tue, 12 May 2026 19:55:59 GMT Adds cross-provider token introspection for OAuth2 and configurable device scope clipping. • `providers/oauth2` allows cross provider token introspection for federated providers • `providers/oauth2` clips device authorization scope against the provider's ScopeMapping set Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.12.5 https://github.com/goauthentik/authentik/releases/tag/version/2025.12.5 Tue, 12 May 2026 19:51:02 GMT Adds ES384 to enterprise license algorithms and continuous login flows for OIDC/SAML • `ES384` is now an available algorithm for the enterprise license signature • Adds `auth_header` support for passing the device code flow client ID during OAuth2 Device Authorization Grant Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2026.2.2 https://github.com/goauthentik/authentik/releases/tag/version/2026.2.2 Tue, 07 Apr 2026 16:18:57 GMT Add `--skip-migrations` flag to lifecycle/migrate, WS-Fed to app wizard, and login_hint support for agent connectors • Adds `--skip-migrations` flag to the `lifecycle/migrate` command to bypass database migrations during startup • Adds WS-Federation (WS-Fed) support to the application creation wizard in the web UI • Adds `login_hint` support for interactive authentication in the enterprise agent connector endpoint Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.10.4 https://github.com/goauthentik/authentik/releases/tag/version/2025.10.4 Thu, 12 Feb 2026 16:07:43 GMT Adds `logout+jwt` OIDC logout token type for RP-initiated single logout in authentik 2025.10.4 • `providers/oauth2`: add `logout+jwt` token type for oidc logout token. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.12.2 https://github.com/goauthentik/authentik/releases/tag/version/2025.12.2 Fri, 30 Jan 2026 17:53:20 GMT Adds `logout+jwt` token type for OIDC logout tokens and allows SAML encryption certs without private keys • The `logout+jwt` token type is a new value for an existing configuration field (`token_type`) in OIDC providers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.12.1 https://github.com/goauthentik/authentik/releases/tag/version/2025.12.1 Fri, 16 Jan 2026 01:04:03 GMT Adds property mapping override for OAuth2 scope claims in access tokens. • `providers/oauth2`: Allow property mappings to override scope claim in access tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.12.0 https://github.com/goauthentik/authentik/releases/tag/version/2025.12.0 Tue, 13 Jan 2026 23:04:04 GMT agent config now exposes license status via `endpoints` and proxyv2 stale session fix. • `endpoints` agent configuration now includes license status details. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.10.2 https://github.com/goauthentik/authentik/releases/tag/version/2025.10.2 Wed, 19 Nov 2025 15:08:41 GMT SCIM provider now supports custom schema data • Add custom schema data support to the SCIM provider Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.10.0 https://github.com/goauthentik/authentik/releases/tag/version/2025.10.0 Mon, 27 Oct 2025 19:58:39 GMT Adds prometheus metrics for enterprise license usage and expiry • `enterprise: add prometheus metrics for license usage and expiry` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.8.1 https://github.com/goauthentik/authentik/releases/tag/version/2025.8.1 Fri, 22 Aug 2025 14:55:30 GMT Authentik v2025.8.1 adds `ingress.pathType` config for Outposts and fixes several bugs • Adds `ingress.pathType` configuration option to Outposts to allow setting the Kubernetes Ingress path type Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.6.1 https://github.com/goauthentik/authentik/releases/tag/version/2025.6.1 Fri, 06 Jun 2025 15:28:21 GMT Adds property mapping to override proxy host header • `providers/proxy`: add option to override host header with property mappings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.6.0 https://github.com/goauthentik/authentik/releases/tag/version/2025.6.0 Wed, 04 Jun 2025 14:26:01 GMT Adds `name` field to RBAC Permissions search and new documentation for sessions in database and LDAP lookup. • Adds `name` to Permissions search in the RBAC module Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.4.0 https://github.com/goauthentik/authentik/releases/tag/version/2025.4.0 Wed, 30 Apr 2025 12:34:14 GMT Adds explicit session cookie age configuration and Azure AD group sync support. • `AK_SESSION_EXPIRATION` environment variable to configure the maximum lifespan of user session cookies. • Azure AD source provider now includes user groups in directory synchronizations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2025.2.1 https://github.com/goauthentik/authentik/releases/tag/version/2025.2.1 Wed, 26 Feb 2025 20:23:39 GMT Adds new pre-hydrated relative URL feature in core. • core: add pre-hydrated relative URL Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2024.12.0 https://github.com/goauthentik/authentik/releases/tag/version/2024.12.0 Thu, 19 Dec 2024 18:49:17 GMT Adds CONN_MAX_AGE, CONN_HEALTH_CHECKS and DISABLE_SERVER_SIDE_CURSORS environment variables for PostgreSQL configuration in authentik • Adds the `CONN_MAX_AGE`, `CONN_HEALTH_CHECKS`, and `DISABLE_SERVER_SIDE_CURSORS` environment variables to configure PostgreSQL database connection settings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2024.6.4 https://github.com/goauthentik/authentik/releases/tag/version/2024.6.4 Thu, 22 Aug 2024 15:57:25 GMT Adds enabled filter for ldap_password_validate signal to control LDAP credential validation • Add `enabled` filter for `ldap_password_validate` signal Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2024.6.2 https://github.com/goauthentik/authentik/releases/tag/version/2024.6.2 Wed, 31 Jul 2024 15:12:47 GMT authentik 2024.6.2 adds configurable Outposts refresh interval and user reputation scores in admin UI • Show matching user reputation scores in the web/admin user details view Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.10.5 https://github.com/goauthentik/authentik/releases/tag/version/2023.10.5 Thu, 21 Dec 2023 13:33:00 GMT authentik v2023.10.5 adds user agent to event logs and fixes SCIM familyName default • Change the default value of `familyName` in SCIM provider mappings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.6.0 https://github.com/goauthentik/authentik/releases/tag/version/2023.6.0 Fri, 07 Jul 2023 12:03:54 GMT Authentik adds OCI blueprint ports, user_write groups optional, event_matcher model filter and ldap StartTLS/cert auth • blueprints: allow setting `password` in blueprints to manage user passwords from blueprints • core: make `groups` field for user optional in API/schema • providers/ldap: add StartTLS support • policies/event_matcher: add `model` filter to EventMatcher policy • providers/oauth2: correctly advertise `code_challenge_methods_supported` • blueprints: support custom ports for OCI blueprints • website/integrations: add Google Workspace and Netbox integrations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.5.0 https://github.com/goauthentik/authentik/releases/tag/version/2023.5.0 Tue, 16 May 2023 12:20:58 GMT Adds `resolve_dns` and `reverse_dns` evaluator functions and custom CSS loading support • Adds `resolve_dns` and `reverse_dns` functions to the flow evaluator Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.4.0 https://github.com/goauthentik/authentik/releases/tag/version/2023.4.0 Fri, 14 Apr 2023 10:48:31 GMT Adds resolve_dns and reverse_dns functions to the evaluator; changes default flow stage binding settings • Adds `resolve_dns` and `reverse_dns` functions to evaluator to allow DNS-based conditional logic in flows. • Changes default flow stage binding settings in flows planner. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.3.1 https://github.com/goauthentik/authentik/releases/tag/version/2023.3.1 Thu, 16 Mar 2023 17:49:29 GMT authentik 2023.3.1 removes credential_id size limit for WebAuthn and fixes API/validation bugs • Removes the `credential_id` size limit in the `stages/authenticator_webauthn` stage to support larger keys Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.3.0 https://github.com/goauthentik/authentik/releases/tag/version/2023.3.0 Mon, 13 Mar 2023 17:50:37 GMT Adds resolve_dns and reverse_dns functions to the evaluator; bootstraps email configuration by default • Adds `resolve_dns` and `reverse_dns` functions to the evaluator for dynamic name resolution in expressions. • Bootstraps initial email configuration during setup so cyber tooling is ready for notifications out of the box. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.2.1 https://github.com/goauthentik/authentik/releases/tag/version/2023.2.1 Tue, 14 Feb 2023 18:14:30 GMT Adds LDAP Debug endpoint for troubleshooting • `sources/ldap`: add LDAP Debug endpoint Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.2.0 https://github.com/goauthentik/authentik/releases/tag/version/2023.2.0 Tue, 14 Feb 2023 12:57:41 GMT authentik v2023.2.0 adds LDAP unbind flow execution and initial outpost-wide logout capability • `providers/ldap` now executes a dedicated 'unbind' flow, allowing the identity provider to explicitly request client disconnection in LDAP sessions. • Initial implementation of `outpost wide logout`, enabling centralized termination of all active sessions for an outpost. • 'Change email to username' functionality added to stages, allowing the email field to be repurposed as the unique username attribute. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2023.1.0 https://github.com/goauthentik/authentik/releases/tag/version/2023.1.0 Wed, 18 Jan 2023 15:34:48 GMT New SLO for SAML, LDAP source manual import, proxy header interception, and blueprint tags • Adds `!Enumerate`, `!Value`, and `!Index` blueprints tags to allow iteration and value extraction in flow definitions • Initial SLO (Single Logout) implementation for SAML providers enabling session termination flows • Adds setting to intercept the authorization header in proxy providers for custom auth forwarding • Adds a manual import option for LDAP sources bypassing automatic synchronization • Includes task duration in the admin API response for monitoring flow execution time Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.12.2 https://github.com/goauthentik/authentik/releases/tag/version/2022.12.2 Thu, 05 Jan 2023 09:15:16 GMT Adds prefix to SAML entity descriptors and async API calls in admin UI • Adds configurable prefix to SAML EntityDescriptor element for `providers/saml` integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.12.0 https://github.com/goauthentik/authentik/releases/tag/version/2022.12.0 Wed, 28 Dec 2022 13:54:08 GMT Blueprints now support nested custom tags in `!Find` and `!Format` • Adds support for nested custom tags in Blueprint `!Find` and `!Format` tags Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.11.1 https://github.com/goauthentik/authentik/releases/tag/version/2022.11.1 Wed, 23 Nov 2022 09:31:01 GMT Adds state attribute support to blueprint delete operations • blueprints: add state attribute to delete objects Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.11.0 https://github.com/goauthentik/authentik/releases/tag/version/2022.11.0 Mon, 21 Nov 2022 19:55:00 GMT Configurable Sentry DSN, custom source icons, and Kubernetes ingress class support for Outposts • Makes the Sentry DSN configurable via environment variable `SENTRY_DSN` instead of hardcoding it • Adds `icon_url` field to sources, allowing custom icons for identity providers • Allows setting the `ingressClass` for authentik Outposts deployed on Kubernetes Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.10.1 https://github.com/goauthentik/authentik/releases/tag/version/2022.10.1 Sat, 29 Oct 2022 16:35:29 GMT Adds TrueCommand integration for authentik cyber tooling • Adds TrueCommand integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.9.0 https://github.com/goauthentik/authentik/releases/tag/version/2022.9.0 Fri, 23 Sep 2022 10:44:43 GMT Authentik 2022.9 introduces OCI registry support for blueprints, meta-models within blueprints, and x5c JWT claims for OAuth2 providers. • Add `meta` model to apply blueprint within blueprint for dependencies • Add x5c JWT header support in OAuth2 provider • Set default value for certificate select inputs in the web UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.8.2 https://github.com/goauthentik/authentik/releases/tag/version/2022.8.2 Fri, 19 Aug 2022 15:14:02 GMT Adds generic blueprint export and remote blueprint sources for workflow configuration management. • `blueprints` module now supports generic export alongside the existing flow exporter • Adds support for adding remote blueprints to manage identity workflows via external repositories Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik https://github.com/goauthentik/authentik/releases/tag/version/2022.8.1 https://github.com/goauthentik/authentik/releases/tag/version/2022.8.1 Tue, 16 Aug 2022 14:35:30 GMT authentik introduces Blueprints for managing configurations and adds Caddy endpoint support for proxy providers. • Feat: use mailcow full_name as username for mailcow source Full history on Cyber Toolchain: https://cybertoolchain.io/tools/authentik