authentik

Security & Privacy

An open-source identity provider.

Latest version/2026.8.2 · by Authentik SecurityWritten in PythonWebsitegoauthentik/authentikRSS

Release activity

Release activity — 16 releases across 8 days since Jul 8, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Jul 8, 2026. Older weeks are hidden at this screen width.
JunJulAugSep
SundayNo releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026No releases on Aug 30, 2026No releases on Sep 6, 2026
MondayNo releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 20266 releases on Aug 3, 20261 release on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 2026No releases on Aug 31, 2026No releases on Sep 7, 2026
TuesdayNo releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 20261 release on Aug 18, 2026No releases on Aug 25, 20261 release on Sep 1, 2026No releases on Sep 8, 2026
Wednesday1 release on Jul 8, 20262 releases on Jul 15, 20261 release on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026No releases on Aug 26, 2026No releases on Sep 2, 20263 releases on Sep 9, 2026
ThursdayNo releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026No releases on Aug 13, 2026No releases on Aug 20, 2026No releases on Aug 27, 2026No releases on Sep 3, 2026No releases on Sep 10, 2026
FridayNo releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026No releases on Aug 14, 2026No releases on Aug 21, 2026No releases on Aug 28, 2026No releases on Sep 4, 2026
SaturdayNo releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026No releases on Aug 29, 2026No releases on Sep 5, 2026

16 releases since Jul 8, 2026, busiest day 6

Changelog

version/2026.5.7

Release 2026.5.7

Changed 2
  • Bump Django from 5.2.15 to 5.2.17
  • Don't include debug info for Rust release profile
Fixed 17
  • Fix auth schema in endpoints/connectors/agent
  • Fix exception in enterprise/endpoints/connectors/fleet when host has no policies
  • Fix schema for current brand's flags
  • Ignore key casing in SCIM responses
  • Return 400 instead of 500 for invalid Platform SSO token requests in endpoints/agent
  • Fix Secure Enclave key dropped on first Platform SSO user registration

From authentik

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202657

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.5.6...version/2026.5.7

View originalPermalink
How version/2026.5.7 went
version/2026.2.7

Release 2026.2.7

Changed 2
  • Filter policy engine in policies
  • Bump Django from 5.2.16 to 5.2.17
Fixed 5
  • Fix SCIM changed detection for nested attributes
  • Return the intended status code from error views for all request methods
  • Handle unsupported HTTP method in server core
  • Dynamic captcha keys when stage embedded in identification stage
  • Avoid DNS resolution in fqdn_rand
Removed 1
  • Drop curl and runit from lifecycle container
Security 6
  • Use constant-time comparison in SecretKeyFilter for RBAC
  • Fix group hierarchy roles security issue
  • Fix authenticator email recipient override security issue
  • Fix SAML security issue
  • Fix secrets read permission security issue
  • Fix libxml2 DOCTYPE security issue

From authentik

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202627

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.2.6...version/2026.2.7

View originalPermalink
How version/2026.2.7 went
version/2026.8.0

Release 2026.8.0

Added 4
  • Add object attributes documentation
  • Add configurable failure action to enterprise source stages
  • Add audience override field for SAML sources
  • Add login_hint to auth_ia in enterprise agent endpoints
Changed 5
  • Blueprints now emit draft-07 definitions instead of $defs
  • Optimize database queries for requestable apps in enterprise requests
  • Decrease page size for fleet connectors in enterprise endpoints
  • Tasks now aggregate status from logs instead of legacy field
  • Scope user path_startswith filter to the path subtree
Fixed 11
  • Fix DCR missing csrf_exempt in OAuth2 providers
  • Fix missing preview banner for object attributes in web admin
  • Fix prioritization in form serialization for dotted input fields
  • Handle errors in endpoints facts
  • Fix content_left and content_right layouts in web
  • Include query string in post-authentication redirect for proxy outposts

From authentik

See https://docs.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc7...version/2026.8.0

View originalPermalink
How version/2026.8.0 went
version/2026.8.0-rc7Pre-release

Release 2026.8.0-rc7

Added 3
  • Add CAS source integration
  • Add EQ and NEQ modes to the Condition tag in blueprints
  • Add enterprise agents
Changed 7
  • Update styling for user account switcher
  • Allow line-break in dom-purify
  • Contain long text in tables and application cards
  • Only show requests tab when usable in enterprise
  • Bump Django from 5.2.16 to 5.2.17
  • Pin pnpm to 11.20.0
  • Add OAuth2 token exchange delegation
Fixed 10
  • Fix alignment of task list filters
  • Fix mismatched stage name in example 2FA login flow
  • Fix missing authorization event for OAuth provider
  • Fix missing required flag on password input
  • Fix file search input interactions
  • Fix enterprise required check for agents
Removed 1
  • Drop misleading delete consequences from user activation review

From authentik

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc6...version/2026.8.0-rc7

View originalPermalink
How version/2026.8.0-rc7 went
version/2026.8.0-rc6Pre-release

Release 2026.8.0-rc6

Fixed 2
  • Fix intermittently failing throttling test in authenticator_validate stage
  • Fix sentry-release access to metadata in CI

From authentik

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc5...version/2026.8.0-rc6

View originalPermalink
How version/2026.8.0-rc6 went
version/2026.8.0-rc5Pre-release

Release 2026.8.0-rc5

Fixed 1
  • Fix image attestation in release publish CI

From authentik

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc4...version/2026.8.0-rc5

View originalPermalink
How version/2026.8.0-rc5 went
version/2026.8.0-rc4Pre-release

Release 2026.8.0-rc4

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc3...version/2026.8.0-rc4

View originalPermalink
How version/2026.8.0-rc4 went
version/2026.8.0-rc3Pre-release

Release 2026.8.0-rc3

Changed 1
  • Allow discovery to be deactivated in outgoing sync
Fixed 2
  • Hide plain action icons while loading in web interface
  • Fix missing gh cli environment variable in release publish

From authentik

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc2...version/2026.8.0-rc3

View originalPermalink
How version/2026.8.0-rc3 went
version/2026.8.0-rc2Pre-release

Release 2026.8.0-rc2

Added 1
  • Support air-gapped maps
Changed 3
  • Rework SCIM discovery with pageSize
  • Do not include debug info for Rust release profile
  • Split test job into 10 parallel jobs
Fixed 4
  • Limit request body size
  • Fix group source connection source object
  • Expose authenticated flags correctly in current brand
  • Fix missing checkout in release publish

From authentik

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc1...version/2026.8.0-rc2

View originalPermalink
How version/2026.8.0-rc2 went
version/2026.5.6

Release 2026.5.6

Added 1
  • In-process per-IP rate throttle
Changed 2
  • Drop curl and runit from container lifecycle
  • Make storage file paths overwritable via environment variables
Fixed 13
  • Revert locale-driven flow re-request from FlowExecutor
  • Pass populate_policies in enterprise fleet connector endpoints
  • Use positive state filter for pending messages in django-dramatiq-postgres broker
  • Fix auth schema for device endpoints in agent connectors
  • Filter policy engine
  • Fix hcaptcha height in captcha stages

From authentik

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202656

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.5.5...version/2026.5.6

View originalPermalink
How version/2026.5.6 went
version/2026.5.5

Release 2026.5.5

Added 2
  • Add number and boolean support in AKQL queries on JSON fields
  • Add usage totals to licensing in admin interface
Changed 1
  • Improve id_token validation for Apple source
Fixed 8
  • Handle exception in connector controller sync setup
  • Fix race condition in continuous login and support source stages in authentication flows
  • Fix table refresh button not refreshing table data
  • Fix Log Viewer Intersection Observer
  • Fix ungrammatical expiry time in password reset templates
  • Improve error display when error doesn't conform to SCIM schema
  • Fix discover running for each page in outgoing sync
  • Close unusable PostgreSQL connections in django-dramatiq-postgres broker
Security 5
  • Apply security patch 1822
  • Apply security patch 1817
  • Apply security patch 1887
  • Apply security patch 1919
  • Apply security patch 1934

From authentik

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202655

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.5.4...version/2026.5.5

View originalPermalink
How version/2026.5.5 went
version/2026.2.6

Release 2026.2.6

Fixed 3
  • Fix discover running for each page in outgoing sync
  • Improve id_token validation for apple source
  • Close unusable PostgreSQL connections in django-dramatiq-postgres broker
Security 5
  • Apply security patch 1919
  • Apply security patch 1822
  • Apply security patch 1934
  • Apply security patch 1887
  • Apply security patch 1817

From authentik

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202626

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.2.5...version/2026.2.6

View originalPermalink
How version/2026.2.6 went
version/2026.5.4

Release 2026.5.4

Added 5
  • Add post logout and logout URLs to DokuWiki integration
  • Add additional SCIM provider documentation
  • Document SCIM source trust model and security implications
  • Add Splunk event forwarding documentation
  • Add improved AKQL documentation
Changed 6
  • Improve email authenticator documentation
  • Clarify user and group filtering on SCIM provider
  • Allow failures during SCIM discovery
  • Account for users with no email during SCIM discovery
  • Skip cache invalidation on user last_login update
  • Optimize database queries for monitoring and caching operations
Fixed 9
  • Fix user list default paths
  • Fix stale flow locale and unsynchronized locale selector options
  • Fix stale clipboard tokens and untranslated labels
  • Fix invitation emails ignoring selected template
  • Fix passkey autofill dropdown not showing on the identification stage
  • Fix broken custom email template example in documentation

From authentik

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202654

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.5.3...version/2026.5.4

View originalPermalink
How version/2026.5.4 went

More in Security & Privacy

View all
fanqiang

fanqiang release notes.

fanqiang
Magisk

The systemless rooting suite for Android, with modules and root hiding.

John Wu
x64dbg

x64dbg release notes.

x64dbg
uBlock Origin

The efficient, wide-spectrum content blocker for your browser.

Raymond Hill
v2rayNG

A V2Ray client for Android, support Xray core and v2fly core

2dust
Pi-hole

A DNS sinkhole that protects devices from unwanted content.

Pi-hole

Discussion

If you publish authentik, you can claim this product by proving you administer its repository.