version/2026.8.0
Release 2026.8.0
Added 4
- Add object attributes documentation
- Add configurable failure action to enterprise source stages
- Add audience override field for SAML sources
- Add login_hint to auth_ia in enterprise agent endpoints
Changed 5
- Blueprints now emit draft-07 definitions instead of $defs
- Optimize database queries for requestable apps in enterprise requests
- Decrease page size for fleet connectors in enterprise endpoints
- Tasks now aggregate status from logs instead of legacy field
- Scope user path_startswith filter to the path subtree
Fixed 11
- Fix DCR missing csrf_exempt in OAuth2 providers
- Fix missing preview banner for object attributes in web admin
- Fix prioritization in form serialization for dotted input fields
- Handle errors in endpoints facts
- Fix content_left and content_right layouts in web
- Include query string in post-authentication redirect for proxy outposts
- Fix mangled nested CSS in compatibility mode
- Fix group membership removals in SCIM provider
- Fix request access URL from agent not working in web user
- Fix token exchange provider lookup for actor and subject in OAuth2 providers
- Delete all user sessions when user is deactivated
From authentik
See https://docs.goauthentik.io/docs/releases/2026.8
What's Changed
- blueprints: emit draft-07 definitions instead of $defs (cherry-pick #24981 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24985
- website/docs: add object attributes doc (cherry-pick #24437 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24988
- providers/oauth2: fix dcr missing csrf_exempt (cherry-pick #24983 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24989
- web/admin: fix missing preview banner for object attributes (cherry-pick #24982 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24990
- enterprise/requests: optimize db for requestable apps (cherry-pick #24984 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24992
- enterprise/endpoints/connectors/fleet: decrease page size (cherry-pick #24995 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24997
- web/elements: fix prioritization in form serialization for dotted input-fields (cherry-pick #24987 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24996
- tasks: aggregate status from logs instead of legacy field (cherry-pick #24792 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25004
- enterprise/stages/source: configurable failure action (cherry-pick #24963 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25027
- endpoints: handle error in facts (cherry-pick #25028 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25032
- sources/saml: add audience override field for SAML sources (cherry-pick #25029 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25033
- web: Fix content_left/right layouts. (cherry-pick #25025 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25030
- website/docs: add 2026.8 release note for task status change (cherry-pick #25044 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25045
- outposts/proxy: include query string in post-authentication redirect (cherry-pick #25043 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25058
- website/docs: preserve host and port in proxy provider nginx redirects (cherry-pick #24991 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25000
- core: bump goauthentik/fips-python from 3.14.6-slim-trixie-fips to 3.14.7-slim-trixie-fips in /lifecycle/container (cherry-pick #25049 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25060
- web: Fix mangled nested CSS in compatibility mode. (cherry-pick #25053 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25063
- ci: require test-rust to pass (cherry-pick #25066 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25068
- providers/scim: fix group membership removals (cherry-pick #25024 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25067
- website/docs: correct proxy unauthenticated path regex reference (cherry-pick #25077 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25082
- website/docs: match UI label capitalization and add a style rule (cherry-pick #25080 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25084
- website/docs: update source field labels renamed in 2026.8 (cherry-pick #25072 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25085
- packages/django-dramatiq-postgres/broker: chunked purge queryset (cherry-pick #25102 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25106
- enterprise/requests: fix API schema for grant requests (cherry-pick #25111 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25114
- web/user: fix request access URL from agent not working (cherry-pick #25113 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25118
- providers/oauth2: fix token exchange provider lookup for actor/subject (cherry-pick #25110 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25116
- enterprise/endpoints/connectors/agent: add login_hint to auth_ia (cherry-pick #25122 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25124
- core: scope user path_startswith filter to the path subtree (cherry-pick #25093 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25145
- website/docs: agents: add doc (cherry-pick #24826 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25150
- sources/telegram: restore next= redirect after pre_authentication_flow (cherry-pick #22762 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25152
- core: delete all user sessions when user is deactivated (cherry-pick #25088 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25104
- website/docs: mark deprecated PostgreSQL options and fix listen settings (cherry-pick #25074 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25083
- web: bump dompurify from 3.4.12 to 3.4.13 in /web (cherry-pick #24892 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25002
- website/docs: add access requests doc (cherry-pick #24457 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25161
- providers/oauth2: send back-channel logout requests when a user is deactivated (cherry-pick #24718 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25109
- core: bump h2 from 0.4.15 to 0.4.16 (cherry-pick #25183 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25186
- stages/email: fix test_email ignoring the given stage (cherry-pick #25166 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25190
- providers/radius: allow empty message authenticator (cherry-pick #25097 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25197
- website/docs: add OBO (cherry-pick #25149 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25192
- enterprise: increase cache duration and ensure summary is cached (cherry-pick #25187 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25199
- website/docs: 2026.8 release notes: add features and links to docs (cherry-pick #25194 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25201
Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc7...version/2026.8.0