# authentik version/2026.8.0-rc7 — Release 2026.8.0-rc7

- Product: authentik (https://whatsnew.fyi/product/authentik)
- Vendor: Authentik Security
- Date: 2026-08-10
- Version: version/2026.8.0-rc7
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc7
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc7
- Labels: Pre-release

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add CAS source integration
- **added** — Add EQ and NEQ modes to the Condition tag in blueprints
- **added** — Add enterprise agents
- **changed** — Update styling for user account switcher
- **changed** — Allow line-break in dom-purify
- **changed** — Contain long text in tables and application cards
- **fixed** — Fix alignment of task list filters
- **fixed** — Fix mismatched stage name in example 2FA login flow
- **fixed** — Fix missing authorization event for OAuth provider
- **fixed** — Fix missing required flag on password input
- **fixed** — Fix file search input interactions
- **fixed** — Fix enterprise required check for agents
- **fixed** — Avoid looping indefinitely on embedded outpost start
- **fixed** — Fix client_credentials regression in OAuth2 provider
- **fixed** — Handle invalid YAML in blueprints and add dry run to apply_blueprint
- **removed** — Drop misleading delete consequences from user activation review
- **changed** — Only show requests tab when usable in enterprise
- **changed** — Bump Django from 5.2.16 to 5.2.17
- **changed** — Pin pnpm to 11.20.0
- **changed** — Add OAuth2 token exchange delegation
- **fixed** — Delete expired actor tokens

See https://next.goauthentik.io/docs/releases/2026.8


##### What's Changed
* core: Actors (cherry-pick #24353 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24709
* website/docs: document API scope and domain join required by the authentik Agent (cherry-pick #24599 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24715
* website/docs: Add feedback from previous agent pr (cherry-pick #24713 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24735
* enterprise/requests: only show requests tab when usable (cherry-pick #24705 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24743
* providers/oauth2: token exchange delegation (cherry-pick #24356 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24745
* website/docs: fix broken link in 2026.11 release notes draft (cherry-pick #24746 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24747
* website/docs: release notes: add ws-fed info (cherry-pick #24659 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24661
* blueprints: fix mismatched stage name in example 2fa login flow (cherry-pick #24668 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24750
* web/components: update styling for user account switcher (cherry-pick #24749 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24753
* web/admin: fix alignment of task list filters (cherry-pick #24752 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24754
* website/docs: fix link in .8 release notes (cherry-pick #24757 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24758
* source/oauth: add cas source integration (cherry-pick #24737 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24768
* website/docs: recpatcha: add mention of google enterprise (cherry-pick #24658 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24769
* web/common: allow line-break in dom-purify (cherry-pick #24755 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24784
* core: delete expired actor tokens (cherry-pick #24767 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24783
* web/admin: drop misleading delete consequences from user activation review (cherry-pick #24273 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24787
* enterprise/agents: add (cherry-pick #24598 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24790
* core: bump django from 5.2.16 to v5.2.17 (cherry-pick #24793 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24816
* blueprints: handle invalid yaml, add dry run to apply_blueprint (cherry-pick #24813 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24821
* providers/oauth2: fix missing authorization event for oauth provider, add tests (cherry-pick #24819 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24822
* enterprise/agents: fix enterprise required check for agents (cherry-pick #24814 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24825
* server: avoid looping indefinitely on embedded outpost start (take 2) (cherry-pick #24824 to version-2026.8) by @authentik-cherry-pick[bot] in https://

_[Truncated at 4000 characters — full notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc7]_