Github/authentik
1
0
Fork 0
mirror of https://github.com/goauthentik/authentik.git synced 2026-08-30 18:51:39 -07:00
Code Issues Packages Projects Releases Wiki Activity
Files
dominic/wg-integr
authentik/blueprints/schema.json
Jens L. e5336c757f enterprise/stages/source: configurable failure action (#24963) 
* enterprise/stages/source: configurable failure action

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rework to exception

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* Revert "rework to exception"

This reverts commit 6b18fb6f10.

* Reapply "rework to exception"

This reverts commit 6f6ae67f99.

* actually nah fix it

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* Revert "actually nah fix it"

This reverts commit a8e1d0e83d.

* Revert "Reapply "rework to exception""

This reverts commit 70d001a255.

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-08-12 12:56:30 +01:00

18618 lines
818 KiB
JSON
Raw Permalink Blame History

{
"$schema": "http://json-schema.org/draft-07/schema",
"$id": "https://goauthentik.io/blueprints/schema.json",
"type": "object",
"title": "authentik 2026.11.0-rc1 Blueprint schema",
"required": [
"version",
"entries"
],
"properties": {
"version": {
"$id": "#/properties/version",
"type": "integer",
"title": "Blueprint version",
"default": 1
},
"metadata": {
"$id": "#/properties/metadata",
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string"
},
"labels": {
"type": "object",
"additionalProperties": {
"type": "string"
}
}
}
},
"context": {
"$id": "#/properties/context",
"type": "object",
"additionalProperties": true
},
"entries": {
"anyOf": [
{
"type": "array",
"items": {
"$ref": "#/definitions/blueprint_entry"
}
},
{
"type": "object",
"additionalProperties": {
"type": "array",
"items": {
"$ref": "#/definitions/blueprint_entry"
}
}
}
]
}
},
"definitions": {
"blueprint_entry": {
"oneOf": [
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_blueprints.blueprintinstance"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_blueprints.blueprintinstance_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_blueprints.blueprintinstance"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_blueprints.blueprintinstance"
}
}
},
{
"type": "object",
"required": [
"model"
],
"properties": {
"model": {
"const": "authentik_blueprints.metaapplyblueprint"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_blueprints.metaapplyblueprint_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_blueprints.metaapplyblueprint"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_brands.brand"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_brands.brand_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_brands.brand"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_brands.brand"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.actor"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.actor_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.actor"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.actor"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.application"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.application_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.application"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.application"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.applicationentitlement"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.applicationentitlement_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.applicationentitlement"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.applicationentitlement"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.group"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.group_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.group"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.group"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.objectattribute"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.objectattribute_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.objectattribute"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.objectattribute"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.token"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.token_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.token"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.token"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_core.user"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_core.user_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_core.user"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_core.user"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_crypto.certificatekeypair"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_crypto.certificatekeypair_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_crypto.certificatekeypair"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_crypto.certificatekeypair"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints_connectors_agent.agentconnector"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.agentconnector_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.agentconnector"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.agentconnector"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints_connectors_agent.agentdeviceuserbinding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.agentdeviceuserbinding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.agentdeviceuserbinding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.agentdeviceuserbinding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints_connectors_agent.enrollmenttoken"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.enrollmenttoken_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.enrollmenttoken"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_agent.enrollmenttoken"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints.deviceaccessgroup"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints.deviceaccessgroup_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints.deviceaccessgroup"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints.deviceaccessgroup"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints.deviceuserbinding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints.deviceuserbinding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints.deviceuserbinding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints.deviceuserbinding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints.endpointstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints.endpointstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints.endpointstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints.endpointstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_agents.agent"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_agents.agent_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_agents.agent"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_agents.agent"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints_connectors_fleet.fleetconnector"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_fleet.fleetconnector_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_fleet.fleetconnector"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_fleet.fleetconnector"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_endpoints_connectors_google_chrome.googlechromeconnector"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_google_chrome.googlechromeconnector_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_google_chrome.googlechromeconnector"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_endpoints_connectors_google_chrome.googlechromeconnector"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_lifecycle.useroffboarding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_lifecycle.useroffboarding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_lifecycle.useroffboarding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_lifecycle.useroffboarding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_lifecycle.lifecycleiteration"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_lifecycle.lifecycleiteration_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_lifecycle.lifecycleiteration"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_lifecycle.lifecycleiteration"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_lifecycle.lifecyclerule"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_lifecycle.lifecyclerule_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_lifecycle.lifecyclerule"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_lifecycle.lifecyclerule"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_lifecycle.review"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_lifecycle.review_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_lifecycle.review"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_lifecycle.review"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_enterprise.license"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_enterprise.license_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_enterprise.license"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_enterprise.license"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_unique_password.uniquepasswordpolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_unique_password.uniquepasswordpolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_unique_password.uniquepasswordpolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_unique_password.uniquepasswordpolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_google_workspace.googleworkspaceprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_google_workspace.googleworkspaceprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_google_workspace.googleworkspaceprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_google_workspace.googleworkspaceprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_google_workspace.googleworkspaceprovidermapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_google_workspace.googleworkspaceprovidermapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_google_workspace.googleworkspaceprovidermapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_google_workspace.googleworkspaceprovidermapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_microsoft_entra.microsoftentraprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_microsoft_entra.microsoftentraprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_microsoft_entra.microsoftentraprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_microsoft_entra.microsoftentraprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_microsoft_entra.microsoftentraprovidermapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_microsoft_entra.microsoftentraprovidermapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_microsoft_entra.microsoftentraprovidermapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_microsoft_entra.microsoftentraprovidermapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_ssf.ssfprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_ssf.ssfprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_ssf.ssfprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_ssf.ssfprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_ws_federation.wsfederationprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_ws_federation.wsfederationprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_ws_federation.wsfederationprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_ws_federation.wsfederationprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_reports.dataexport"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_reports.dataexport_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_reports.dataexport"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_reports.dataexport"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_requests.grantrequest"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_requests.grantrequest_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_requests.grantrequest"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_requests.grantrequest"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_requests.requestrule"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_requests.requestrule_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_requests.requestrule"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_requests.requestrule"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_requests.requestrulebinding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_requests.requestrulebinding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_requests.requestrulebinding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_requests.requestrulebinding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_requests.requestrulechildbinding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_requests.requestrulechildbinding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_requests.requestrulechildbinding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_requests.requestrulechildbinding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_account_lockdown.accountlockdownstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_account_lockdown.accountlockdownstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_account_lockdown.accountlockdownstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_account_lockdown.accountlockdownstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_mtls.mutualtlsstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_mtls.mutualtlsstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_mtls.mutualtlsstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_mtls.mutualtlsstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_source.sourcestage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_source.sourcestage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_source.sourcestage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_source.sourcestage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_events.event"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_events.event_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_events.event"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_events.event"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_events.notification"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_events.notification_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_events.notification"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_events.notification"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_events.notificationrule"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_events.notificationrule_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_events.notificationrule"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_events.notificationrule"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_events.notificationtransport"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_events.notificationtransport_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_events.notificationtransport"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_events.notificationtransport"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_events.notificationwebhookmapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_events.notificationwebhookmapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_events.notificationwebhookmapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_events.notificationwebhookmapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_flows.flow"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_flows.flow_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_flows.flow"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_flows.flow"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_flows.flowstagebinding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_flows.flowstagebinding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_flows.flowstagebinding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_flows.flowstagebinding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_outposts.dockerserviceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_outposts.dockerserviceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_outposts.dockerserviceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_outposts.dockerserviceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_outposts.kubernetesserviceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_outposts.kubernetesserviceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_outposts.kubernetesserviceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_outposts.kubernetesserviceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_outposts.outpost"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_outposts.outpost_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_outposts.outpost"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_outposts.outpost"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_dummy.dummypolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_dummy.dummypolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_dummy.dummypolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_dummy.dummypolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_event_matcher.eventmatcherpolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_event_matcher.eventmatcherpolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_event_matcher.eventmatcherpolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_event_matcher.eventmatcherpolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_expiry.passwordexpirypolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_expiry.passwordexpirypolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_expiry.passwordexpirypolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_expiry.passwordexpirypolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_expression.expressionpolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_expression.expressionpolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_expression.expressionpolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_expression.expressionpolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_geoip.geoippolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_geoip.geoippolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_geoip.geoippolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_geoip.geoippolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies.policybinding"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies.policybinding_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies.policybinding"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies.policybinding"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_password.passwordpolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_password.passwordpolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_password.passwordpolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_password.passwordpolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_policies_reputation.reputationpolicy"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_policies_reputation.reputationpolicy_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_policies_reputation.reputationpolicy"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_policies_reputation.reputationpolicy"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_ldap.ldapprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_ldap.ldapprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_ldap.ldapprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_ldap.ldapprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_oauth2.oauth2dynamicclientregistration"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_oauth2.oauth2dynamicclientregistration_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_oauth2.oauth2dynamicclientregistration"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_oauth2.oauth2dynamicclientregistration"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_oauth2.oauth2provider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_oauth2.oauth2provider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_oauth2.oauth2provider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_oauth2.oauth2provider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_oauth2.scopemapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_oauth2.scopemapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_oauth2.scopemapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_oauth2.scopemapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_proxy.proxyprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_proxy.proxyprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_proxy.proxyprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_proxy.proxyprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_rac.endpoint"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_rac.endpoint_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_rac.endpoint"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_rac.endpoint"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_rac.racpropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_rac.racpropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_rac.racpropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_rac.racpropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_rac.racprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_rac.racprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_rac.racprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_rac.racprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_radius.radiusprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_radius.radiusprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_radius.radiusprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_radius.radiusprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_radius.radiusproviderpropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_radius.radiusproviderpropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_radius.radiusproviderpropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_radius.radiusproviderpropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_saml.samlpropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_saml.samlpropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_saml.samlpropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_saml.samlpropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_saml.samlprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_saml.samlprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_saml.samlprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_saml.samlprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_scim.scimmapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_scim.scimmapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_scim.scimmapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_scim.scimmapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_providers_scim.scimprovider"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_providers_scim.scimprovider_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_providers_scim.scimprovider"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_providers_scim.scimprovider"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_rbac.initialpermissions"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_rbac.initialpermissions_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_rbac.initialpermissions"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_rbac.initialpermissions"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_rbac.role"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_rbac.role_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_rbac.role"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_rbac.role"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_kerberos.groupkerberossourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_kerberos.groupkerberossourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_kerberos.groupkerberossourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_kerberos.groupkerberossourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_kerberos.kerberossource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_kerberos.kerberossource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_kerberos.kerberossource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_kerberos.kerberossource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_kerberos.kerberossourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_kerberos.kerberossourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_kerberos.kerberossourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_kerberos.kerberossourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_kerberos.userkerberossourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_kerberos.userkerberossourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_kerberos.userkerberossourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_kerberos.userkerberossourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_ldap.groupldapsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_ldap.groupldapsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_ldap.groupldapsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_ldap.groupldapsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_ldap.ldapsource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_ldap.ldapsource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_ldap.ldapsource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_ldap.ldapsource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_ldap.ldapsourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_ldap.ldapsourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_ldap.ldapsourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_ldap.ldapsourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_ldap.userldapsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_ldap.userldapsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_ldap.userldapsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_ldap.userldapsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_oauth.groupoauthsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_oauth.groupoauthsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_oauth.groupoauthsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_oauth.groupoauthsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_oauth.oauthsource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_oauth.oauthsource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_oauth.oauthsource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_oauth.oauthsource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_oauth.oauthsourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_oauth.oauthsourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_oauth.oauthsourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_oauth.oauthsourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_oauth.useroauthsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_oauth.useroauthsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_oauth.useroauthsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_oauth.useroauthsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_plex.groupplexsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_plex.groupplexsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_plex.groupplexsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_plex.groupplexsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_plex.plexsource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_plex.plexsource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_plex.plexsource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_plex.plexsource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_plex.plexsourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_plex.plexsourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_plex.plexsourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_plex.plexsourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_plex.userplexsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_plex.userplexsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_plex.userplexsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_plex.userplexsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_saml.groupsamlsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_saml.groupsamlsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_saml.groupsamlsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_saml.groupsamlsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_saml.samlsource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_saml.samlsource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_saml.samlsource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_saml.samlsource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_saml.samlsourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_saml.samlsourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_saml.samlsourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_saml.samlsourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_saml.usersamlsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_saml.usersamlsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_saml.usersamlsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_saml.usersamlsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_scim.scimsource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_scim.scimsource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_scim.scimsource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_scim.scimsource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_scim.scimsourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_scim.scimsourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_scim.scimsourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_scim.scimsourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_telegram.grouptelegramsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_telegram.grouptelegramsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_telegram.grouptelegramsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_telegram.grouptelegramsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_telegram.telegramsource"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_telegram.telegramsource_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_telegram.telegramsource"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_telegram.telegramsource"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_telegram.telegramsourcepropertymapping"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_telegram.telegramsourcepropertymapping_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_telegram.telegramsourcepropertymapping"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_telegram.telegramsourcepropertymapping"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_sources_telegram.usertelegramsourceconnection"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_sources_telegram.usertelegramsourceconnection_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_sources_telegram.usertelegramsourceconnection"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_sources_telegram.usertelegramsourceconnection"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_duo.authenticatorduostage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_duo.authenticatorduostage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_duo.authenticatorduostage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_duo.authenticatorduostage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_duo.duodevice"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_duo.duodevice_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_duo.duodevice"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_duo.duodevice"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_email.authenticatoremailstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_email.authenticatoremailstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_email.authenticatoremailstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_email.authenticatoremailstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_email.emaildevice"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_email.emaildevice_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_email.emaildevice"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_email.emaildevice"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_sms.authenticatorsmsstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_sms.authenticatorsmsstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_sms.authenticatorsmsstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_sms.authenticatorsmsstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_sms.smsdevice"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_sms.smsdevice_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_sms.smsdevice"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_sms.smsdevice"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_static.authenticatorstaticstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_static.authenticatorstaticstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_static.authenticatorstaticstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_static.authenticatorstaticstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_static.staticdevice"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_static.staticdevice_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_static.staticdevice"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_static.staticdevice"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_totp.authenticatortotpstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_totp.authenticatortotpstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_totp.authenticatortotpstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_totp.authenticatortotpstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_totp.totpdevice"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_totp.totpdevice_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_totp.totpdevice"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_totp.totpdevice"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_validate.authenticatorvalidatestage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_validate.authenticatorvalidatestage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_validate.authenticatorvalidatestage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_validate.authenticatorvalidatestage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_webauthn.authenticatorwebauthnstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_webauthn.authenticatorwebauthnstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_webauthn.authenticatorwebauthnstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_webauthn.authenticatorwebauthnstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_authenticator_webauthn.webauthndevice"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_authenticator_webauthn.webauthndevice_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_authenticator_webauthn.webauthndevice"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_authenticator_webauthn.webauthndevice"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_captcha.captchastage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_captcha.captchastage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_captcha.captchastage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_captcha.captchastage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_consent.consentstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_consent.consentstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_consent.consentstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_consent.consentstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_deny.denystage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_deny.denystage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_deny.denystage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_deny.denystage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_dummy.dummystage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_dummy.dummystage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_dummy.dummystage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_dummy.dummystage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_email.emailstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_email.emailstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_email.emailstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_email.emailstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_identification.identificationstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_identification.identificationstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_identification.identificationstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_identification.identificationstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_invitation.invitation"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_invitation.invitation_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_invitation.invitation"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_invitation.invitation"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_invitation.invitationstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_invitation.invitationstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_invitation.invitationstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_invitation.invitationstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_password.passwordstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_password.passwordstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_password.passwordstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_password.passwordstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_prompt.prompt"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_prompt.prompt_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_prompt.prompt"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_prompt.prompt"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_prompt.promptstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_prompt.promptstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_prompt.promptstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_prompt.promptstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_redirect.redirectstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_redirect.redirectstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_redirect.redirectstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_redirect.redirectstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_user_delete.userdeletestage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_user_delete.userdeletestage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_user_delete.userdeletestage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_user_delete.userdeletestage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_user_login.userloginstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_user_login.userloginstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_user_login.userloginstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_user_login.userloginstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_user_logout.userlogoutstage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_user_logout.userlogoutstage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_user_logout.userlogoutstage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_user_logout.userlogoutstage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_stages_user_write.userwritestage"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_stages_user_write.userwritestage_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_stages_user_write.userwritestage"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_stages_user_write.userwritestage"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_tasks_schedules.schedule"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_tasks_schedules.schedule_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_tasks_schedules.schedule"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_tasks_schedules.schedule"
}
}
},
{
"type": "object",
"required": [
"model",
"identifiers"
],
"properties": {
"model": {
"const": "authentik_tenants.domain"
},
"id": {
"type": "string"
},
"state": {
"type": "string",
"enum": [
"absent",
"created",
"must_created",
"present"
],
"default": "present"
},
"conditions": {
"type": "array",
"items": {
"type": "boolean"
}
},
"permissions": {
"$ref": "#/definitions/model_authentik_tenants.domain_permissions"
},
"attrs": {
"$ref": "#/definitions/model_authentik_tenants.domain"
},
"identifiers": {
"$ref": "#/definitions/model_authentik_tenants.domain"
}
}
}
]
},
"model_authentik_blueprints.blueprintinstance": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"path": {
"type": "string",
"title": "Path"
},
"context": {
"type": "object",
"additionalProperties": true,
"title": "Context"
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"content": {
"type": "string",
"title": "Content"
}
},
"required": []
},
"model_authentik_blueprints.blueprintinstance_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_blueprintinstance",
"change_blueprintinstance",
"delete_blueprintinstance",
"view_blueprintinstance"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_blueprints.metaapplyblueprint": {
"type": "object",
"properties": {
"identifiers": {
"type": "object",
"additionalProperties": true,
"title": "Identifiers"
},
"required": {
"type": "boolean",
"title": "Required"
}
},
"required": []
},
"model_authentik_blueprints.metaapplyblueprint_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_metaapplyblueprint",
"change_metaapplyblueprint",
"delete_metaapplyblueprint",
"view_metaapplyblueprint"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_brands.brand": {
"type": "object",
"properties": {
"domain": {
"type": "string",
"minLength": 1,
"title": "Domain",
"description": "Domain that activates this brand. Can be a superset, i.e. `a.b` for `aa.b` and `ba.b`"
},
"default": {
"type": "boolean",
"title": "Default"
},
"branding_title": {
"type": "string",
"minLength": 1,
"title": "Branding title"
},
"branding_logo": {
"type": "string",
"minLength": 1,
"title": "Branding logo"
},
"branding_favicon": {
"type": "string",
"minLength": 1,
"title": "Branding favicon"
},
"branding_custom_css": {
"type": "string",
"title": "Branding custom css"
},
"branding_default_flow_background": {
"type": "string",
"minLength": 1,
"title": "Branding default flow background"
},
"branding_map_tiles": {
"type": "string",
"title": "Branding map tiles",
"description": "URL template for the vector tile source used by the events map. Supports XYZ templates with {z}, {x} and {y} placeholders, or pmtiles:// archive URLs. When empty, the frontend uses the bundled hexworld basemap. This value is part of the brand information served to unauthenticated clients; do not embed API keys or other credentials in it."
},
"flow_authentication": {
"type": "string",
"format": "uuid",
"title": "Flow authentication"
},
"flow_user_switch": {
"type": "string",
"format": "uuid",
"title": "Flow user switch"
},
"flow_invalidation": {
"type": "string",
"format": "uuid",
"title": "Flow invalidation"
},
"flow_recovery": {
"type": "string",
"format": "uuid",
"title": "Flow recovery"
},
"flow_unenrollment": {
"type": "string",
"format": "uuid",
"title": "Flow unenrollment"
},
"flow_user_settings": {
"type": "string",
"format": "uuid",
"title": "Flow user settings"
},
"flow_device_code": {
"type": "string",
"format": "uuid",
"title": "Flow device code"
},
"flow_lockdown": {
"type": "string",
"format": "uuid",
"title": "Flow lockdown"
},
"flow_request": {
"type": "string",
"format": "uuid",
"title": "Flow request"
},
"default_application": {
"type": "string",
"format": "uuid",
"title": "Default application",
"description": "When set, external users will be redirected to this application after authenticating."
},
"web_certificate": {
"type": "string",
"format": "uuid",
"title": "Web certificate",
"description": "Web Certificate used by the authentik Core webserver."
},
"client_certificates": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Certificates used for client authentication."
},
"title": "Client certificates",
"description": "Certificates used for client authentication."
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
}
},
"required": []
},
"model_authentik_brands.brand_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_brand",
"change_brand",
"delete_brand",
"view_brand"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.actor": {
"type": "object",
"properties": {
"username": {
"type": "string",
"maxLength": 150,
"minLength": 1,
"title": "Username"
},
"name": {
"type": "string",
"title": "Name",
"description": "User's display name."
},
"is_active": {
"type": "boolean",
"title": "Active",
"description": "Designates whether this user should be treated as active. Unselect this instead of deleting accounts."
},
"last_login": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Last login"
},
"groups": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Groups"
},
"roles": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Roles"
},
"email": {
"type": "string",
"format": "email",
"maxLength": 254,
"title": "Email address"
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
},
"path": {
"type": "string",
"minLength": 1,
"title": "Path"
},
"type": {
"type": "string",
"enum": [
"internal",
"external",
"service_account",
"internal_service_account"
],
"title": "Type"
},
"password": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Password"
},
"password_hash": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Password hash"
},
"permissions": {
"type": "array",
"items": {
"type": "string",
"enum": [
"authentik_agents.add_agent",
"authentik_agents.add_agent_self_service",
"authentik_agents.change_agent",
"authentik_agents.delete_agent",
"authentik_agents.view_agent",
"authentik_blueprints.add_blueprintinstance",
"authentik_blueprints.change_blueprintinstance",
"authentik_blueprints.delete_blueprintinstance",
"authentik_blueprints.view_blueprintinstance",
"authentik_brands.add_brand",
"authentik_brands.add_brandclientcertificate",
"authentik_brands.change_brand",
"authentik_brands.change_brandclientcertificate",
"authentik_brands.delete_brand",
"authentik_brands.delete_brandclientcertificate",
"authentik_brands.view_brand",
"authentik_brands.view_brandclientcertificate",
"authentik_core.add_actor",
"authentik_core.add_application",
"authentik_core.add_applicationentitlement",
"authentik_core.add_authenticatedsession",
"authentik_core.add_group",
"authentik_core.add_groupancestrynode",
"authentik_core.add_groupparentagenode",
"authentik_core.add_grouprole",
"authentik_core.add_groupsourceconnection",
"authentik_core.add_objectattribute",
"authentik_core.add_propertymapping",
"authentik_core.add_provider",
"authentik_core.add_providerpropertymapping",
"authentik_core.add_source",
"authentik_core.add_sourcegrouppropertymapping",
"authentik_core.add_sourceuserpropertymapping",
"authentik_core.add_token",
"authentik_core.add_user",
"authentik_core.add_user_to_group",
"authentik_core.add_usergroup",
"authentik_core.add_userrole",
"authentik_core.add_usersourceconnection",
"authentik_core.change_actor",
"authentik_core.change_application",
"authentik_core.change_applicationentitlement",
"authentik_core.change_authenticatedsession",
"authentik_core.change_group",
"authentik_core.change_groupancestrynode",
"authentik_core.change_groupparentagenode",
"authentik_core.change_grouprole",
"authentik_core.change_groupsourceconnection",
"authentik_core.change_objectattribute",
"authentik_core.change_propertymapping",
"authentik_core.change_provider",
"authentik_core.change_providerpropertymapping",
"authentik_core.change_source",
"authentik_core.change_sourcegrouppropertymapping",
"authentik_core.change_sourceuserpropertymapping",
"authentik_core.change_token",
"authentik_core.change_user",
"authentik_core.change_usergroup",
"authentik_core.change_userrole",
"authentik_core.change_usersourceconnection",
"authentik_core.delete_actor",
"authentik_core.delete_application",
"authentik_core.delete_applicationentitlement",
"authentik_core.delete_authenticatedsession",
"authentik_core.delete_group",
"authentik_core.delete_groupancestrynode",
"authentik_core.delete_groupparentagenode",
"authentik_core.delete_grouprole",
"authentik_core.delete_groupsourceconnection",
"authentik_core.delete_objectattribute",
"authentik_core.delete_propertymapping",
"authentik_core.delete_provider",
"authentik_core.delete_providerpropertymapping",
"authentik_core.delete_source",
"authentik_core.delete_sourcegrouppropertymapping",
"authentik_core.delete_sourceuserpropertymapping",
"authentik_core.delete_token",
"authentik_core.delete_user",
"authentik_core.delete_usergroup",
"authentik_core.delete_userrole",
"authentik_core.delete_usersourceconnection",
"authentik_core.disable_group_superuser",
"authentik_core.enable_group_superuser",
"authentik_core.impersonate",
"authentik_core.preview_user",
"authentik_core.remove_user_from_group",
"authentik_core.reset_user_password",
"authentik_core.set_token_key",
"authentik_core.view_actor",
"authentik_core.view_application",
"authentik_core.view_applicationentitlement",
"authentik_core.view_authenticatedsession",
"authentik_core.view_group",
"authentik_core.view_groupancestrynode",
"authentik_core.view_groupparentagenode",
"authentik_core.view_grouprole",
"authentik_core.view_groupsourceconnection",
"authentik_core.view_objectattribute",
"authentik_core.view_propertymapping",
"authentik_core.view_provider",
"authentik_core.view_providerpropertymapping",
"authentik_core.view_source",
"authentik_core.view_sourcegrouppropertymapping",
"authentik_core.view_sourceuserpropertymapping",
"authentik_core.view_token",
"authentik_core.view_token_key",
"authentik_core.view_user",
"authentik_core.view_user_applications",
"authentik_core.view_usergroup",
"authentik_core.view_userrole",
"authentik_core.view_usersourceconnection",
"authentik_crypto.add_certificatekeypair",
"authentik_crypto.change_certificatekeypair",
"authentik_crypto.delete_certificatekeypair",
"authentik_crypto.view_certificatekeypair",
"authentik_crypto.view_certificatekeypair_certificate",
"authentik_crypto.view_certificatekeypair_key",
"authentik_endpoints.add_connector",
"authentik_endpoints.add_device",
"authentik_endpoints.add_deviceaccessgroup",
"authentik_endpoints.add_deviceconnection",
"authentik_endpoints.add_devicefactsnapshot",
"authentik_endpoints.add_deviceuserbinding",
"authentik_endpoints.add_endpointstage",
"authentik_endpoints.change_connector",
"authentik_endpoints.change_device",
"authentik_endpoints.change_deviceaccessgroup",
"authentik_endpoints.change_deviceconnection",
"authentik_endpoints.change_devicefactsnapshot",
"authentik_endpoints.change_deviceuserbinding",
"authentik_endpoints.change_endpointstage",
"authentik_endpoints.delete_connector",
"authentik_endpoints.delete_device",
"authentik_endpoints.delete_deviceaccessgroup",
"authentik_endpoints.delete_deviceconnection",
"authentik_endpoints.delete_devicefactsnapshot",
"authentik_endpoints.delete_deviceuserbinding",
"authentik_endpoints.delete_endpointstage",
"authentik_endpoints.view_connector",
"authentik_endpoints.view_device",
"authentik_endpoints.view_deviceaccessgroup",
"authentik_endpoints.view_deviceconnection",
"authentik_endpoints.view_devicefactsnapshot",
"authentik_endpoints.view_deviceuserbinding",
"authentik_endpoints.view_endpointstage",
"authentik_endpoints_connectors_agent.add_agentconnector",
"authentik_endpoints_connectors_agent.add_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.add_agentdeviceconnection",
"authentik_endpoints_connectors_agent.add_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.add_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.add_applenonce",
"authentik_endpoints_connectors_agent.add_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.add_devicetoken",
"authentik_endpoints_connectors_agent.add_enrollmenttoken",
"authentik_endpoints_connectors_agent.change_agentconnector",
"authentik_endpoints_connectors_agent.change_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.change_agentdeviceconnection",
"authentik_endpoints_connectors_agent.change_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.change_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.change_applenonce",
"authentik_endpoints_connectors_agent.change_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.change_devicetoken",
"authentik_endpoints_connectors_agent.change_enrollmenttoken",
"authentik_endpoints_connectors_agent.delete_agentconnector",
"authentik_endpoints_connectors_agent.delete_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.delete_agentdeviceconnection",
"authentik_endpoints_connectors_agent.delete_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.delete_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.delete_applenonce",
"authentik_endpoints_connectors_agent.delete_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.delete_devicetoken",
"authentik_endpoints_connectors_agent.delete_enrollmenttoken",
"authentik_endpoints_connectors_agent.view_agentconnector",
"authentik_endpoints_connectors_agent.view_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.view_agentdeviceconnection",
"authentik_endpoints_connectors_agent.view_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.view_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.view_applenonce",
"authentik_endpoints_connectors_agent.view_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.view_devicetoken",
"authentik_endpoints_connectors_agent.view_enrollment_token_key",
"authentik_endpoints_connectors_agent.view_enrollmenttoken",
"authentik_endpoints_connectors_fleet.add_fleetconnector",
"authentik_endpoints_connectors_fleet.change_fleetconnector",
"authentik_endpoints_connectors_fleet.delete_fleetconnector",
"authentik_endpoints_connectors_fleet.view_fleetconnector",
"authentik_endpoints_connectors_google_chrome.add_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.change_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.delete_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.view_googlechromeconnector",
"authentik_enterprise.add_license",
"authentik_enterprise.add_licenseusage",
"authentik_enterprise.change_license",
"authentik_enterprise.change_licenseusage",
"authentik_enterprise.delete_license",
"authentik_enterprise.delete_licenseusage",
"authentik_enterprise.view_license",
"authentik_enterprise.view_licenseusage",
"authentik_events.add_event",
"authentik_events.add_notification",
"authentik_events.add_notificationrule",
"authentik_events.add_notificationrulenotificationtransport",
"authentik_events.add_notificationtransport",
"authentik_events.add_notificationwebhookmapping",
"authentik_events.change_event",
"authentik_events.change_notification",
"authentik_events.change_notificationrule",
"authentik_events.change_notificationrulenotificationtransport",
"authentik_events.change_notificationtransport",
"authentik_events.change_notificationwebhookmapping",
"authentik_events.delete_event",
"authentik_events.delete_notification",
"authentik_events.delete_notificationrule",
"authentik_events.delete_notificationrulenotificationtransport",
"authentik_events.delete_notificationtransport",
"authentik_events.delete_notificationwebhookmapping",
"authentik_events.view_event",
"authentik_events.view_notification",
"authentik_events.view_notificationrule",
"authentik_events.view_notificationrulenotificationtransport",
"authentik_events.view_notificationtransport",
"authentik_events.view_notificationwebhookmapping",
"authentik_flows.add_flow",
"authentik_flows.add_flowstagebinding",
"authentik_flows.add_flowtoken",
"authentik_flows.add_stage",
"authentik_flows.change_flow",
"authentik_flows.change_flowstagebinding",
"authentik_flows.change_flowtoken",
"authentik_flows.change_stage",
"authentik_flows.clear_flow_cache",
"authentik_flows.delete_flow",
"authentik_flows.delete_flowstagebinding",
"authentik_flows.delete_flowtoken",
"authentik_flows.delete_stage",
"authentik_flows.export_flow",
"authentik_flows.inspect_flow",
"authentik_flows.view_flow",
"authentik_flows.view_flow_cache",
"authentik_flows.view_flowstagebinding",
"authentik_flows.view_flowtoken",
"authentik_flows.view_stage",
"authentik_lifecycle.add_lifecycleiteration",
"authentik_lifecycle.add_lifecyclerule",
"authentik_lifecycle.add_lifecyclerulenotificationtransport",
"authentik_lifecycle.add_lifecyclerulereviewer",
"authentik_lifecycle.add_lifecyclerulereviewergroup",
"authentik_lifecycle.add_review",
"authentik_lifecycle.add_useroffboarding",
"authentik_lifecycle.change_lifecycleiteration",
"authentik_lifecycle.change_lifecyclerule",
"authentik_lifecycle.change_lifecyclerulenotificationtransport",
"authentik_lifecycle.change_lifecyclerulereviewer",
"authentik_lifecycle.change_lifecyclerulereviewergroup",
"authentik_lifecycle.change_review",
"authentik_lifecycle.change_useroffboarding",
"authentik_lifecycle.delete_lifecycleiteration",
"authentik_lifecycle.delete_lifecyclerule",
"authentik_lifecycle.delete_lifecyclerulenotificationtransport",
"authentik_lifecycle.delete_lifecyclerulereviewer",
"authentik_lifecycle.delete_lifecyclerulereviewergroup",
"authentik_lifecycle.delete_review",
"authentik_lifecycle.delete_useroffboarding",
"authentik_lifecycle.view_lifecycleiteration",
"authentik_lifecycle.view_lifecyclerule",
"authentik_lifecycle.view_lifecyclerulenotificationtransport",
"authentik_lifecycle.view_lifecyclerulereviewer",
"authentik_lifecycle.view_lifecyclerulereviewergroup",
"authentik_lifecycle.view_review",
"authentik_lifecycle.view_useroffboarding",
"authentik_outposts.add_dockerserviceconnection",
"authentik_outposts.add_kubernetesserviceconnection",
"authentik_outposts.add_outpost",
"authentik_outposts.add_outpostprovider",
"authentik_outposts.add_outpostserviceconnection",
"authentik_outposts.change_dockerserviceconnection",
"authentik_outposts.change_kubernetesserviceconnection",
"authentik_outposts.change_outpost",
"authentik_outposts.change_outpostprovider",
"authentik_outposts.change_outpostserviceconnection",
"authentik_outposts.delete_dockerserviceconnection",
"authentik_outposts.delete_kubernetesserviceconnection",
"authentik_outposts.delete_outpost",
"authentik_outposts.delete_outpostprovider",
"authentik_outposts.delete_outpostserviceconnection",
"authentik_outposts.view_dockerserviceconnection",
"authentik_outposts.view_kubernetesserviceconnection",
"authentik_outposts.view_outpost",
"authentik_outposts.view_outpostprovider",
"authentik_outposts.view_outpostserviceconnection",
"authentik_policies.add_policy",
"authentik_policies.add_policybinding",
"authentik_policies.add_policybindingmodel",
"authentik_policies.change_policy",
"authentik_policies.change_policybinding",
"authentik_policies.change_policybindingmodel",
"authentik_policies.clear_policy_cache",
"authentik_policies.delete_policy",
"authentik_policies.delete_policybinding",
"authentik_policies.delete_policybindingmodel",
"authentik_policies.view_policy",
"authentik_policies.view_policy_cache",
"authentik_policies.view_policybinding",
"authentik_policies.view_policybindingmodel",
"authentik_policies_dummy.add_dummypolicy",
"authentik_policies_dummy.change_dummypolicy",
"authentik_policies_dummy.delete_dummypolicy",
"authentik_policies_dummy.view_dummypolicy",
"authentik_policies_event_matcher.add_eventmatcherpolicy",
"authentik_policies_event_matcher.change_eventmatcherpolicy",
"authentik_policies_event_matcher.delete_eventmatcherpolicy",
"authentik_policies_event_matcher.view_eventmatcherpolicy",
"authentik_policies_expiry.add_passwordexpirypolicy",
"authentik_policies_expiry.change_passwordexpirypolicy",
"authentik_policies_expiry.delete_passwordexpirypolicy",
"authentik_policies_expiry.view_passwordexpirypolicy",
"authentik_policies_expression.add_expressionpolicy",
"authentik_policies_expression.change_expressionpolicy",
"authentik_policies_expression.delete_expressionpolicy",
"authentik_policies_expression.view_expressionpolicy",
"authentik_policies_geoip.add_geoippolicy",
"authentik_policies_geoip.change_geoippolicy",
"authentik_policies_geoip.delete_geoippolicy",
"authentik_policies_geoip.view_geoippolicy",
"authentik_policies_password.add_passwordpolicy",
"authentik_policies_password.change_passwordpolicy",
"authentik_policies_password.delete_passwordpolicy",
"authentik_policies_password.view_passwordpolicy",
"authentik_policies_reputation.add_reputation",
"authentik_policies_reputation.add_reputationpolicy",
"authentik_policies_reputation.change_reputation",
"authentik_policies_reputation.change_reputationpolicy",
"authentik_policies_reputation.delete_reputation",
"authentik_policies_reputation.delete_reputationpolicy",
"authentik_policies_reputation.view_reputation",
"authentik_policies_reputation.view_reputationpolicy",
"authentik_policies_unique_password.add_uniquepasswordpolicy",
"authentik_policies_unique_password.add_userpasswordhistory",
"authentik_policies_unique_password.change_uniquepasswordpolicy",
"authentik_policies_unique_password.change_userpasswordhistory",
"authentik_policies_unique_password.delete_uniquepasswordpolicy",
"authentik_policies_unique_password.delete_userpasswordhistory",
"authentik_policies_unique_password.view_uniquepasswordpolicy",
"authentik_policies_unique_password.view_userpasswordhistory",
"authentik_providers_google_workspace.add_googleworkspaceprovider",
"authentik_providers_google_workspace.add_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.add_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.add_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.add_googleworkspaceprovideruser",
"authentik_providers_google_workspace.change_googleworkspaceprovider",
"authentik_providers_google_workspace.change_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.change_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.change_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.change_googleworkspaceprovideruser",
"authentik_providers_google_workspace.delete_googleworkspaceprovider",
"authentik_providers_google_workspace.delete_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.delete_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.delete_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.delete_googleworkspaceprovideruser",
"authentik_providers_google_workspace.view_googleworkspaceprovider",
"authentik_providers_google_workspace.view_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.view_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.view_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.view_googleworkspaceprovideruser",
"authentik_providers_ldap.add_ldapprovider",
"authentik_providers_ldap.change_ldapprovider",
"authentik_providers_ldap.delete_ldapprovider",
"authentik_providers_ldap.search_full_directory",
"authentik_providers_ldap.view_ldapprovider",
"authentik_providers_microsoft_entra.add_microsoftentraprovider",
"authentik_providers_microsoft_entra.add_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.add_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.add_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.add_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.change_microsoftentraprovider",
"authentik_providers_microsoft_entra.change_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.change_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.change_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.change_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.delete_microsoftentraprovider",
"authentik_providers_microsoft_entra.delete_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.delete_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.delete_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.delete_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.view_microsoftentraprovider",
"authentik_providers_microsoft_entra.view_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.view_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.view_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.view_microsoftentraprovideruser",
"authentik_providers_oauth2.add_accesstoken",
"authentik_providers_oauth2.add_authorizationcode",
"authentik_providers_oauth2.add_devicetoken",
"authentik_providers_oauth2.add_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.add_oauth2dynamicclientregistration",
"authentik_providers_oauth2.add_oauth2provider",
"authentik_providers_oauth2.add_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.add_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.add_refreshtoken",
"authentik_providers_oauth2.add_scopemapping",
"authentik_providers_oauth2.change_accesstoken",
"authentik_providers_oauth2.change_authorizationcode",
"authentik_providers_oauth2.change_devicetoken",
"authentik_providers_oauth2.change_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.change_oauth2dynamicclientregistration",
"authentik_providers_oauth2.change_oauth2provider",
"authentik_providers_oauth2.change_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.change_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.change_refreshtoken",
"authentik_providers_oauth2.change_scopemapping",
"authentik_providers_oauth2.delete_accesstoken",
"authentik_providers_oauth2.delete_authorizationcode",
"authentik_providers_oauth2.delete_devicetoken",
"authentik_providers_oauth2.delete_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.delete_oauth2dynamicclientregistration",
"authentik_providers_oauth2.delete_oauth2provider",
"authentik_providers_oauth2.delete_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.delete_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.delete_refreshtoken",
"authentik_providers_oauth2.delete_scopemapping",
"authentik_providers_oauth2.view_accesstoken",
"authentik_providers_oauth2.view_authorizationcode",
"authentik_providers_oauth2.view_devicetoken",
"authentik_providers_oauth2.view_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.view_oauth2dynamicclientregistration",
"authentik_providers_oauth2.view_oauth2provider",
"authentik_providers_oauth2.view_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.view_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.view_refreshtoken",
"authentik_providers_oauth2.view_scopemapping",
"authentik_providers_proxy.add_proxyprovider",
"authentik_providers_proxy.add_proxysession",
"authentik_providers_proxy.change_proxyprovider",
"authentik_providers_proxy.change_proxysession",
"authentik_providers_proxy.delete_proxyprovider",
"authentik_providers_proxy.delete_proxysession",
"authentik_providers_proxy.view_proxyprovider",
"authentik_providers_proxy.view_proxysession",
"authentik_providers_rac.add_connectiontoken",
"authentik_providers_rac.add_endpoint",
"authentik_providers_rac.add_endpointpropertymapping",
"authentik_providers_rac.add_racpropertymapping",
"authentik_providers_rac.add_racprovider",
"authentik_providers_rac.change_connectiontoken",
"authentik_providers_rac.change_endpoint",
"authentik_providers_rac.change_endpointpropertymapping",
"authentik_providers_rac.change_racpropertymapping",
"authentik_providers_rac.change_racprovider",
"authentik_providers_rac.delete_connectiontoken",
"authentik_providers_rac.delete_endpoint",
"authentik_providers_rac.delete_endpointpropertymapping",
"authentik_providers_rac.delete_racpropertymapping",
"authentik_providers_rac.delete_racprovider",
"authentik_providers_rac.view_connectiontoken",
"authentik_providers_rac.view_endpoint",
"authentik_providers_rac.view_endpointpropertymapping",
"authentik_providers_rac.view_racpropertymapping",
"authentik_providers_rac.view_racprovider",
"authentik_providers_radius.add_radiusprovider",
"authentik_providers_radius.add_radiusproviderpropertymapping",
"authentik_providers_radius.change_radiusprovider",
"authentik_providers_radius.change_radiusproviderpropertymapping",
"authentik_providers_radius.delete_radiusprovider",
"authentik_providers_radius.delete_radiusproviderpropertymapping",
"authentik_providers_radius.view_radiusprovider",
"authentik_providers_radius.view_radiusproviderpropertymapping",
"authentik_providers_saml.add_samlpropertymapping",
"authentik_providers_saml.add_samlprovider",
"authentik_providers_saml.add_samlsession",
"authentik_providers_saml.change_samlpropertymapping",
"authentik_providers_saml.change_samlprovider",
"authentik_providers_saml.change_samlsession",
"authentik_providers_saml.delete_samlpropertymapping",
"authentik_providers_saml.delete_samlprovider",
"authentik_providers_saml.delete_samlsession",
"authentik_providers_saml.view_samlpropertymapping",
"authentik_providers_saml.view_samlprovider",
"authentik_providers_saml.view_samlsession",
"authentik_providers_scim.add_scimmapping",
"authentik_providers_scim.add_scimprovider",
"authentik_providers_scim.add_scimprovidergroup",
"authentik_providers_scim.add_scimprovidergroupfilter",
"authentik_providers_scim.add_scimprovidergrouppropertymapping",
"authentik_providers_scim.add_scimprovideruser",
"authentik_providers_scim.change_scimmapping",
"authentik_providers_scim.change_scimprovider",
"authentik_providers_scim.change_scimprovidergroup",
"authentik_providers_scim.change_scimprovidergroupfilter",
"authentik_providers_scim.change_scimprovidergrouppropertymapping",
"authentik_providers_scim.change_scimprovideruser",
"authentik_providers_scim.delete_scimmapping",
"authentik_providers_scim.delete_scimprovider",
"authentik_providers_scim.delete_scimprovidergroup",
"authentik_providers_scim.delete_scimprovidergroupfilter",
"authentik_providers_scim.delete_scimprovidergrouppropertymapping",
"authentik_providers_scim.delete_scimprovideruser",
"authentik_providers_scim.view_scimmapping",
"authentik_providers_scim.view_scimprovider",
"authentik_providers_scim.view_scimprovidergroup",
"authentik_providers_scim.view_scimprovidergroupfilter",
"authentik_providers_scim.view_scimprovidergrouppropertymapping",
"authentik_providers_scim.view_scimprovideruser",
"authentik_providers_ssf.add_ssfprovider",
"authentik_providers_ssf.add_ssfprovideroidcauthprovider",
"authentik_providers_ssf.add_stream",
"authentik_providers_ssf.add_streamevent",
"authentik_providers_ssf.change_ssfprovider",
"authentik_providers_ssf.change_ssfprovideroidcauthprovider",
"authentik_providers_ssf.change_stream",
"authentik_providers_ssf.change_streamevent",
"authentik_providers_ssf.delete_ssfprovider",
"authentik_providers_ssf.delete_ssfprovideroidcauthprovider",
"authentik_providers_ssf.delete_stream",
"authentik_providers_ssf.delete_streamevent",
"authentik_providers_ssf.view_ssfprovider",
"authentik_providers_ssf.view_ssfprovideroidcauthprovider",
"authentik_providers_ssf.view_stream",
"authentik_providers_ssf.view_streamevent",
"authentik_providers_ws_federation.add_wsfederationprovider",
"authentik_providers_ws_federation.change_wsfederationprovider",
"authentik_providers_ws_federation.delete_wsfederationprovider",
"authentik_providers_ws_federation.view_wsfederationprovider",
"authentik_rbac.access_admin_interface",
"authentik_rbac.add_initialpermissions",
"authentik_rbac.add_initialpermissionspermission",
"authentik_rbac.add_role",
"authentik_rbac.assign_role_permissions",
"authentik_rbac.change_initialpermissions",
"authentik_rbac.change_initialpermissionspermission",
"authentik_rbac.change_role",
"authentik_rbac.delete_initialpermissions",
"authentik_rbac.delete_initialpermissionspermission",
"authentik_rbac.delete_role",
"authentik_rbac.edit_system_settings",
"authentik_rbac.manage_media_files",
"authentik_rbac.unassign_role_permissions",
"authentik_rbac.view_initialpermissions",
"authentik_rbac.view_initialpermissionspermission",
"authentik_rbac.view_media_files",
"authentik_rbac.view_role",
"authentik_rbac.view_system_info",
"authentik_rbac.view_system_settings",
"authentik_reports.add_dataexport",
"authentik_reports.change_dataexport",
"authentik_reports.delete_dataexport",
"authentik_reports.view_dataexport",
"authentik_requests.add_grantrequest",
"authentik_requests.add_grantrequestapproval",
"authentik_requests.add_grantrequesttarget",
"authentik_requests.add_requestrule",
"authentik_requests.add_requestrulebinding",
"authentik_requests.add_requestrulechildbinding",
"authentik_requests.add_requestrulenotificationtransport",
"authentik_requests.change_grantrequest",
"authentik_requests.change_grantrequestapproval",
"authentik_requests.change_grantrequesttarget",
"authentik_requests.change_requestrule",
"authentik_requests.change_requestrulebinding",
"authentik_requests.change_requestrulechildbinding",
"authentik_requests.change_requestrulenotificationtransport",
"authentik_requests.delete_grantrequest",
"authentik_requests.delete_grantrequestapproval",
"authentik_requests.delete_grantrequesttarget",
"authentik_requests.delete_requestrule",
"authentik_requests.delete_requestrulebinding",
"authentik_requests.delete_requestrulechildbinding",
"authentik_requests.delete_requestrulenotificationtransport",
"authentik_requests.fulfill_grantrequest",
"authentik_requests.request_grantrequest",
"authentik_requests.revoke_grantrequest",
"authentik_requests.view_grantrequest",
"authentik_requests.view_grantrequestapproval",
"authentik_requests.view_grantrequesttarget",
"authentik_requests.view_requestrule",
"authentik_requests.view_requestrulebinding",
"authentik_requests.view_requestrulechildbinding",
"authentik_requests.view_requestrulenotificationtransport",
"authentik_sources_kerberos.add_groupkerberossourceconnection",
"authentik_sources_kerberos.add_kerberossource",
"authentik_sources_kerberos.add_kerberossourcepropertymapping",
"authentik_sources_kerberos.add_userkerberossourceconnection",
"authentik_sources_kerberos.change_groupkerberossourceconnection",
"authentik_sources_kerberos.change_kerberossource",
"authentik_sources_kerberos.change_kerberossourcepropertymapping",
"authentik_sources_kerberos.change_userkerberossourceconnection",
"authentik_sources_kerberos.delete_groupkerberossourceconnection",
"authentik_sources_kerberos.delete_kerberossource",
"authentik_sources_kerberos.delete_kerberossourcepropertymapping",
"authentik_sources_kerberos.delete_userkerberossourceconnection",
"authentik_sources_kerberos.view_groupkerberossourceconnection",
"authentik_sources_kerberos.view_kerberossource",
"authentik_sources_kerberos.view_kerberossourcepropertymapping",
"authentik_sources_kerberos.view_userkerberossourceconnection",
"authentik_sources_ldap.add_groupldapsourceconnection",
"authentik_sources_ldap.add_ldapsource",
"authentik_sources_ldap.add_ldapsourcepropertymapping",
"authentik_sources_ldap.add_userldapsourceconnection",
"authentik_sources_ldap.change_groupldapsourceconnection",
"authentik_sources_ldap.change_ldapsource",
"authentik_sources_ldap.change_ldapsourcepropertymapping",
"authentik_sources_ldap.change_userldapsourceconnection",
"authentik_sources_ldap.delete_groupldapsourceconnection",
"authentik_sources_ldap.delete_ldapsource",
"authentik_sources_ldap.delete_ldapsourcepropertymapping",
"authentik_sources_ldap.delete_userldapsourceconnection",
"authentik_sources_ldap.view_groupldapsourceconnection",
"authentik_sources_ldap.view_ldapsource",
"authentik_sources_ldap.view_ldapsourcepropertymapping",
"authentik_sources_ldap.view_userldapsourceconnection",
"authentik_sources_oauth.add_groupoauthsourceconnection",
"authentik_sources_oauth.add_oauthsource",
"authentik_sources_oauth.add_oauthsourcepropertymapping",
"authentik_sources_oauth.add_useroauthsourceconnection",
"authentik_sources_oauth.change_groupoauthsourceconnection",
"authentik_sources_oauth.change_oauthsource",
"authentik_sources_oauth.change_oauthsourcepropertymapping",
"authentik_sources_oauth.change_useroauthsourceconnection",
"authentik_sources_oauth.delete_groupoauthsourceconnection",
"authentik_sources_oauth.delete_oauthsource",
"authentik_sources_oauth.delete_oauthsourcepropertymapping",
"authentik_sources_oauth.delete_useroauthsourceconnection",
"authentik_sources_oauth.view_groupoauthsourceconnection",
"authentik_sources_oauth.view_oauthsource",
"authentik_sources_oauth.view_oauthsourcepropertymapping",
"authentik_sources_oauth.view_useroauthsourceconnection",
"authentik_sources_plex.add_groupplexsourceconnection",
"authentik_sources_plex.add_plexsource",
"authentik_sources_plex.add_plexsourcepropertymapping",
"authentik_sources_plex.add_userplexsourceconnection",
"authentik_sources_plex.change_groupplexsourceconnection",
"authentik_sources_plex.change_plexsource",
"authentik_sources_plex.change_plexsourcepropertymapping",
"authentik_sources_plex.change_userplexsourceconnection",
"authentik_sources_plex.delete_groupplexsourceconnection",
"authentik_sources_plex.delete_plexsource",
"authentik_sources_plex.delete_plexsourcepropertymapping",
"authentik_sources_plex.delete_userplexsourceconnection",
"authentik_sources_plex.view_groupplexsourceconnection",
"authentik_sources_plex.view_plexsource",
"authentik_sources_plex.view_plexsourcepropertymapping",
"authentik_sources_plex.view_userplexsourceconnection",
"authentik_sources_saml.add_groupsamlsourceconnection",
"authentik_sources_saml.add_samlsource",
"authentik_sources_saml.add_samlsourcepropertymapping",
"authentik_sources_saml.add_usersamlsourceconnection",
"authentik_sources_saml.change_groupsamlsourceconnection",
"authentik_sources_saml.change_samlsource",
"authentik_sources_saml.change_samlsourcepropertymapping",
"authentik_sources_saml.change_usersamlsourceconnection",
"authentik_sources_saml.delete_groupsamlsourceconnection",
"authentik_sources_saml.delete_samlsource",
"authentik_sources_saml.delete_samlsourcepropertymapping",
"authentik_sources_saml.delete_usersamlsourceconnection",
"authentik_sources_saml.view_groupsamlsourceconnection",
"authentik_sources_saml.view_samlsource",
"authentik_sources_saml.view_samlsourcepropertymapping",
"authentik_sources_saml.view_usersamlsourceconnection",
"authentik_sources_scim.add_scimsource",
"authentik_sources_scim.add_scimsourcegroup",
"authentik_sources_scim.add_scimsourcepropertymapping",
"authentik_sources_scim.add_scimsourceuser",
"authentik_sources_scim.change_scimsource",
"authentik_sources_scim.change_scimsourcegroup",
"authentik_sources_scim.change_scimsourcepropertymapping",
"authentik_sources_scim.change_scimsourceuser",
"authentik_sources_scim.delete_scimsource",
"authentik_sources_scim.delete_scimsourcegroup",
"authentik_sources_scim.delete_scimsourcepropertymapping",
"authentik_sources_scim.delete_scimsourceuser",
"authentik_sources_scim.view_scimsource",
"authentik_sources_scim.view_scimsourcegroup",
"authentik_sources_scim.view_scimsourcepropertymapping",
"authentik_sources_scim.view_scimsourceuser",
"authentik_sources_telegram.add_grouptelegramsourceconnection",
"authentik_sources_telegram.add_telegramsource",
"authentik_sources_telegram.add_telegramsourcepropertymapping",
"authentik_sources_telegram.add_usertelegramsourceconnection",
"authentik_sources_telegram.change_grouptelegramsourceconnection",
"authentik_sources_telegram.change_telegramsource",
"authentik_sources_telegram.change_telegramsourcepropertymapping",
"authentik_sources_telegram.change_usertelegramsourceconnection",
"authentik_sources_telegram.delete_grouptelegramsourceconnection",
"authentik_sources_telegram.delete_telegramsource",
"authentik_sources_telegram.delete_telegramsourcepropertymapping",
"authentik_sources_telegram.delete_usertelegramsourceconnection",
"authentik_sources_telegram.view_grouptelegramsourceconnection",
"authentik_sources_telegram.view_telegramsource",
"authentik_sources_telegram.view_telegramsourcepropertymapping",
"authentik_sources_telegram.view_usertelegramsourceconnection",
"authentik_stages_account_lockdown.add_accountlockdownstage",
"authentik_stages_account_lockdown.change_accountlockdownstage",
"authentik_stages_account_lockdown.delete_accountlockdownstage",
"authentik_stages_account_lockdown.view_accountlockdownstage",
"authentik_stages_authenticator_duo.add_authenticatorduostage",
"authentik_stages_authenticator_duo.add_duodevice",
"authentik_stages_authenticator_duo.change_authenticatorduostage",
"authentik_stages_authenticator_duo.change_duodevice",
"authentik_stages_authenticator_duo.delete_authenticatorduostage",
"authentik_stages_authenticator_duo.delete_duodevice",
"authentik_stages_authenticator_duo.view_authenticatorduostage",
"authentik_stages_authenticator_duo.view_duodevice",
"authentik_stages_authenticator_email.add_authenticatoremailstage",
"authentik_stages_authenticator_email.add_emaildevice",
"authentik_stages_authenticator_email.change_authenticatoremailstage",
"authentik_stages_authenticator_email.change_emaildevice",
"authentik_stages_authenticator_email.delete_authenticatoremailstage",
"authentik_stages_authenticator_email.delete_emaildevice",
"authentik_stages_authenticator_email.view_authenticatoremailstage",
"authentik_stages_authenticator_email.view_emaildevice",
"authentik_stages_authenticator_endpoint_gdtc.add_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.add_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.add_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.change_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.change_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.change_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.delete_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.delete_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.delete_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.view_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.view_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.view_endpointdeviceconnection",
"authentik_stages_authenticator_sms.add_authenticatorsmsstage",
"authentik_stages_authenticator_sms.add_smsdevice",
"authentik_stages_authenticator_sms.change_authenticatorsmsstage",
"authentik_stages_authenticator_sms.change_smsdevice",
"authentik_stages_authenticator_sms.delete_authenticatorsmsstage",
"authentik_stages_authenticator_sms.delete_smsdevice",
"authentik_stages_authenticator_sms.view_authenticatorsmsstage",
"authentik_stages_authenticator_sms.view_smsdevice",
"authentik_stages_authenticator_static.add_authenticatorstaticstage",
"authentik_stages_authenticator_static.add_staticdevice",
"authentik_stages_authenticator_static.add_statictoken",
"authentik_stages_authenticator_static.change_authenticatorstaticstage",
"authentik_stages_authenticator_static.change_staticdevice",
"authentik_stages_authenticator_static.change_statictoken",
"authentik_stages_authenticator_static.delete_authenticatorstaticstage",
"authentik_stages_authenticator_static.delete_staticdevice",
"authentik_stages_authenticator_static.delete_statictoken",
"authentik_stages_authenticator_static.view_authenticatorstaticstage",
"authentik_stages_authenticator_static.view_staticdevice",
"authentik_stages_authenticator_static.view_statictoken",
"authentik_stages_authenticator_totp.add_authenticatortotpstage",
"authentik_stages_authenticator_totp.add_totpdevice",
"authentik_stages_authenticator_totp.change_authenticatortotpstage",
"authentik_stages_authenticator_totp.change_totpdevice",
"authentik_stages_authenticator_totp.delete_authenticatortotpstage",
"authentik_stages_authenticator_totp.delete_totpdevice",
"authentik_stages_authenticator_totp.view_authenticatortotpstage",
"authentik_stages_authenticator_totp.view_totpdevice",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_webauthn.add_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.add_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.add_webauthndevice",
"authentik_stages_authenticator_webauthn.add_webauthndevicetype",
"authentik_stages_authenticator_webauthn.change_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.change_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.change_webauthndevice",
"authentik_stages_authenticator_webauthn.change_webauthndevicetype",
"authentik_stages_authenticator_webauthn.delete_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.delete_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.delete_webauthndevice",
"authentik_stages_authenticator_webauthn.delete_webauthndevicetype",
"authentik_stages_authenticator_webauthn.view_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.view_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.view_webauthndevice",
"authentik_stages_authenticator_webauthn.view_webauthndevicetype",
"authentik_stages_captcha.add_captchastage",
"authentik_stages_captcha.change_captchastage",
"authentik_stages_captcha.delete_captchastage",
"authentik_stages_captcha.view_captchastage",
"authentik_stages_consent.add_consentstage",
"authentik_stages_consent.add_userconsent",
"authentik_stages_consent.change_consentstage",
"authentik_stages_consent.change_userconsent",
"authentik_stages_consent.delete_consentstage",
"authentik_stages_consent.delete_userconsent",
"authentik_stages_consent.view_consentstage",
"authentik_stages_consent.view_userconsent",
"authentik_stages_deny.add_denystage",
"authentik_stages_deny.change_denystage",
"authentik_stages_deny.delete_denystage",
"authentik_stages_deny.view_denystage",
"authentik_stages_dummy.add_dummystage",
"authentik_stages_dummy.change_dummystage",
"authentik_stages_dummy.delete_dummystage",
"authentik_stages_dummy.view_dummystage",
"authentik_stages_email.add_emailstage",
"authentik_stages_email.change_emailstage",
"authentik_stages_email.delete_emailstage",
"authentik_stages_email.view_emailstage",
"authentik_stages_identification.add_identificationstage",
"authentik_stages_identification.add_identificationstagesource",
"authentik_stages_identification.change_identificationstage",
"authentik_stages_identification.change_identificationstagesource",
"authentik_stages_identification.delete_identificationstage",
"authentik_stages_identification.delete_identificationstagesource",
"authentik_stages_identification.view_identificationstage",
"authentik_stages_identification.view_identificationstagesource",
"authentik_stages_invitation.add_invitation",
"authentik_stages_invitation.add_invitationstage",
"authentik_stages_invitation.change_invitation",
"authentik_stages_invitation.change_invitationstage",
"authentik_stages_invitation.delete_invitation",
"authentik_stages_invitation.delete_invitationstage",
"authentik_stages_invitation.view_invitation",
"authentik_stages_invitation.view_invitationstage",
"authentik_stages_mtls.add_mutualtlsstage",
"authentik_stages_mtls.add_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.change_mutualtlsstage",
"authentik_stages_mtls.change_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.delete_mutualtlsstage",
"authentik_stages_mtls.delete_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.pass_outpost_certificate",
"authentik_stages_mtls.view_mutualtlsstage",
"authentik_stages_mtls.view_mutualtlsstagecertificateauthority",
"authentik_stages_password.add_passwordstage",
"authentik_stages_password.change_passwordstage",
"authentik_stages_password.delete_passwordstage",
"authentik_stages_password.view_passwordstage",
"authentik_stages_prompt.add_prompt",
"authentik_stages_prompt.add_promptstage",
"authentik_stages_prompt.add_promptstagefield",
"authentik_stages_prompt.add_promptstagevalidationpolicy",
"authentik_stages_prompt.change_prompt",
"authentik_stages_prompt.change_promptstage",
"authentik_stages_prompt.change_promptstagefield",
"authentik_stages_prompt.change_promptstagevalidationpolicy",
"authentik_stages_prompt.delete_prompt",
"authentik_stages_prompt.delete_promptstage",
"authentik_stages_prompt.delete_promptstagefield",
"authentik_stages_prompt.delete_promptstagevalidationpolicy",
"authentik_stages_prompt.view_prompt",
"authentik_stages_prompt.view_promptstage",
"authentik_stages_prompt.view_promptstagefield",
"authentik_stages_prompt.view_promptstagevalidationpolicy",
"authentik_stages_redirect.add_redirectstage",
"authentik_stages_redirect.change_redirectstage",
"authentik_stages_redirect.delete_redirectstage",
"authentik_stages_redirect.view_redirectstage",
"authentik_stages_source.add_sourcestage",
"authentik_stages_source.change_sourcestage",
"authentik_stages_source.delete_sourcestage",
"authentik_stages_source.view_sourcestage",
"authentik_stages_user_delete.add_userdeletestage",
"authentik_stages_user_delete.change_userdeletestage",
"authentik_stages_user_delete.delete_userdeletestage",
"authentik_stages_user_delete.view_userdeletestage",
"authentik_stages_user_login.add_userloginstage",
"authentik_stages_user_login.change_userloginstage",
"authentik_stages_user_login.delete_userloginstage",
"authentik_stages_user_login.view_userloginstage",
"authentik_stages_user_logout.add_userlogoutstage",
"authentik_stages_user_logout.change_userlogoutstage",
"authentik_stages_user_logout.delete_userlogoutstage",
"authentik_stages_user_logout.view_userlogoutstage",
"authentik_stages_user_write.add_userwritestage",
"authentik_stages_user_write.change_userwritestage",
"authentik_stages_user_write.delete_userwritestage",
"authentik_stages_user_write.view_userwritestage",
"authentik_tasks.retry_task",
"authentik_tasks.view_task",
"authentik_tasks_schedules.change_schedule",
"authentik_tasks_schedules.send_schedule",
"authentik_tasks_schedules.view_schedule",
"authentik_tenants.add_domain",
"authentik_tenants.add_tenant",
"authentik_tenants.change_domain",
"authentik_tenants.change_tenant",
"authentik_tenants.delete_domain",
"authentik_tenants.delete_tenant",
"authentik_tenants.view_domain",
"authentik_tenants.view_tenant"
]
},
"title": "Permissions"
}
},
"required": []
},
"model_authentik_core.actor_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_actor",
"change_actor",
"delete_actor",
"view_actor"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.application": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Application's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal application name, used in URLs."
},
"provider": {
"type": "integer",
"title": "Provider"
},
"backchannel_providers": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Backchannel providers"
},
"open_in_new_tab": {
"type": "boolean",
"title": "Open in new tab",
"description": "Open launch URL in a new browser tab or window."
},
"meta_launch_url": {
"type": "string",
"title": "Meta launch url"
},
"meta_icon": {
"type": "string",
"title": "Meta icon"
},
"meta_description": {
"type": "string",
"title": "Meta description"
},
"meta_publisher": {
"type": "string",
"title": "Meta publisher"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"group": {
"type": "string",
"title": "Group"
},
"meta_hide": {
"type": "boolean",
"title": "Meta hide",
"description": "Hide this application from the user's My applications page."
},
"icon": {
"type": "string",
"minLength": 1,
"title": "Icon"
}
},
"required": []
},
"model_authentik_core.application_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_application",
"change_application",
"delete_application",
"view_application"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.applicationentitlement": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"app": {
"type": "string",
"format": "uuid",
"title": "App"
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
}
},
"required": []
},
"model_authentik_core.applicationentitlement_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_applicationentitlement",
"change_applicationentitlement",
"delete_applicationentitlement",
"view_applicationentitlement"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.group": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"is_superuser": {
"type": "boolean",
"title": "Is superuser",
"description": "Users added to this group will be superusers."
},
"parents": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Parents"
},
"users": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Users"
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
},
"roles": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Roles"
}
},
"required": []
},
"model_authentik_core.group_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_group",
"add_user_to_group",
"change_group",
"delete_group",
"disable_group_superuser",
"enable_group_superuser",
"remove_user_from_group",
"view_group"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.objectattribute": {
"type": "object",
"properties": {
"object_type": {
"type": "string",
"minLength": 1,
"title": "Object type"
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"key": {
"type": "string",
"minLength": 1,
"title": "Key"
},
"label": {
"type": "string",
"minLength": 1,
"title": "Label"
},
"regex": {
"type": "string",
"title": "Regex"
},
"type": {
"type": "string",
"enum": [
"text",
"number",
"boolean"
],
"title": "Type"
},
"group": {
"type": "string",
"title": "Group"
},
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"is_unique": {
"type": "boolean",
"title": "Is unique"
},
"is_required": {
"type": "boolean",
"title": "Is required"
}
},
"required": []
},
"model_authentik_core.objectattribute_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_objectattribute",
"change_objectattribute",
"delete_objectattribute",
"view_objectattribute"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.token": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"identifier": {
"type": "string",
"maxLength": 255,
"minLength": 1,
"pattern": "^[-a-zA-Z0-9_]+$",
"title": "Identifier"
},
"intent": {
"type": "string",
"enum": [
"verification",
"api",
"recovery",
"app_password"
],
"title": "Intent"
},
"user": {
"type": "integer",
"title": "User"
},
"description": {
"type": "string",
"title": "Description"
},
"expires": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Expires"
},
"expiring": {
"type": "boolean",
"title": "Expiring"
},
"key": {
"type": "string",
"minLength": 1,
"title": "Key"
}
},
"required": []
},
"model_authentik_core.token_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_token",
"change_token",
"delete_token",
"set_token_key",
"view_token",
"view_token_key"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_core.user": {
"type": "object",
"properties": {
"username": {
"type": "string",
"maxLength": 150,
"minLength": 1,
"title": "Username"
},
"name": {
"type": "string",
"title": "Name",
"description": "User's display name."
},
"is_active": {
"type": "boolean",
"title": "Active",
"description": "Designates whether this user should be treated as active. Unselect this instead of deleting accounts."
},
"last_login": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Last login"
},
"groups": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Groups"
},
"roles": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Roles"
},
"email": {
"type": "string",
"format": "email",
"maxLength": 254,
"title": "Email address"
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
},
"path": {
"type": "string",
"minLength": 1,
"title": "Path"
},
"type": {
"type": "string",
"enum": [
"internal",
"external",
"service_account",
"internal_service_account"
],
"title": "Type"
},
"password": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Password"
},
"password_hash": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Password hash"
},
"permissions": {
"type": "array",
"items": {
"type": "string",
"enum": [
"authentik_agents.add_agent",
"authentik_agents.add_agent_self_service",
"authentik_agents.change_agent",
"authentik_agents.delete_agent",
"authentik_agents.view_agent",
"authentik_blueprints.add_blueprintinstance",
"authentik_blueprints.change_blueprintinstance",
"authentik_blueprints.delete_blueprintinstance",
"authentik_blueprints.view_blueprintinstance",
"authentik_brands.add_brand",
"authentik_brands.add_brandclientcertificate",
"authentik_brands.change_brand",
"authentik_brands.change_brandclientcertificate",
"authentik_brands.delete_brand",
"authentik_brands.delete_brandclientcertificate",
"authentik_brands.view_brand",
"authentik_brands.view_brandclientcertificate",
"authentik_core.add_actor",
"authentik_core.add_application",
"authentik_core.add_applicationentitlement",
"authentik_core.add_authenticatedsession",
"authentik_core.add_group",
"authentik_core.add_groupancestrynode",
"authentik_core.add_groupparentagenode",
"authentik_core.add_grouprole",
"authentik_core.add_groupsourceconnection",
"authentik_core.add_objectattribute",
"authentik_core.add_propertymapping",
"authentik_core.add_provider",
"authentik_core.add_providerpropertymapping",
"authentik_core.add_source",
"authentik_core.add_sourcegrouppropertymapping",
"authentik_core.add_sourceuserpropertymapping",
"authentik_core.add_token",
"authentik_core.add_user",
"authentik_core.add_user_to_group",
"authentik_core.add_usergroup",
"authentik_core.add_userrole",
"authentik_core.add_usersourceconnection",
"authentik_core.change_actor",
"authentik_core.change_application",
"authentik_core.change_applicationentitlement",
"authentik_core.change_authenticatedsession",
"authentik_core.change_group",
"authentik_core.change_groupancestrynode",
"authentik_core.change_groupparentagenode",
"authentik_core.change_grouprole",
"authentik_core.change_groupsourceconnection",
"authentik_core.change_objectattribute",
"authentik_core.change_propertymapping",
"authentik_core.change_provider",
"authentik_core.change_providerpropertymapping",
"authentik_core.change_source",
"authentik_core.change_sourcegrouppropertymapping",
"authentik_core.change_sourceuserpropertymapping",
"authentik_core.change_token",
"authentik_core.change_user",
"authentik_core.change_usergroup",
"authentik_core.change_userrole",
"authentik_core.change_usersourceconnection",
"authentik_core.delete_actor",
"authentik_core.delete_application",
"authentik_core.delete_applicationentitlement",
"authentik_core.delete_authenticatedsession",
"authentik_core.delete_group",
"authentik_core.delete_groupancestrynode",
"authentik_core.delete_groupparentagenode",
"authentik_core.delete_grouprole",
"authentik_core.delete_groupsourceconnection",
"authentik_core.delete_objectattribute",
"authentik_core.delete_propertymapping",
"authentik_core.delete_provider",
"authentik_core.delete_providerpropertymapping",
"authentik_core.delete_source",
"authentik_core.delete_sourcegrouppropertymapping",
"authentik_core.delete_sourceuserpropertymapping",
"authentik_core.delete_token",
"authentik_core.delete_user",
"authentik_core.delete_usergroup",
"authentik_core.delete_userrole",
"authentik_core.delete_usersourceconnection",
"authentik_core.disable_group_superuser",
"authentik_core.enable_group_superuser",
"authentik_core.impersonate",
"authentik_core.preview_user",
"authentik_core.remove_user_from_group",
"authentik_core.reset_user_password",
"authentik_core.set_token_key",
"authentik_core.view_actor",
"authentik_core.view_application",
"authentik_core.view_applicationentitlement",
"authentik_core.view_authenticatedsession",
"authentik_core.view_group",
"authentik_core.view_groupancestrynode",
"authentik_core.view_groupparentagenode",
"authentik_core.view_grouprole",
"authentik_core.view_groupsourceconnection",
"authentik_core.view_objectattribute",
"authentik_core.view_propertymapping",
"authentik_core.view_provider",
"authentik_core.view_providerpropertymapping",
"authentik_core.view_source",
"authentik_core.view_sourcegrouppropertymapping",
"authentik_core.view_sourceuserpropertymapping",
"authentik_core.view_token",
"authentik_core.view_token_key",
"authentik_core.view_user",
"authentik_core.view_user_applications",
"authentik_core.view_usergroup",
"authentik_core.view_userrole",
"authentik_core.view_usersourceconnection",
"authentik_crypto.add_certificatekeypair",
"authentik_crypto.change_certificatekeypair",
"authentik_crypto.delete_certificatekeypair",
"authentik_crypto.view_certificatekeypair",
"authentik_crypto.view_certificatekeypair_certificate",
"authentik_crypto.view_certificatekeypair_key",
"authentik_endpoints.add_connector",
"authentik_endpoints.add_device",
"authentik_endpoints.add_deviceaccessgroup",
"authentik_endpoints.add_deviceconnection",
"authentik_endpoints.add_devicefactsnapshot",
"authentik_endpoints.add_deviceuserbinding",
"authentik_endpoints.add_endpointstage",
"authentik_endpoints.change_connector",
"authentik_endpoints.change_device",
"authentik_endpoints.change_deviceaccessgroup",
"authentik_endpoints.change_deviceconnection",
"authentik_endpoints.change_devicefactsnapshot",
"authentik_endpoints.change_deviceuserbinding",
"authentik_endpoints.change_endpointstage",
"authentik_endpoints.delete_connector",
"authentik_endpoints.delete_device",
"authentik_endpoints.delete_deviceaccessgroup",
"authentik_endpoints.delete_deviceconnection",
"authentik_endpoints.delete_devicefactsnapshot",
"authentik_endpoints.delete_deviceuserbinding",
"authentik_endpoints.delete_endpointstage",
"authentik_endpoints.view_connector",
"authentik_endpoints.view_device",
"authentik_endpoints.view_deviceaccessgroup",
"authentik_endpoints.view_deviceconnection",
"authentik_endpoints.view_devicefactsnapshot",
"authentik_endpoints.view_deviceuserbinding",
"authentik_endpoints.view_endpointstage",
"authentik_endpoints_connectors_agent.add_agentconnector",
"authentik_endpoints_connectors_agent.add_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.add_agentdeviceconnection",
"authentik_endpoints_connectors_agent.add_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.add_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.add_applenonce",
"authentik_endpoints_connectors_agent.add_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.add_devicetoken",
"authentik_endpoints_connectors_agent.add_enrollmenttoken",
"authentik_endpoints_connectors_agent.change_agentconnector",
"authentik_endpoints_connectors_agent.change_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.change_agentdeviceconnection",
"authentik_endpoints_connectors_agent.change_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.change_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.change_applenonce",
"authentik_endpoints_connectors_agent.change_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.change_devicetoken",
"authentik_endpoints_connectors_agent.change_enrollmenttoken",
"authentik_endpoints_connectors_agent.delete_agentconnector",
"authentik_endpoints_connectors_agent.delete_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.delete_agentdeviceconnection",
"authentik_endpoints_connectors_agent.delete_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.delete_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.delete_applenonce",
"authentik_endpoints_connectors_agent.delete_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.delete_devicetoken",
"authentik_endpoints_connectors_agent.delete_enrollmenttoken",
"authentik_endpoints_connectors_agent.view_agentconnector",
"authentik_endpoints_connectors_agent.view_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.view_agentdeviceconnection",
"authentik_endpoints_connectors_agent.view_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.view_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.view_applenonce",
"authentik_endpoints_connectors_agent.view_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.view_devicetoken",
"authentik_endpoints_connectors_agent.view_enrollment_token_key",
"authentik_endpoints_connectors_agent.view_enrollmenttoken",
"authentik_endpoints_connectors_fleet.add_fleetconnector",
"authentik_endpoints_connectors_fleet.change_fleetconnector",
"authentik_endpoints_connectors_fleet.delete_fleetconnector",
"authentik_endpoints_connectors_fleet.view_fleetconnector",
"authentik_endpoints_connectors_google_chrome.add_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.change_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.delete_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.view_googlechromeconnector",
"authentik_enterprise.add_license",
"authentik_enterprise.add_licenseusage",
"authentik_enterprise.change_license",
"authentik_enterprise.change_licenseusage",
"authentik_enterprise.delete_license",
"authentik_enterprise.delete_licenseusage",
"authentik_enterprise.view_license",
"authentik_enterprise.view_licenseusage",
"authentik_events.add_event",
"authentik_events.add_notification",
"authentik_events.add_notificationrule",
"authentik_events.add_notificationrulenotificationtransport",
"authentik_events.add_notificationtransport",
"authentik_events.add_notificationwebhookmapping",
"authentik_events.change_event",
"authentik_events.change_notification",
"authentik_events.change_notificationrule",
"authentik_events.change_notificationrulenotificationtransport",
"authentik_events.change_notificationtransport",
"authentik_events.change_notificationwebhookmapping",
"authentik_events.delete_event",
"authentik_events.delete_notification",
"authentik_events.delete_notificationrule",
"authentik_events.delete_notificationrulenotificationtransport",
"authentik_events.delete_notificationtransport",
"authentik_events.delete_notificationwebhookmapping",
"authentik_events.view_event",
"authentik_events.view_notification",
"authentik_events.view_notificationrule",
"authentik_events.view_notificationrulenotificationtransport",
"authentik_events.view_notificationtransport",
"authentik_events.view_notificationwebhookmapping",
"authentik_flows.add_flow",
"authentik_flows.add_flowstagebinding",
"authentik_flows.add_flowtoken",
"authentik_flows.add_stage",
"authentik_flows.change_flow",
"authentik_flows.change_flowstagebinding",
"authentik_flows.change_flowtoken",
"authentik_flows.change_stage",
"authentik_flows.clear_flow_cache",
"authentik_flows.delete_flow",
"authentik_flows.delete_flowstagebinding",
"authentik_flows.delete_flowtoken",
"authentik_flows.delete_stage",
"authentik_flows.export_flow",
"authentik_flows.inspect_flow",
"authentik_flows.view_flow",
"authentik_flows.view_flow_cache",
"authentik_flows.view_flowstagebinding",
"authentik_flows.view_flowtoken",
"authentik_flows.view_stage",
"authentik_lifecycle.add_lifecycleiteration",
"authentik_lifecycle.add_lifecyclerule",
"authentik_lifecycle.add_lifecyclerulenotificationtransport",
"authentik_lifecycle.add_lifecyclerulereviewer",
"authentik_lifecycle.add_lifecyclerulereviewergroup",
"authentik_lifecycle.add_review",
"authentik_lifecycle.add_useroffboarding",
"authentik_lifecycle.change_lifecycleiteration",
"authentik_lifecycle.change_lifecyclerule",
"authentik_lifecycle.change_lifecyclerulenotificationtransport",
"authentik_lifecycle.change_lifecyclerulereviewer",
"authentik_lifecycle.change_lifecyclerulereviewergroup",
"authentik_lifecycle.change_review",
"authentik_lifecycle.change_useroffboarding",
"authentik_lifecycle.delete_lifecycleiteration",
"authentik_lifecycle.delete_lifecyclerule",
"authentik_lifecycle.delete_lifecyclerulenotificationtransport",
"authentik_lifecycle.delete_lifecyclerulereviewer",
"authentik_lifecycle.delete_lifecyclerulereviewergroup",
"authentik_lifecycle.delete_review",
"authentik_lifecycle.delete_useroffboarding",
"authentik_lifecycle.view_lifecycleiteration",
"authentik_lifecycle.view_lifecyclerule",
"authentik_lifecycle.view_lifecyclerulenotificationtransport",
"authentik_lifecycle.view_lifecyclerulereviewer",
"authentik_lifecycle.view_lifecyclerulereviewergroup",
"authentik_lifecycle.view_review",
"authentik_lifecycle.view_useroffboarding",
"authentik_outposts.add_dockerserviceconnection",
"authentik_outposts.add_kubernetesserviceconnection",
"authentik_outposts.add_outpost",
"authentik_outposts.add_outpostprovider",
"authentik_outposts.add_outpostserviceconnection",
"authentik_outposts.change_dockerserviceconnection",
"authentik_outposts.change_kubernetesserviceconnection",
"authentik_outposts.change_outpost",
"authentik_outposts.change_outpostprovider",
"authentik_outposts.change_outpostserviceconnection",
"authentik_outposts.delete_dockerserviceconnection",
"authentik_outposts.delete_kubernetesserviceconnection",
"authentik_outposts.delete_outpost",
"authentik_outposts.delete_outpostprovider",
"authentik_outposts.delete_outpostserviceconnection",
"authentik_outposts.view_dockerserviceconnection",
"authentik_outposts.view_kubernetesserviceconnection",
"authentik_outposts.view_outpost",
"authentik_outposts.view_outpostprovider",
"authentik_outposts.view_outpostserviceconnection",
"authentik_policies.add_policy",
"authentik_policies.add_policybinding",
"authentik_policies.add_policybindingmodel",
"authentik_policies.change_policy",
"authentik_policies.change_policybinding",
"authentik_policies.change_policybindingmodel",
"authentik_policies.clear_policy_cache",
"authentik_policies.delete_policy",
"authentik_policies.delete_policybinding",
"authentik_policies.delete_policybindingmodel",
"authentik_policies.view_policy",
"authentik_policies.view_policy_cache",
"authentik_policies.view_policybinding",
"authentik_policies.view_policybindingmodel",
"authentik_policies_dummy.add_dummypolicy",
"authentik_policies_dummy.change_dummypolicy",
"authentik_policies_dummy.delete_dummypolicy",
"authentik_policies_dummy.view_dummypolicy",
"authentik_policies_event_matcher.add_eventmatcherpolicy",
"authentik_policies_event_matcher.change_eventmatcherpolicy",
"authentik_policies_event_matcher.delete_eventmatcherpolicy",
"authentik_policies_event_matcher.view_eventmatcherpolicy",
"authentik_policies_expiry.add_passwordexpirypolicy",
"authentik_policies_expiry.change_passwordexpirypolicy",
"authentik_policies_expiry.delete_passwordexpirypolicy",
"authentik_policies_expiry.view_passwordexpirypolicy",
"authentik_policies_expression.add_expressionpolicy",
"authentik_policies_expression.change_expressionpolicy",
"authentik_policies_expression.delete_expressionpolicy",
"authentik_policies_expression.view_expressionpolicy",
"authentik_policies_geoip.add_geoippolicy",
"authentik_policies_geoip.change_geoippolicy",
"authentik_policies_geoip.delete_geoippolicy",
"authentik_policies_geoip.view_geoippolicy",
"authentik_policies_password.add_passwordpolicy",
"authentik_policies_password.change_passwordpolicy",
"authentik_policies_password.delete_passwordpolicy",
"authentik_policies_password.view_passwordpolicy",
"authentik_policies_reputation.add_reputation",
"authentik_policies_reputation.add_reputationpolicy",
"authentik_policies_reputation.change_reputation",
"authentik_policies_reputation.change_reputationpolicy",
"authentik_policies_reputation.delete_reputation",
"authentik_policies_reputation.delete_reputationpolicy",
"authentik_policies_reputation.view_reputation",
"authentik_policies_reputation.view_reputationpolicy",
"authentik_policies_unique_password.add_uniquepasswordpolicy",
"authentik_policies_unique_password.add_userpasswordhistory",
"authentik_policies_unique_password.change_uniquepasswordpolicy",
"authentik_policies_unique_password.change_userpasswordhistory",
"authentik_policies_unique_password.delete_uniquepasswordpolicy",
"authentik_policies_unique_password.delete_userpasswordhistory",
"authentik_policies_unique_password.view_uniquepasswordpolicy",
"authentik_policies_unique_password.view_userpasswordhistory",
"authentik_providers_google_workspace.add_googleworkspaceprovider",
"authentik_providers_google_workspace.add_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.add_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.add_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.add_googleworkspaceprovideruser",
"authentik_providers_google_workspace.change_googleworkspaceprovider",
"authentik_providers_google_workspace.change_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.change_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.change_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.change_googleworkspaceprovideruser",
"authentik_providers_google_workspace.delete_googleworkspaceprovider",
"authentik_providers_google_workspace.delete_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.delete_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.delete_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.delete_googleworkspaceprovideruser",
"authentik_providers_google_workspace.view_googleworkspaceprovider",
"authentik_providers_google_workspace.view_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.view_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.view_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.view_googleworkspaceprovideruser",
"authentik_providers_ldap.add_ldapprovider",
"authentik_providers_ldap.change_ldapprovider",
"authentik_providers_ldap.delete_ldapprovider",
"authentik_providers_ldap.search_full_directory",
"authentik_providers_ldap.view_ldapprovider",
"authentik_providers_microsoft_entra.add_microsoftentraprovider",
"authentik_providers_microsoft_entra.add_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.add_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.add_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.add_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.change_microsoftentraprovider",
"authentik_providers_microsoft_entra.change_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.change_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.change_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.change_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.delete_microsoftentraprovider",
"authentik_providers_microsoft_entra.delete_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.delete_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.delete_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.delete_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.view_microsoftentraprovider",
"authentik_providers_microsoft_entra.view_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.view_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.view_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.view_microsoftentraprovideruser",
"authentik_providers_oauth2.add_accesstoken",
"authentik_providers_oauth2.add_authorizationcode",
"authentik_providers_oauth2.add_devicetoken",
"authentik_providers_oauth2.add_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.add_oauth2dynamicclientregistration",
"authentik_providers_oauth2.add_oauth2provider",
"authentik_providers_oauth2.add_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.add_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.add_refreshtoken",
"authentik_providers_oauth2.add_scopemapping",
"authentik_providers_oauth2.change_accesstoken",
"authentik_providers_oauth2.change_authorizationcode",
"authentik_providers_oauth2.change_devicetoken",
"authentik_providers_oauth2.change_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.change_oauth2dynamicclientregistration",
"authentik_providers_oauth2.change_oauth2provider",
"authentik_providers_oauth2.change_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.change_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.change_refreshtoken",
"authentik_providers_oauth2.change_scopemapping",
"authentik_providers_oauth2.delete_accesstoken",
"authentik_providers_oauth2.delete_authorizationcode",
"authentik_providers_oauth2.delete_devicetoken",
"authentik_providers_oauth2.delete_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.delete_oauth2dynamicclientregistration",
"authentik_providers_oauth2.delete_oauth2provider",
"authentik_providers_oauth2.delete_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.delete_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.delete_refreshtoken",
"authentik_providers_oauth2.delete_scopemapping",
"authentik_providers_oauth2.view_accesstoken",
"authentik_providers_oauth2.view_authorizationcode",
"authentik_providers_oauth2.view_devicetoken",
"authentik_providers_oauth2.view_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.view_oauth2dynamicclientregistration",
"authentik_providers_oauth2.view_oauth2provider",
"authentik_providers_oauth2.view_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.view_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.view_refreshtoken",
"authentik_providers_oauth2.view_scopemapping",
"authentik_providers_proxy.add_proxyprovider",
"authentik_providers_proxy.add_proxysession",
"authentik_providers_proxy.change_proxyprovider",
"authentik_providers_proxy.change_proxysession",
"authentik_providers_proxy.delete_proxyprovider",
"authentik_providers_proxy.delete_proxysession",
"authentik_providers_proxy.view_proxyprovider",
"authentik_providers_proxy.view_proxysession",
"authentik_providers_rac.add_connectiontoken",
"authentik_providers_rac.add_endpoint",
"authentik_providers_rac.add_endpointpropertymapping",
"authentik_providers_rac.add_racpropertymapping",
"authentik_providers_rac.add_racprovider",
"authentik_providers_rac.change_connectiontoken",
"authentik_providers_rac.change_endpoint",
"authentik_providers_rac.change_endpointpropertymapping",
"authentik_providers_rac.change_racpropertymapping",
"authentik_providers_rac.change_racprovider",
"authentik_providers_rac.delete_connectiontoken",
"authentik_providers_rac.delete_endpoint",
"authentik_providers_rac.delete_endpointpropertymapping",
"authentik_providers_rac.delete_racpropertymapping",
"authentik_providers_rac.delete_racprovider",
"authentik_providers_rac.view_connectiontoken",
"authentik_providers_rac.view_endpoint",
"authentik_providers_rac.view_endpointpropertymapping",
"authentik_providers_rac.view_racpropertymapping",
"authentik_providers_rac.view_racprovider",
"authentik_providers_radius.add_radiusprovider",
"authentik_providers_radius.add_radiusproviderpropertymapping",
"authentik_providers_radius.change_radiusprovider",
"authentik_providers_radius.change_radiusproviderpropertymapping",
"authentik_providers_radius.delete_radiusprovider",
"authentik_providers_radius.delete_radiusproviderpropertymapping",
"authentik_providers_radius.view_radiusprovider",
"authentik_providers_radius.view_radiusproviderpropertymapping",
"authentik_providers_saml.add_samlpropertymapping",
"authentik_providers_saml.add_samlprovider",
"authentik_providers_saml.add_samlsession",
"authentik_providers_saml.change_samlpropertymapping",
"authentik_providers_saml.change_samlprovider",
"authentik_providers_saml.change_samlsession",
"authentik_providers_saml.delete_samlpropertymapping",
"authentik_providers_saml.delete_samlprovider",
"authentik_providers_saml.delete_samlsession",
"authentik_providers_saml.view_samlpropertymapping",
"authentik_providers_saml.view_samlprovider",
"authentik_providers_saml.view_samlsession",
"authentik_providers_scim.add_scimmapping",
"authentik_providers_scim.add_scimprovider",
"authentik_providers_scim.add_scimprovidergroup",
"authentik_providers_scim.add_scimprovidergroupfilter",
"authentik_providers_scim.add_scimprovidergrouppropertymapping",
"authentik_providers_scim.add_scimprovideruser",
"authentik_providers_scim.change_scimmapping",
"authentik_providers_scim.change_scimprovider",
"authentik_providers_scim.change_scimprovidergroup",
"authentik_providers_scim.change_scimprovidergroupfilter",
"authentik_providers_scim.change_scimprovidergrouppropertymapping",
"authentik_providers_scim.change_scimprovideruser",
"authentik_providers_scim.delete_scimmapping",
"authentik_providers_scim.delete_scimprovider",
"authentik_providers_scim.delete_scimprovidergroup",
"authentik_providers_scim.delete_scimprovidergroupfilter",
"authentik_providers_scim.delete_scimprovidergrouppropertymapping",
"authentik_providers_scim.delete_scimprovideruser",
"authentik_providers_scim.view_scimmapping",
"authentik_providers_scim.view_scimprovider",
"authentik_providers_scim.view_scimprovidergroup",
"authentik_providers_scim.view_scimprovidergroupfilter",
"authentik_providers_scim.view_scimprovidergrouppropertymapping",
"authentik_providers_scim.view_scimprovideruser",
"authentik_providers_ssf.add_ssfprovider",
"authentik_providers_ssf.add_ssfprovideroidcauthprovider",
"authentik_providers_ssf.add_stream",
"authentik_providers_ssf.add_streamevent",
"authentik_providers_ssf.change_ssfprovider",
"authentik_providers_ssf.change_ssfprovideroidcauthprovider",
"authentik_providers_ssf.change_stream",
"authentik_providers_ssf.change_streamevent",
"authentik_providers_ssf.delete_ssfprovider",
"authentik_providers_ssf.delete_ssfprovideroidcauthprovider",
"authentik_providers_ssf.delete_stream",
"authentik_providers_ssf.delete_streamevent",
"authentik_providers_ssf.view_ssfprovider",
"authentik_providers_ssf.view_ssfprovideroidcauthprovider",
"authentik_providers_ssf.view_stream",
"authentik_providers_ssf.view_streamevent",
"authentik_providers_ws_federation.add_wsfederationprovider",
"authentik_providers_ws_federation.change_wsfederationprovider",
"authentik_providers_ws_federation.delete_wsfederationprovider",
"authentik_providers_ws_federation.view_wsfederationprovider",
"authentik_rbac.access_admin_interface",
"authentik_rbac.add_initialpermissions",
"authentik_rbac.add_initialpermissionspermission",
"authentik_rbac.add_role",
"authentik_rbac.assign_role_permissions",
"authentik_rbac.change_initialpermissions",
"authentik_rbac.change_initialpermissionspermission",
"authentik_rbac.change_role",
"authentik_rbac.delete_initialpermissions",
"authentik_rbac.delete_initialpermissionspermission",
"authentik_rbac.delete_role",
"authentik_rbac.edit_system_settings",
"authentik_rbac.manage_media_files",
"authentik_rbac.unassign_role_permissions",
"authentik_rbac.view_initialpermissions",
"authentik_rbac.view_initialpermissionspermission",
"authentik_rbac.view_media_files",
"authentik_rbac.view_role",
"authentik_rbac.view_system_info",
"authentik_rbac.view_system_settings",
"authentik_reports.add_dataexport",
"authentik_reports.change_dataexport",
"authentik_reports.delete_dataexport",
"authentik_reports.view_dataexport",
"authentik_requests.add_grantrequest",
"authentik_requests.add_grantrequestapproval",
"authentik_requests.add_grantrequesttarget",
"authentik_requests.add_requestrule",
"authentik_requests.add_requestrulebinding",
"authentik_requests.add_requestrulechildbinding",
"authentik_requests.add_requestrulenotificationtransport",
"authentik_requests.change_grantrequest",
"authentik_requests.change_grantrequestapproval",
"authentik_requests.change_grantrequesttarget",
"authentik_requests.change_requestrule",
"authentik_requests.change_requestrulebinding",
"authentik_requests.change_requestrulechildbinding",
"authentik_requests.change_requestrulenotificationtransport",
"authentik_requests.delete_grantrequest",
"authentik_requests.delete_grantrequestapproval",
"authentik_requests.delete_grantrequesttarget",
"authentik_requests.delete_requestrule",
"authentik_requests.delete_requestrulebinding",
"authentik_requests.delete_requestrulechildbinding",
"authentik_requests.delete_requestrulenotificationtransport",
"authentik_requests.fulfill_grantrequest",
"authentik_requests.request_grantrequest",
"authentik_requests.revoke_grantrequest",
"authentik_requests.view_grantrequest",
"authentik_requests.view_grantrequestapproval",
"authentik_requests.view_grantrequesttarget",
"authentik_requests.view_requestrule",
"authentik_requests.view_requestrulebinding",
"authentik_requests.view_requestrulechildbinding",
"authentik_requests.view_requestrulenotificationtransport",
"authentik_sources_kerberos.add_groupkerberossourceconnection",
"authentik_sources_kerberos.add_kerberossource",
"authentik_sources_kerberos.add_kerberossourcepropertymapping",
"authentik_sources_kerberos.add_userkerberossourceconnection",
"authentik_sources_kerberos.change_groupkerberossourceconnection",
"authentik_sources_kerberos.change_kerberossource",
"authentik_sources_kerberos.change_kerberossourcepropertymapping",
"authentik_sources_kerberos.change_userkerberossourceconnection",
"authentik_sources_kerberos.delete_groupkerberossourceconnection",
"authentik_sources_kerberos.delete_kerberossource",
"authentik_sources_kerberos.delete_kerberossourcepropertymapping",
"authentik_sources_kerberos.delete_userkerberossourceconnection",
"authentik_sources_kerberos.view_groupkerberossourceconnection",
"authentik_sources_kerberos.view_kerberossource",
"authentik_sources_kerberos.view_kerberossourcepropertymapping",
"authentik_sources_kerberos.view_userkerberossourceconnection",
"authentik_sources_ldap.add_groupldapsourceconnection",
"authentik_sources_ldap.add_ldapsource",
"authentik_sources_ldap.add_ldapsourcepropertymapping",
"authentik_sources_ldap.add_userldapsourceconnection",
"authentik_sources_ldap.change_groupldapsourceconnection",
"authentik_sources_ldap.change_ldapsource",
"authentik_sources_ldap.change_ldapsourcepropertymapping",
"authentik_sources_ldap.change_userldapsourceconnection",
"authentik_sources_ldap.delete_groupldapsourceconnection",
"authentik_sources_ldap.delete_ldapsource",
"authentik_sources_ldap.delete_ldapsourcepropertymapping",
"authentik_sources_ldap.delete_userldapsourceconnection",
"authentik_sources_ldap.view_groupldapsourceconnection",
"authentik_sources_ldap.view_ldapsource",
"authentik_sources_ldap.view_ldapsourcepropertymapping",
"authentik_sources_ldap.view_userldapsourceconnection",
"authentik_sources_oauth.add_groupoauthsourceconnection",
"authentik_sources_oauth.add_oauthsource",
"authentik_sources_oauth.add_oauthsourcepropertymapping",
"authentik_sources_oauth.add_useroauthsourceconnection",
"authentik_sources_oauth.change_groupoauthsourceconnection",
"authentik_sources_oauth.change_oauthsource",
"authentik_sources_oauth.change_oauthsourcepropertymapping",
"authentik_sources_oauth.change_useroauthsourceconnection",
"authentik_sources_oauth.delete_groupoauthsourceconnection",
"authentik_sources_oauth.delete_oauthsource",
"authentik_sources_oauth.delete_oauthsourcepropertymapping",
"authentik_sources_oauth.delete_useroauthsourceconnection",
"authentik_sources_oauth.view_groupoauthsourceconnection",
"authentik_sources_oauth.view_oauthsource",
"authentik_sources_oauth.view_oauthsourcepropertymapping",
"authentik_sources_oauth.view_useroauthsourceconnection",
"authentik_sources_plex.add_groupplexsourceconnection",
"authentik_sources_plex.add_plexsource",
"authentik_sources_plex.add_plexsourcepropertymapping",
"authentik_sources_plex.add_userplexsourceconnection",
"authentik_sources_plex.change_groupplexsourceconnection",
"authentik_sources_plex.change_plexsource",
"authentik_sources_plex.change_plexsourcepropertymapping",
"authentik_sources_plex.change_userplexsourceconnection",
"authentik_sources_plex.delete_groupplexsourceconnection",
"authentik_sources_plex.delete_plexsource",
"authentik_sources_plex.delete_plexsourcepropertymapping",
"authentik_sources_plex.delete_userplexsourceconnection",
"authentik_sources_plex.view_groupplexsourceconnection",
"authentik_sources_plex.view_plexsource",
"authentik_sources_plex.view_plexsourcepropertymapping",
"authentik_sources_plex.view_userplexsourceconnection",
"authentik_sources_saml.add_groupsamlsourceconnection",
"authentik_sources_saml.add_samlsource",
"authentik_sources_saml.add_samlsourcepropertymapping",
"authentik_sources_saml.add_usersamlsourceconnection",
"authentik_sources_saml.change_groupsamlsourceconnection",
"authentik_sources_saml.change_samlsource",
"authentik_sources_saml.change_samlsourcepropertymapping",
"authentik_sources_saml.change_usersamlsourceconnection",
"authentik_sources_saml.delete_groupsamlsourceconnection",
"authentik_sources_saml.delete_samlsource",
"authentik_sources_saml.delete_samlsourcepropertymapping",
"authentik_sources_saml.delete_usersamlsourceconnection",
"authentik_sources_saml.view_groupsamlsourceconnection",
"authentik_sources_saml.view_samlsource",
"authentik_sources_saml.view_samlsourcepropertymapping",
"authentik_sources_saml.view_usersamlsourceconnection",
"authentik_sources_scim.add_scimsource",
"authentik_sources_scim.add_scimsourcegroup",
"authentik_sources_scim.add_scimsourcepropertymapping",
"authentik_sources_scim.add_scimsourceuser",
"authentik_sources_scim.change_scimsource",
"authentik_sources_scim.change_scimsourcegroup",
"authentik_sources_scim.change_scimsourcepropertymapping",
"authentik_sources_scim.change_scimsourceuser",
"authentik_sources_scim.delete_scimsource",
"authentik_sources_scim.delete_scimsourcegroup",
"authentik_sources_scim.delete_scimsourcepropertymapping",
"authentik_sources_scim.delete_scimsourceuser",
"authentik_sources_scim.view_scimsource",
"authentik_sources_scim.view_scimsourcegroup",
"authentik_sources_scim.view_scimsourcepropertymapping",
"authentik_sources_scim.view_scimsourceuser",
"authentik_sources_telegram.add_grouptelegramsourceconnection",
"authentik_sources_telegram.add_telegramsource",
"authentik_sources_telegram.add_telegramsourcepropertymapping",
"authentik_sources_telegram.add_usertelegramsourceconnection",
"authentik_sources_telegram.change_grouptelegramsourceconnection",
"authentik_sources_telegram.change_telegramsource",
"authentik_sources_telegram.change_telegramsourcepropertymapping",
"authentik_sources_telegram.change_usertelegramsourceconnection",
"authentik_sources_telegram.delete_grouptelegramsourceconnection",
"authentik_sources_telegram.delete_telegramsource",
"authentik_sources_telegram.delete_telegramsourcepropertymapping",
"authentik_sources_telegram.delete_usertelegramsourceconnection",
"authentik_sources_telegram.view_grouptelegramsourceconnection",
"authentik_sources_telegram.view_telegramsource",
"authentik_sources_telegram.view_telegramsourcepropertymapping",
"authentik_sources_telegram.view_usertelegramsourceconnection",
"authentik_stages_account_lockdown.add_accountlockdownstage",
"authentik_stages_account_lockdown.change_accountlockdownstage",
"authentik_stages_account_lockdown.delete_accountlockdownstage",
"authentik_stages_account_lockdown.view_accountlockdownstage",
"authentik_stages_authenticator_duo.add_authenticatorduostage",
"authentik_stages_authenticator_duo.add_duodevice",
"authentik_stages_authenticator_duo.change_authenticatorduostage",
"authentik_stages_authenticator_duo.change_duodevice",
"authentik_stages_authenticator_duo.delete_authenticatorduostage",
"authentik_stages_authenticator_duo.delete_duodevice",
"authentik_stages_authenticator_duo.view_authenticatorduostage",
"authentik_stages_authenticator_duo.view_duodevice",
"authentik_stages_authenticator_email.add_authenticatoremailstage",
"authentik_stages_authenticator_email.add_emaildevice",
"authentik_stages_authenticator_email.change_authenticatoremailstage",
"authentik_stages_authenticator_email.change_emaildevice",
"authentik_stages_authenticator_email.delete_authenticatoremailstage",
"authentik_stages_authenticator_email.delete_emaildevice",
"authentik_stages_authenticator_email.view_authenticatoremailstage",
"authentik_stages_authenticator_email.view_emaildevice",
"authentik_stages_authenticator_endpoint_gdtc.add_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.add_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.add_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.change_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.change_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.change_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.delete_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.delete_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.delete_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.view_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.view_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.view_endpointdeviceconnection",
"authentik_stages_authenticator_sms.add_authenticatorsmsstage",
"authentik_stages_authenticator_sms.add_smsdevice",
"authentik_stages_authenticator_sms.change_authenticatorsmsstage",
"authentik_stages_authenticator_sms.change_smsdevice",
"authentik_stages_authenticator_sms.delete_authenticatorsmsstage",
"authentik_stages_authenticator_sms.delete_smsdevice",
"authentik_stages_authenticator_sms.view_authenticatorsmsstage",
"authentik_stages_authenticator_sms.view_smsdevice",
"authentik_stages_authenticator_static.add_authenticatorstaticstage",
"authentik_stages_authenticator_static.add_staticdevice",
"authentik_stages_authenticator_static.add_statictoken",
"authentik_stages_authenticator_static.change_authenticatorstaticstage",
"authentik_stages_authenticator_static.change_staticdevice",
"authentik_stages_authenticator_static.change_statictoken",
"authentik_stages_authenticator_static.delete_authenticatorstaticstage",
"authentik_stages_authenticator_static.delete_staticdevice",
"authentik_stages_authenticator_static.delete_statictoken",
"authentik_stages_authenticator_static.view_authenticatorstaticstage",
"authentik_stages_authenticator_static.view_staticdevice",
"authentik_stages_authenticator_static.view_statictoken",
"authentik_stages_authenticator_totp.add_authenticatortotpstage",
"authentik_stages_authenticator_totp.add_totpdevice",
"authentik_stages_authenticator_totp.change_authenticatortotpstage",
"authentik_stages_authenticator_totp.change_totpdevice",
"authentik_stages_authenticator_totp.delete_authenticatortotpstage",
"authentik_stages_authenticator_totp.delete_totpdevice",
"authentik_stages_authenticator_totp.view_authenticatortotpstage",
"authentik_stages_authenticator_totp.view_totpdevice",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_webauthn.add_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.add_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.add_webauthndevice",
"authentik_stages_authenticator_webauthn.add_webauthndevicetype",
"authentik_stages_authenticator_webauthn.change_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.change_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.change_webauthndevice",
"authentik_stages_authenticator_webauthn.change_webauthndevicetype",
"authentik_stages_authenticator_webauthn.delete_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.delete_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.delete_webauthndevice",
"authentik_stages_authenticator_webauthn.delete_webauthndevicetype",
"authentik_stages_authenticator_webauthn.view_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.view_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.view_webauthndevice",
"authentik_stages_authenticator_webauthn.view_webauthndevicetype",
"authentik_stages_captcha.add_captchastage",
"authentik_stages_captcha.change_captchastage",
"authentik_stages_captcha.delete_captchastage",
"authentik_stages_captcha.view_captchastage",
"authentik_stages_consent.add_consentstage",
"authentik_stages_consent.add_userconsent",
"authentik_stages_consent.change_consentstage",
"authentik_stages_consent.change_userconsent",
"authentik_stages_consent.delete_consentstage",
"authentik_stages_consent.delete_userconsent",
"authentik_stages_consent.view_consentstage",
"authentik_stages_consent.view_userconsent",
"authentik_stages_deny.add_denystage",
"authentik_stages_deny.change_denystage",
"authentik_stages_deny.delete_denystage",
"authentik_stages_deny.view_denystage",
"authentik_stages_dummy.add_dummystage",
"authentik_stages_dummy.change_dummystage",
"authentik_stages_dummy.delete_dummystage",
"authentik_stages_dummy.view_dummystage",
"authentik_stages_email.add_emailstage",
"authentik_stages_email.change_emailstage",
"authentik_stages_email.delete_emailstage",
"authentik_stages_email.view_emailstage",
"authentik_stages_identification.add_identificationstage",
"authentik_stages_identification.add_identificationstagesource",
"authentik_stages_identification.change_identificationstage",
"authentik_stages_identification.change_identificationstagesource",
"authentik_stages_identification.delete_identificationstage",
"authentik_stages_identification.delete_identificationstagesource",
"authentik_stages_identification.view_identificationstage",
"authentik_stages_identification.view_identificationstagesource",
"authentik_stages_invitation.add_invitation",
"authentik_stages_invitation.add_invitationstage",
"authentik_stages_invitation.change_invitation",
"authentik_stages_invitation.change_invitationstage",
"authentik_stages_invitation.delete_invitation",
"authentik_stages_invitation.delete_invitationstage",
"authentik_stages_invitation.view_invitation",
"authentik_stages_invitation.view_invitationstage",
"authentik_stages_mtls.add_mutualtlsstage",
"authentik_stages_mtls.add_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.change_mutualtlsstage",
"authentik_stages_mtls.change_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.delete_mutualtlsstage",
"authentik_stages_mtls.delete_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.pass_outpost_certificate",
"authentik_stages_mtls.view_mutualtlsstage",
"authentik_stages_mtls.view_mutualtlsstagecertificateauthority",
"authentik_stages_password.add_passwordstage",
"authentik_stages_password.change_passwordstage",
"authentik_stages_password.delete_passwordstage",
"authentik_stages_password.view_passwordstage",
"authentik_stages_prompt.add_prompt",
"authentik_stages_prompt.add_promptstage",
"authentik_stages_prompt.add_promptstagefield",
"authentik_stages_prompt.add_promptstagevalidationpolicy",
"authentik_stages_prompt.change_prompt",
"authentik_stages_prompt.change_promptstage",
"authentik_stages_prompt.change_promptstagefield",
"authentik_stages_prompt.change_promptstagevalidationpolicy",
"authentik_stages_prompt.delete_prompt",
"authentik_stages_prompt.delete_promptstage",
"authentik_stages_prompt.delete_promptstagefield",
"authentik_stages_prompt.delete_promptstagevalidationpolicy",
"authentik_stages_prompt.view_prompt",
"authentik_stages_prompt.view_promptstage",
"authentik_stages_prompt.view_promptstagefield",
"authentik_stages_prompt.view_promptstagevalidationpolicy",
"authentik_stages_redirect.add_redirectstage",
"authentik_stages_redirect.change_redirectstage",
"authentik_stages_redirect.delete_redirectstage",
"authentik_stages_redirect.view_redirectstage",
"authentik_stages_source.add_sourcestage",
"authentik_stages_source.change_sourcestage",
"authentik_stages_source.delete_sourcestage",
"authentik_stages_source.view_sourcestage",
"authentik_stages_user_delete.add_userdeletestage",
"authentik_stages_user_delete.change_userdeletestage",
"authentik_stages_user_delete.delete_userdeletestage",
"authentik_stages_user_delete.view_userdeletestage",
"authentik_stages_user_login.add_userloginstage",
"authentik_stages_user_login.change_userloginstage",
"authentik_stages_user_login.delete_userloginstage",
"authentik_stages_user_login.view_userloginstage",
"authentik_stages_user_logout.add_userlogoutstage",
"authentik_stages_user_logout.change_userlogoutstage",
"authentik_stages_user_logout.delete_userlogoutstage",
"authentik_stages_user_logout.view_userlogoutstage",
"authentik_stages_user_write.add_userwritestage",
"authentik_stages_user_write.change_userwritestage",
"authentik_stages_user_write.delete_userwritestage",
"authentik_stages_user_write.view_userwritestage",
"authentik_tasks.retry_task",
"authentik_tasks.view_task",
"authentik_tasks_schedules.change_schedule",
"authentik_tasks_schedules.send_schedule",
"authentik_tasks_schedules.view_schedule",
"authentik_tenants.add_domain",
"authentik_tenants.add_tenant",
"authentik_tenants.change_domain",
"authentik_tenants.change_tenant",
"authentik_tenants.delete_domain",
"authentik_tenants.delete_tenant",
"authentik_tenants.view_domain",
"authentik_tenants.view_tenant"
]
},
"title": "Permissions"
}
},
"required": []
},
"model_authentik_core.user_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_user",
"change_user",
"delete_user",
"impersonate",
"preview_user",
"reset_user_password",
"view_user",
"view_user_applications"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_crypto.certificatekeypair": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"certificate_data": {
"type": "string",
"minLength": 1,
"title": "Certificate data",
"description": "PEM-encoded Certificate data"
},
"key_data": {
"type": "string",
"title": "Key data",
"description": "Optional Private Key. If this is set, you can use this keypair for encryption."
}
},
"required": []
},
"model_authentik_crypto.certificatekeypair_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_certificatekeypair",
"change_certificatekeypair",
"delete_certificatekeypair",
"view_certificatekeypair",
"view_certificatekeypair_certificate",
"view_certificatekeypair_key"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints_connectors_agent.agentconnector": {
"type": "object",
"properties": {
"connector_uuid": {
"type": "string",
"format": "uuid",
"title": "Connector uuid"
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"snapshot_expiry": {
"type": "string",
"minLength": 1,
"title": "Snapshot expiry"
},
"auth_session_duration": {
"type": "string",
"minLength": 1,
"title": "Auth session duration"
},
"auth_terminate_session_on_expiry": {
"type": "boolean",
"title": "Auth terminate session on expiry"
},
"refresh_interval": {
"type": "string",
"minLength": 1,
"title": "Refresh interval"
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow"
},
"nss_uid_offset": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Nss uid offset"
},
"nss_gid_offset": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Nss gid offset"
},
"challenge_key": {
"type": "string",
"format": "uuid",
"title": "Challenge key"
},
"challenge_idle_timeout": {
"type": "string",
"minLength": 1,
"title": "Challenge idle timeout"
},
"challenge_trigger_check_in": {
"type": "boolean",
"title": "Challenge trigger check in"
},
"jwt_federation_providers": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Jwt federation providers"
}
},
"required": []
},
"model_authentik_endpoints_connectors_agent.agentconnector_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_agentconnector",
"change_agentconnector",
"delete_agentconnector",
"view_agentconnector"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints_connectors_agent.agentdeviceuserbinding": {
"type": "object",
"properties": {
"policy": {
"type": "string",
"format": "uuid",
"title": "Policy"
},
"group": {
"type": "string",
"format": "uuid",
"title": "Group"
},
"user": {
"type": "integer",
"title": "User"
},
"target": {
"type": "string",
"format": "uuid",
"title": "Target"
},
"negate": {
"type": "boolean",
"title": "Negate",
"description": "Negates the outcome of the policy. Messages are unaffected."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"order": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Order"
},
"timeout": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Timeout",
"description": "Timeout after which Policy execution is terminated."
},
"failure_result": {
"type": "boolean",
"title": "Failure result",
"description": "Result if the Policy execution fails."
}
},
"required": []
},
"model_authentik_endpoints_connectors_agent.agentdeviceuserbinding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_agentdeviceuserbinding",
"change_agentdeviceuserbinding",
"delete_agentdeviceuserbinding",
"view_agentdeviceuserbinding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints_connectors_agent.enrollmenttoken": {
"type": "object",
"properties": {
"device_group": {
"type": "string",
"format": "uuid",
"title": "Device group"
},
"connector": {
"type": "string",
"format": "uuid",
"title": "Connector"
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expiring": {
"type": "boolean",
"title": "Expiring"
},
"expires": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Expires"
},
"key": {
"type": "string",
"minLength": 1,
"title": "Key"
}
},
"required": []
},
"model_authentik_endpoints_connectors_agent.enrollmenttoken_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_enrollmenttoken",
"change_enrollmenttoken",
"delete_enrollmenttoken",
"view_enrollment_token_key",
"view_enrollmenttoken"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints.deviceaccessgroup": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
}
},
"required": []
},
"model_authentik_endpoints.deviceaccessgroup_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_deviceaccessgroup",
"change_deviceaccessgroup",
"delete_deviceaccessgroup",
"view_deviceaccessgroup"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints.deviceuserbinding": {
"type": "object",
"properties": {
"policy": {
"type": "string",
"format": "uuid",
"title": "Policy"
},
"group": {
"type": "string",
"format": "uuid",
"title": "Group"
},
"user": {
"type": "integer",
"title": "User"
},
"target": {
"type": "string",
"format": "uuid",
"title": "Target"
},
"negate": {
"type": "boolean",
"title": "Negate",
"description": "Negates the outcome of the policy. Messages are unaffected."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"order": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Order"
},
"timeout": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Timeout",
"description": "Timeout after which Policy execution is terminated."
},
"failure_result": {
"type": "boolean",
"title": "Failure result",
"description": "Result if the Policy execution fails."
}
},
"required": []
},
"model_authentik_endpoints.deviceuserbinding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_deviceuserbinding",
"change_deviceuserbinding",
"delete_deviceuserbinding",
"view_deviceuserbinding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints.endpointstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"connector": {
"type": "string",
"format": "uuid",
"title": "Connector"
},
"mode": {
"type": "string",
"enum": [
"optional",
"required"
],
"title": "Mode"
}
},
"required": []
},
"model_authentik_endpoints.endpointstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_endpointstage",
"change_endpointstage",
"delete_endpointstage",
"view_endpointstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_agents.agent": {
"type": "object",
"properties": {
"username": {
"type": "string",
"maxLength": 150,
"minLength": 1,
"title": "Username",
"description": "Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "User's display name."
},
"is_active": {
"type": "boolean",
"title": "Active",
"description": "Designates whether this user should be treated as active. Unselect this instead of deleting accounts."
},
"last_login": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Last login"
},
"email": {
"type": "string",
"format": "email",
"maxLength": 254,
"title": "Email address"
},
"attributes": {
"type": "object",
"additionalProperties": true,
"title": "Attributes"
},
"expiring": {
"type": "boolean",
"title": "Expiring"
},
"expires": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Expires"
}
},
"required": []
},
"model_authentik_agents.agent_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_agent",
"add_agent_self_service",
"change_agent",
"delete_agent",
"view_agent"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints_connectors_fleet.fleetconnector": {
"type": "object",
"properties": {
"connector_uuid": {
"type": "string",
"format": "uuid",
"title": "Connector uuid"
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"url": {
"type": "string",
"format": "uri",
"maxLength": 200,
"minLength": 1,
"title": "Url"
},
"token": {
"type": "string",
"minLength": 1,
"title": "Token"
},
"headers_mapping": {
"type": "string",
"format": "uuid",
"title": "Headers mapping",
"description": "Configure additional headers to be sent. Mapping should return a dictionary of key-value pairs"
},
"map_users": {
"type": "boolean",
"title": "Map users"
},
"map_teams_access_group": {
"type": "boolean",
"title": "Map teams access group"
}
},
"required": []
},
"model_authentik_endpoints_connectors_fleet.fleetconnector_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_fleetconnector",
"change_fleetconnector",
"delete_fleetconnector",
"view_fleetconnector"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_endpoints_connectors_google_chrome.googlechromeconnector": {
"type": "object",
"properties": {
"connector_uuid": {
"type": "string",
"format": "uuid",
"title": "Connector uuid"
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"credentials": {
"type": "object",
"additionalProperties": true,
"title": "Credentials"
}
},
"required": []
},
"model_authentik_endpoints_connectors_google_chrome.googlechromeconnector_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_googlechromeconnector",
"change_googlechromeconnector",
"delete_googlechromeconnector",
"view_googlechromeconnector"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_lifecycle.useroffboarding": {
"type": "object",
"properties": {
"user": {
"type": "integer",
"title": "User"
},
"scheduled_at": {
"type": "string",
"format": "date-time",
"title": "Scheduled at",
"description": "Absolute time at which the offboarding action is executed."
},
"action": {
"type": "string",
"enum": [
"deactivate",
"delete"
],
"title": "Action"
},
"revoke_sessions": {
"type": "boolean",
"title": "Revoke sessions",
"description": "Revoke all of the user's sessions when offboarding."
},
"revoke_tokens": {
"type": "boolean",
"title": "Revoke tokens",
"description": "Revoke all of the user's tokens when offboarding."
}
},
"required": []
},
"model_authentik_lifecycle.useroffboarding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_useroffboarding",
"change_useroffboarding",
"delete_useroffboarding",
"view_useroffboarding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_lifecycle.lifecycleiteration": {
"type": "object",
"properties": {
"content_type": {
"type": "string",
"enum": [
"authentik_core.application",
"authentik_core.group",
"authentik_rbac.role"
],
"title": "Content type"
}
},
"required": []
},
"model_authentik_lifecycle.lifecycleiteration_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_lifecycleiteration",
"change_lifecycleiteration",
"delete_lifecycleiteration",
"view_lifecycleiteration"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_lifecycle.lifecyclerule": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"content_type": {
"type": "string",
"enum": [
"authentik_core.application",
"authentik_core.group",
"authentik_rbac.role"
],
"title": "Content type"
},
"object_id": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Object id"
},
"interval": {
"type": "string",
"minLength": 1,
"title": "Interval"
},
"grace_period": {
"type": "string",
"minLength": 1,
"title": "Grace period"
},
"reviewer_groups": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Reviewer groups"
},
"min_reviewers": {
"type": "integer",
"minimum": 0,
"maximum": 32767,
"title": "Min reviewers"
},
"min_reviewers_is_per_group": {
"type": "boolean",
"title": "Min reviewers is per group"
},
"reviewers": {
"type": "array",
"items": {
"type": "string",
"pattern": "^[-a-zA-Z0-9_]+$"
},
"title": "Reviewers"
},
"notification_transports": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Select which transports should be used to notify the reviewers. If none are selected, the notification will only be shown in the authentik UI."
},
"title": "Notification transports",
"description": "Select which transports should be used to notify the reviewers. If none are selected, the notification will only be shown in the authentik UI."
}
},
"required": []
},
"model_authentik_lifecycle.lifecyclerule_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_lifecyclerule",
"change_lifecyclerule",
"delete_lifecyclerule",
"view_lifecyclerule"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_lifecycle.review": {
"type": "object",
"properties": {
"iteration": {
"type": "string",
"format": "uuid",
"title": "Iteration"
},
"note": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Note"
}
},
"required": []
},
"model_authentik_lifecycle.review_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_review",
"change_review",
"delete_review",
"view_review"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_enterprise.license": {
"type": "object",
"properties": {
"key": {
"type": "string",
"minLength": 1,
"title": "Key"
}
},
"required": []
},
"model_authentik_enterprise.license_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_license",
"change_license",
"delete_license",
"view_license"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_unique_password.uniquepasswordpolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"password_field": {
"type": "string",
"minLength": 1,
"title": "Password field",
"description": "Field key to check, field keys defined in Prompt stages are available."
},
"num_historical_passwords": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Num historical passwords",
"description": "Number of passwords to check against."
}
},
"required": []
},
"model_authentik_policies_unique_password.uniquepasswordpolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_uniquepasswordpolicy",
"change_uniquepasswordpolicy",
"delete_uniquepasswordpolicy",
"view_uniquepasswordpolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_google_workspace.googleworkspaceprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"property_mappings_group": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Property mappings used for group creation/updating."
},
"title": "Property mappings group",
"description": "Property mappings used for group creation/updating."
},
"delegated_subject": {
"type": "string",
"format": "email",
"maxLength": 254,
"minLength": 1,
"title": "Delegated subject"
},
"credentials": {
"type": "object",
"additionalProperties": true,
"title": "Credentials"
},
"scopes": {
"type": "string",
"minLength": 1,
"title": "Scopes"
},
"exclude_users_service_account": {
"type": "boolean",
"title": "Exclude users service account"
},
"filter_group": {
"type": "string",
"format": "uuid",
"title": "Filter group"
},
"user_delete_action": {
"type": "string",
"enum": [
"do_nothing",
"delete",
"suspend"
],
"title": "User delete action"
},
"group_delete_action": {
"type": "string",
"enum": [
"do_nothing",
"delete",
"suspend"
],
"title": "Group delete action"
},
"default_group_email_domain": {
"type": "string",
"minLength": 1,
"title": "Default group email domain"
},
"sync_page_size": {
"type": "integer",
"minimum": 1,
"maximum": 2147483647,
"title": "Sync page size",
"description": "Controls the number of objects synced in a single task"
},
"sync_page_timeout": {
"type": "string",
"minLength": 1,
"title": "Sync page timeout",
"description": "Timeout for synchronization of a single page"
},
"dry_run": {
"type": "boolean",
"title": "Dry run",
"description": "When enabled, provider will not modify or create objects in the remote system."
},
"discovery_enabled": {
"type": "boolean",
"title": "Discovery enabled",
"description": "When enabled, authentik will attempt to discover existing resources in the remote system."
}
},
"required": []
},
"model_authentik_providers_google_workspace.googleworkspaceprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_googleworkspaceprovider",
"change_googleworkspaceprovider",
"delete_googleworkspaceprovider",
"view_googleworkspaceprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_google_workspace.googleworkspaceprovidermapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_providers_google_workspace.googleworkspaceprovidermapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_googleworkspaceprovidermapping",
"change_googleworkspaceprovidermapping",
"delete_googleworkspaceprovidermapping",
"view_googleworkspaceprovidermapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_microsoft_entra.microsoftentraprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"property_mappings_group": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Property mappings used for group creation/updating."
},
"title": "Property mappings group",
"description": "Property mappings used for group creation/updating."
},
"client_id": {
"type": "string",
"minLength": 1,
"title": "Client id"
},
"client_secret": {
"type": "string",
"minLength": 1,
"title": "Client secret"
},
"tenant_id": {
"type": "string",
"minLength": 1,
"title": "Tenant id"
},
"exclude_users_service_account": {
"type": "boolean",
"title": "Exclude users service account"
},
"filter_group": {
"type": "string",
"format": "uuid",
"title": "Filter group"
},
"user_delete_action": {
"type": "string",
"enum": [
"do_nothing",
"delete",
"suspend"
],
"title": "User delete action"
},
"group_delete_action": {
"type": "string",
"enum": [
"do_nothing",
"delete",
"suspend"
],
"title": "Group delete action"
},
"sync_page_size": {
"type": "integer",
"minimum": 1,
"maximum": 2147483647,
"title": "Sync page size",
"description": "Controls the number of objects synced in a single task"
},
"discovery_enabled": {
"type": "boolean",
"title": "Discovery enabled",
"description": "When enabled, authentik will attempt to discover existing resources in the remote system."
},
"sync_page_timeout": {
"type": "string",
"minLength": 1,
"title": "Sync page timeout",
"description": "Timeout for synchronization of a single page"
},
"dry_run": {
"type": "boolean",
"title": "Dry run",
"description": "When enabled, provider will not modify or create objects in the remote system."
}
},
"required": []
},
"model_authentik_providers_microsoft_entra.microsoftentraprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_microsoftentraprovider",
"change_microsoftentraprovider",
"delete_microsoftentraprovider",
"view_microsoftentraprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_microsoft_entra.microsoftentraprovidermapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_providers_microsoft_entra.microsoftentraprovidermapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_microsoftentraprovidermapping",
"change_microsoftentraprovidermapping",
"delete_microsoftentraprovidermapping",
"view_microsoftentraprovidermapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_ssf.ssfprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"signing_key": {
"type": "string",
"format": "uuid",
"title": "Signing Key",
"description": "Key used to sign the SSF Events."
},
"oidc_auth_providers": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Oidc auth providers"
},
"event_retention": {
"type": "string",
"minLength": 1,
"title": "Event retention"
},
"push_verify_certificates": {
"type": "boolean",
"title": "Push verify certificates"
}
},
"required": []
},
"model_authentik_providers_ssf.ssfprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_ssfprovider",
"add_stream",
"change_ssfprovider",
"delete_ssfprovider",
"view_ssfprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_ws_federation.wsfederationprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Invalidation flow",
"description": "Flow used ending the session from a provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"reply_url": {
"type": "string",
"format": "uri",
"minLength": 1,
"title": "Reply url"
},
"wtrealm": {
"type": "string",
"minLength": 1,
"title": "Wtrealm"
},
"assertion_valid_not_before": {
"type": "string",
"minLength": 1,
"title": "Assertion valid not before",
"description": "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)."
},
"assertion_valid_not_on_or_after": {
"type": "string",
"minLength": 1,
"title": "Assertion valid not on or after",
"description": "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"session_valid_not_on_or_after": {
"type": "string",
"minLength": 1,
"title": "Session valid not on or after",
"description": "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"name_id_mapping": {
"type": "string",
"format": "uuid",
"title": "NameID Property Mapping",
"description": "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be considered"
},
"authn_context_class_ref_mapping": {
"type": "string",
"format": "uuid",
"title": "AuthnContextClassRef Property Mapping",
"description": "Configure how the AuthnContextClassRef value will be created. When left empty, the AuthnContextClassRef will be set based on which authentication methods the user used to authenticate."
},
"saml_version": {
"type": "string",
"enum": [
"1.1",
"2.0"
],
"title": "Saml version",
"description": "SAML assertion version to issue in the security token. Microsoft Entra ID and classic ADFS-style relying parties typically require SAML 1.1."
},
"digest_algorithm": {
"type": "string",
"enum": [
"http://www.w3.org/2000/09/xmldsig#sha1",
"http://www.w3.org/2001/04/xmlenc#sha256",
"http://www.w3.org/2001/04/xmldsig-more#sha384",
"http://www.w3.org/2001/04/xmlenc#sha512"
],
"title": "Digest algorithm"
},
"signature_algorithm": {
"type": "string",
"enum": [
"http://www.w3.org/2000/09/xmldsig#rsa-sha1",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha384",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha512",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512",
"http://www.w3.org/2000/09/xmldsig#dsa-sha1"
],
"title": "Signature algorithm"
},
"signing_kp": {
"type": "string",
"format": "uuid",
"title": "Signing Keypair",
"description": "Keypair used to sign outgoing Responses going to the Service Provider."
},
"encryption_kp": {
"type": "string",
"format": "uuid",
"title": "Encryption Keypair",
"description": "When selected, incoming assertions are encrypted by the IdP using the public key of the encryption keypair. The assertion is decrypted by the SP using the the private key."
},
"sign_assertion": {
"type": "boolean",
"title": "Sign assertion"
},
"sign_logout_request": {
"type": "boolean",
"title": "Sign logout request"
},
"default_name_id_policy": {
"type": "string",
"enum": [
"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
"urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName",
"urn:oasis:names:tc:SAML:2.0:nameid-format:WindowsDomainQualifiedName",
"urn:oasis:names:tc:SAML:2.0:nameid-format:transient",
"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
],
"title": "Default name id policy"
}
},
"required": []
},
"model_authentik_providers_ws_federation.wsfederationprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_wsfederationprovider",
"change_wsfederationprovider",
"delete_wsfederationprovider",
"view_wsfederationprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_reports.dataexport": {
"type": "object",
"properties": {
"query_params": {
"type": "object",
"additionalProperties": true,
"title": "Query params"
}
},
"required": []
},
"model_authentik_reports.dataexport_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_dataexport",
"change_dataexport",
"delete_dataexport",
"view_dataexport"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_requests.grantrequest": {
"type": "object",
"properties": {
"requester_data": {
"type": "object",
"additionalProperties": true,
"title": "Requester data"
},
"fulfiller_data": {
"type": "object",
"additionalProperties": true,
"title": "Fulfiller data"
},
"expires": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Expires"
},
"uuid": {
"type": "string",
"format": "uuid",
"title": "Uuid"
}
},
"required": []
},
"model_authentik_requests.grantrequest_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_grantrequest",
"change_grantrequest",
"delete_grantrequest",
"fulfill_grantrequest",
"request_grantrequest",
"revoke_grantrequest",
"view_grantrequest"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_requests.requestrule": {
"type": "object",
"properties": {
"uuid": {
"type": "string",
"format": "uuid",
"title": "Uuid"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"notification_transports": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Notification transports"
},
"notification_mode": {
"type": "string",
"enum": [
"all",
"direct",
"random_min_reviewers"
],
"title": "Notification mode"
},
"min_reviewers": {
"type": "integer",
"minimum": 0,
"maximum": 32767,
"title": "Min reviewers"
},
"min_reviewers_is_per_group": {
"type": "boolean",
"title": "Min reviewers is per group"
},
"request_flow": {
"type": "string",
"format": "uuid",
"title": "Request flow"
}
},
"required": []
},
"model_authentik_requests.requestrule_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_requestrule",
"change_requestrule",
"delete_requestrule",
"view_requestrule"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_requests.requestrulebinding": {
"type": "object",
"properties": {
"uuid": {
"type": "string",
"format": "uuid",
"title": "Uuid"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"rule": {
"type": "string",
"format": "uuid",
"title": "Rule"
},
"target": {
"type": "string",
"format": "uuid",
"title": "Target"
},
"expiry_pending": {
"type": "string",
"minLength": 1,
"title": "Expiry pending",
"description": "How long a request against this binding stays pending before it automatically lapses if not approved or denied."
},
"expiry_granted_max": {
"type": "string",
"minLength": 1,
"title": "Expiry granted max",
"description": "The maximum duration a grant approved against this binding can last."
}
},
"required": []
},
"model_authentik_requests.requestrulebinding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_requestrulebinding",
"change_requestrulebinding",
"delete_requestrulebinding",
"view_requestrulebinding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_requests.requestrulechildbinding": {
"type": "object",
"properties": {
"uuid": {
"type": "string",
"format": "uuid",
"title": "Uuid"
},
"binding": {
"type": "string",
"format": "uuid",
"title": "Binding"
},
"target": {
"type": "string",
"format": "uuid",
"title": "Target"
}
},
"required": []
},
"model_authentik_requests.requestrulechildbinding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_requestrulechildbinding",
"change_requestrulechildbinding",
"delete_requestrulechildbinding",
"view_requestrulechildbinding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_account_lockdown.accountlockdownstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"deactivate_user": {
"type": "boolean",
"title": "Deactivate user",
"description": "Deactivate the user account (set is_active to False)"
},
"set_unusable_password": {
"type": "boolean",
"title": "Set unusable password",
"description": "Set an unusable password for the user"
},
"delete_sessions": {
"type": "boolean",
"title": "Delete sessions",
"description": "Delete all active sessions for the user"
},
"revoke_tokens": {
"type": "boolean",
"title": "Revoke tokens",
"description": "Revoke all tokens for the user (API, app password, recovery, verification, OAuth)"
},
"self_service_completion_flow": {
"type": "string",
"format": "uuid",
"title": "Self service completion flow",
"description": "Flow to redirect users to after self-service lockdown. This flow should not require authentication since the user's session is deleted."
}
},
"required": []
},
"model_authentik_stages_account_lockdown.accountlockdownstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_accountlockdownstage",
"change_accountlockdownstage",
"delete_accountlockdownstage",
"view_accountlockdownstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"credentials": {
"type": "object",
"additionalProperties": true,
"title": "Credentials"
}
},
"required": []
},
"model_authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatorendpointgdtcstage",
"change_authenticatorendpointgdtcstage",
"delete_authenticatorendpointgdtcstage",
"view_authenticatorendpointgdtcstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_mtls.mutualtlsstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"mode": {
"type": "string",
"enum": [
"optional",
"required"
],
"title": "Mode"
},
"certificate_authorities": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Configure certificate authorities to validate the certificate against. This option has a higher priority than the `client_certificate` option on `Brand`."
},
"title": "Certificate authorities",
"description": "Configure certificate authorities to validate the certificate against. This option has a higher priority than the `client_certificate` option on `Brand`."
},
"cert_attribute": {
"type": "string",
"enum": [
"subject",
"common_name",
"email"
],
"title": "Cert attribute"
},
"user_attribute": {
"type": "string",
"enum": [
"username",
"email"
],
"title": "User attribute"
}
},
"required": []
},
"model_authentik_stages_mtls.mutualtlsstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_mutualtlsstage",
"change_mutualtlsstage",
"delete_mutualtlsstage",
"pass_outpost_certificate",
"view_mutualtlsstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_source.sourcestage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"resume_timeout": {
"type": "string",
"minLength": 1,
"title": "Resume timeout",
"description": "Amount of time a user can take to return from the source to continue the flow (Format: hours=-1;minutes=-2;seconds=-3)"
},
"resume_on_match_failures": {
"type": "array",
"items": {
"type": "string",
"enum": [
"missing_property"
],
"title": "Resume on match failures"
},
"title": "Resume on match failures",
"description": "Source matching failure reasons for which the flow should resume."
}
},
"required": []
},
"model_authentik_stages_source.sourcestage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_sourcestage",
"change_sourcestage",
"delete_sourcestage",
"view_sourcestage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_events.event": {
"type": "object",
"properties": {
"user": {
"type": "object",
"additionalProperties": true,
"title": "User"
},
"action": {
"type": "string",
"enum": [
"login",
"login_failed",
"logout",
"user_write",
"user_offboarded",
"suspicious_request",
"password_set",
"secret_view",
"secret_rotate",
"invitation_used",
"authorize_application",
"source_linked",
"impersonation_started",
"impersonation_ended",
"flow_execution",
"policy_execution",
"policy_exception",
"property_mapping_exception",
"system_task_execution",
"system_task_exception",
"system_exception",
"configuration_error",
"configuration_warning",
"model_created",
"model_updated",
"model_deleted",
"email_sent",
"update_available",
"export_ready",
"review_initiated",
"review_overdue",
"review_attested",
"review_completed",
"access_request_created",
"access_request_approved",
"access_request_denied",
"access_request_revoked",
"custom_"
],
"title": "Action"
},
"app": {
"type": "string",
"minLength": 1,
"title": "App"
},
"context": {
"type": "object",
"additionalProperties": true,
"title": "Context"
},
"client_ip": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Client ip"
},
"expires": {
"type": "string",
"format": "date-time",
"title": "Expires"
},
"brand": {
"type": "object",
"additionalProperties": true,
"title": "Brand"
}
},
"required": []
},
"model_authentik_events.event_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_event",
"change_event",
"delete_event",
"view_event"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_events.notification": {
"type": "object",
"properties": {
"hyperlink": {
"type": [
"string",
"null"
],
"maxLength": 4096,
"title": "Hyperlink"
},
"hyperlink_label": {
"type": [
"string",
"null"
],
"title": "Hyperlink label"
},
"event": {
"type": "object",
"properties": {
"user": {
"type": "object",
"additionalProperties": true,
"title": "User"
},
"action": {
"type": "string",
"enum": [
"login",
"login_failed",
"logout",
"user_write",
"user_offboarded",
"suspicious_request",
"password_set",
"secret_view",
"secret_rotate",
"invitation_used",
"authorize_application",
"source_linked",
"impersonation_started",
"impersonation_ended",
"flow_execution",
"policy_execution",
"policy_exception",
"property_mapping_exception",
"system_task_execution",
"system_task_exception",
"system_exception",
"configuration_error",
"configuration_warning",
"model_created",
"model_updated",
"model_deleted",
"email_sent",
"update_available",
"export_ready",
"review_initiated",
"review_overdue",
"review_attested",
"review_completed",
"access_request_created",
"access_request_approved",
"access_request_denied",
"access_request_revoked",
"custom_"
],
"title": "Action"
},
"app": {
"type": "string",
"minLength": 1,
"title": "App"
},
"context": {
"type": "object",
"additionalProperties": true,
"title": "Context"
},
"client_ip": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Client ip"
},
"expires": {
"type": "string",
"format": "date-time",
"title": "Expires"
},
"brand": {
"type": "object",
"additionalProperties": true,
"title": "Brand"
}
},
"required": [
"action",
"app"
],
"title": "Event"
},
"seen": {
"type": "boolean",
"title": "Seen"
}
},
"required": []
},
"model_authentik_events.notification_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_notification",
"change_notification",
"delete_notification",
"view_notification"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_events.notificationrule": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"transports": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI."
},
"title": "Transports",
"description": "Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI."
},
"severity": {
"type": "string",
"enum": [
"notice",
"warning",
"alert"
],
"title": "Severity",
"description": "Controls which severity level the created notifications will have."
},
"destination_group": {
"type": "string",
"format": "uuid",
"title": "Destination group",
"description": "Define which group of users this notification should be sent and shown to. If left empty, Notification won't ben sent."
},
"destination_event_user": {
"type": "boolean",
"title": "Destination event user",
"description": "When enabled, notification will be sent to user the user that triggered the event.When destination_group is configured, notification is sent to both."
}
},
"required": []
},
"model_authentik_events.notificationrule_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_notificationrule",
"change_notificationrule",
"delete_notificationrule",
"view_notificationrule"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_events.notificationtransport": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"mode": {
"type": "string",
"enum": [
"local",
"webhook",
"webhook_slack",
"email"
],
"title": "Mode"
},
"webhook_url": {
"type": "string",
"title": "Webhook url"
},
"webhook_ca": {
"type": "string",
"format": "uuid",
"title": "Webhook ca",
"description": "When set, the selected certificate is used to validate the certificate of the webhook server."
},
"webhook_mapping_body": {
"type": "string",
"format": "uuid",
"title": "Webhook mapping body",
"description": "Customize the body of the request. Mapping should return data that is JSON-serializable."
},
"webhook_mapping_headers": {
"type": "string",
"format": "uuid",
"title": "Webhook mapping headers",
"description": "Configure additional headers to be sent. Mapping should return a dictionary of key-value pairs"
},
"email_subject_prefix": {
"type": "string",
"title": "Email subject prefix"
},
"email_template": {
"type": "string",
"minLength": 1,
"title": "Email template"
},
"send_once": {
"type": "boolean",
"title": "Send once",
"description": "Only send notification once, for example when sending a webhook into a chat channel."
}
},
"required": []
},
"model_authentik_events.notificationtransport_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_notificationtransport",
"change_notificationtransport",
"delete_notificationtransport",
"view_notificationtransport"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_events.notificationwebhookmapping": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_events.notificationwebhookmapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_notificationwebhookmapping",
"change_notificationwebhookmapping",
"delete_notificationwebhookmapping",
"view_notificationwebhookmapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_flows.flow": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Visible in the URL."
},
"title": {
"type": "string",
"minLength": 1,
"title": "Title",
"description": "Shown as the Title in Flow pages."
},
"designation": {
"type": "string",
"enum": [
"authentication",
"authorization",
"invalidation",
"enrollment",
"unenrollment",
"recovery",
"stage_configuration"
],
"title": "Designation",
"description": "Decides what this Flow is used for. For example, the Authentication flow is redirect to when an un-authenticated user visits authentik."
},
"background": {
"type": "string",
"title": "Background",
"description": "Background shown during execution"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"compatibility_mode": {
"type": "boolean",
"title": "Compatibility mode",
"description": "Enable compatibility mode, increases compatibility with password managers on mobile devices."
},
"layout": {
"type": "string",
"enum": [
"stacked",
"content_left",
"content_right",
"sidebar_left",
"sidebar_right",
"sidebar_left_frame_background",
"sidebar_right_frame_background"
],
"title": "Layout"
},
"denied_action": {
"type": "string",
"enum": [
"message_continue",
"message",
"continue"
],
"title": "Denied action",
"description": "Configure what should happen when a flow denies access to a user."
},
"authentication": {
"type": "string",
"enum": [
"none",
"require_authenticated",
"require_unauthenticated",
"require_superuser",
"require_redirect",
"require_outpost",
"require_token"
],
"title": "Authentication",
"description": "Required level of authentication and authorization to access a flow."
}
},
"required": []
},
"model_authentik_flows.flow_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_flow",
"change_flow",
"clear_flow_cache",
"delete_flow",
"export_flow",
"inspect_flow",
"view_flow",
"view_flow_cache"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_flows.flowstagebinding": {
"type": "object",
"properties": {
"target": {
"type": "string",
"format": "uuid",
"title": "Target"
},
"stage": {
"type": "string",
"format": "uuid",
"title": "Stage"
},
"evaluate_on_plan": {
"type": "boolean",
"title": "Evaluate on plan",
"description": "Evaluate policies during the Flow planning process."
},
"re_evaluate_policies": {
"type": "boolean",
"title": "Re evaluate policies",
"description": "Evaluate policies when the Stage is presented to the user."
},
"order": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Order"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"invalid_response_action": {
"type": "string",
"enum": [
"retry",
"restart",
"restart_with_context"
],
"title": "Invalid response action",
"description": "Configure how the flow executor should handle an invalid response to a challenge. RETRY returns the error message and a similar challenge to the executor. RESTART restarts the flow from the beginning, and RESTART_WITH_CONTEXT restarts the flow while keeping the current context."
}
},
"required": []
},
"model_authentik_flows.flowstagebinding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_flowstagebinding",
"change_flowstagebinding",
"delete_flowstagebinding",
"view_flowstagebinding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_outposts.dockerserviceconnection": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"local": {
"type": "boolean",
"title": "Local",
"description": "If enabled, use the local connection. Required Docker socket/Kubernetes Integration"
},
"url": {
"type": "string",
"minLength": 1,
"title": "Url",
"description": "Can be in the format of 'unix://<path>' when connecting to a local docker daemon, or 'https://<hostname>:2376' when connecting to a remote system."
},
"tls_verification": {
"type": "string",
"format": "uuid",
"title": "Tls verification",
"description": "CA which the endpoint's Certificate is verified against. Can be left empty for no validation."
},
"tls_authentication": {
"type": "string",
"format": "uuid",
"title": "Tls authentication",
"description": "Certificate/Key used for authentication. Can be left empty for no authentication."
}
},
"required": []
},
"model_authentik_outposts.dockerserviceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_dockerserviceconnection",
"change_dockerserviceconnection",
"delete_dockerserviceconnection",
"view_dockerserviceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_outposts.kubernetesserviceconnection": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"local": {
"type": "boolean",
"title": "Local",
"description": "If enabled, use the local connection. Required Docker socket/Kubernetes Integration"
},
"kubeconfig": {
"type": "object",
"additionalProperties": true,
"title": "Kubeconfig",
"description": "Paste your kubeconfig here. authentik will automatically use the currently selected context."
},
"verify_ssl": {
"type": "boolean",
"title": "Verify ssl",
"description": "Verify SSL Certificates of the Kubernetes API endpoint"
}
},
"required": []
},
"model_authentik_outposts.kubernetesserviceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_kubernetesserviceconnection",
"change_kubernetesserviceconnection",
"delete_kubernetesserviceconnection",
"view_kubernetesserviceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_outposts.outpost": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"type": {
"type": "string",
"enum": [
"proxy",
"ldap",
"radius",
"rac"
],
"title": "Type"
},
"providers": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Providers"
},
"service_connection": {
"type": "string",
"format": "uuid",
"title": "Service connection",
"description": "Select Service-Connection authentik should use to manage this outpost. Leave empty if authentik should not handle the deployment."
},
"config": {
"type": "object",
"additionalProperties": true,
"title": "Config"
},
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
}
},
"required": []
},
"model_authentik_outposts.outpost_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_outpost",
"change_outpost",
"delete_outpost",
"view_outpost"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_dummy.dummypolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"result": {
"type": "boolean",
"title": "Result"
},
"wait_min": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Wait min"
},
"wait_max": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Wait max"
}
},
"required": []
},
"model_authentik_policies_dummy.dummypolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_dummypolicy",
"change_dummypolicy",
"delete_dummypolicy",
"view_dummypolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_event_matcher.eventmatcherpolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"action": {
"type": [
"null",
"string"
],
"enum": [
null,
"login",
"login_failed",
"logout",
"user_write",
"user_offboarded",
"suspicious_request",
"password_set",
"secret_view",
"secret_rotate",
"invitation_used",
"authorize_application",
"source_linked",
"impersonation_started",
"impersonation_ended",
"flow_execution",
"policy_execution",
"policy_exception",
"property_mapping_exception",
"system_task_execution",
"system_task_exception",
"system_exception",
"configuration_error",
"configuration_warning",
"model_created",
"model_updated",
"model_deleted",
"email_sent",
"update_available",
"export_ready",
"review_initiated",
"review_overdue",
"review_attested",
"review_completed",
"access_request_created",
"access_request_approved",
"access_request_denied",
"access_request_revoked",
"custom_"
],
"title": "Action",
"description": "Match created events with this action type. When left empty, all action types will be matched."
},
"client_ip": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Client ip",
"description": "Matches Event's Client IP (strict matching, for network matching use an Expression Policy)"
},
"app": {
"type": [
"null",
"string"
],
"enum": [
null,
"authentik.commands",
"authentik.tenants",
"authentik.tasks",
"authentik.admin",
"authentik.api",
"authentik.core",
"authentik.crypto",
"authentik.endpoints",
"authentik.endpoints.connectors.agent",
"authentik.enterprise",
"authentik.events",
"authentik.admin.files",
"authentik.flows",
"authentik.outposts",
"authentik.policies.dummy",
"authentik.policies.event_matcher",
"authentik.policies.expiry",
"authentik.policies.expression",
"authentik.policies.geoip",
"authentik.policies.password",
"authentik.policies.reputation",
"authentik.policies",
"authentik.providers.ldap",
"authentik.providers.oauth2",
"authentik.providers.proxy",
"authentik.providers.rac",
"authentik.providers.radius",
"authentik.providers.saml",
"authentik.providers.scim",
"authentik.rbac",
"authentik.recovery",
"authentik.sources.kerberos",
"authentik.sources.ldap",
"authentik.sources.oauth",
"authentik.sources.plex",
"authentik.sources.saml",
"authentik.sources.scim",
"authentik.sources.telegram",
"authentik.stages.authenticator",
"authentik.stages.authenticator_duo",
"authentik.stages.authenticator_email",
"authentik.stages.authenticator_sms",
"authentik.stages.authenticator_static",
"authentik.stages.authenticator_totp",
"authentik.stages.authenticator_validate",
"authentik.stages.authenticator_webauthn",
"authentik.stages.captcha",
"authentik.stages.consent",
"authentik.stages.deny",
"authentik.stages.dummy",
"authentik.stages.email",
"authentik.stages.identification",
"authentik.stages.invitation",
"authentik.stages.password",
"authentik.stages.prompt",
"authentik.stages.redirect",
"authentik.stages.user_delete",
"authentik.stages.user_login",
"authentik.stages.user_logout",
"authentik.stages.user_write",
"authentik.tasks.schedules",
"authentik.brands",
"authentik.blueprints",
"authentik.enterprise.agents",
"authentik.enterprise.audit",
"authentik.enterprise.endpoints.connectors.agent",
"authentik.enterprise.endpoints.connectors.fleet",
"authentik.enterprise.endpoints.connectors.google_chrome",
"authentik.enterprise.lifecycle",
"authentik.enterprise.policies.unique_password",
"authentik.enterprise.providers.google_workspace",
"authentik.enterprise.providers.microsoft_entra",
"authentik.enterprise.providers.radius",
"authentik.enterprise.providers.scim",
"authentik.enterprise.providers.ssf",
"authentik.enterprise.providers.ws_federation",
"authentik.enterprise.reports",
"authentik.enterprise.requests",
"authentik.enterprise.stages.account_lockdown",
"authentik.enterprise.stages.authenticator_endpoint_gdtc",
"authentik.enterprise.stages.mtls",
"authentik.enterprise.stages.source"
],
"title": "App",
"description": "Match events created by selected application. When left empty, all applications are matched."
},
"model": {
"type": [
"null",
"string"
],
"enum": [
null,
"authentik_tenants.domain",
"authentik_core.group",
"authentik_core.user",
"authentik_core.application",
"authentik_core.applicationentitlement",
"authentik_core.token",
"authentik_core.objectattribute",
"authentik_core.actor",
"authentik_crypto.certificatekeypair",
"authentik_endpoints.deviceuserbinding",
"authentik_endpoints.deviceaccessgroup",
"authentik_endpoints.endpointstage",
"authentik_endpoints_connectors_agent.agentconnector",
"authentik_endpoints_connectors_agent.agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.enrollmenttoken",
"authentik_enterprise.license",
"authentik_events.event",
"authentik_events.notificationtransport",
"authentik_events.notification",
"authentik_events.notificationrule",
"authentik_events.notificationwebhookmapping",
"authentik_flows.flow",
"authentik_flows.flowstagebinding",
"authentik_outposts.dockerserviceconnection",
"authentik_outposts.kubernetesserviceconnection",
"authentik_outposts.outpost",
"authentik_policies_dummy.dummypolicy",
"authentik_policies_event_matcher.eventmatcherpolicy",
"authentik_policies_expiry.passwordexpirypolicy",
"authentik_policies_expression.expressionpolicy",
"authentik_policies_geoip.geoippolicy",
"authentik_policies_password.passwordpolicy",
"authentik_policies_reputation.reputationpolicy",
"authentik_policies.policybinding",
"authentik_providers_ldap.ldapprovider",
"authentik_providers_oauth2.scopemapping",
"authentik_providers_oauth2.oauth2provider",
"authentik_providers_oauth2.oauth2dynamicclientregistration",
"authentik_providers_proxy.proxyprovider",
"authentik_providers_rac.racprovider",
"authentik_providers_rac.endpoint",
"authentik_providers_rac.racpropertymapping",
"authentik_providers_radius.radiusprovider",
"authentik_providers_radius.radiusproviderpropertymapping",
"authentik_providers_saml.samlprovider",
"authentik_providers_saml.samlpropertymapping",
"authentik_providers_scim.scimprovider",
"authentik_providers_scim.scimmapping",
"authentik_rbac.role",
"authentik_rbac.initialpermissions",
"authentik_sources_kerberos.kerberossource",
"authentik_sources_kerberos.kerberossourcepropertymapping",
"authentik_sources_kerberos.userkerberossourceconnection",
"authentik_sources_kerberos.groupkerberossourceconnection",
"authentik_sources_ldap.ldapsource",
"authentik_sources_ldap.ldapsourcepropertymapping",
"authentik_sources_ldap.userldapsourceconnection",
"authentik_sources_ldap.groupldapsourceconnection",
"authentik_sources_oauth.oauthsource",
"authentik_sources_oauth.oauthsourcepropertymapping",
"authentik_sources_oauth.useroauthsourceconnection",
"authentik_sources_oauth.groupoauthsourceconnection",
"authentik_sources_plex.plexsource",
"authentik_sources_plex.plexsourcepropertymapping",
"authentik_sources_plex.userplexsourceconnection",
"authentik_sources_plex.groupplexsourceconnection",
"authentik_sources_saml.samlsource",
"authentik_sources_saml.samlsourcepropertymapping",
"authentik_sources_saml.usersamlsourceconnection",
"authentik_sources_saml.groupsamlsourceconnection",
"authentik_sources_scim.scimsource",
"authentik_sources_scim.scimsourcepropertymapping",
"authentik_sources_telegram.telegramsource",
"authentik_sources_telegram.telegramsourcepropertymapping",
"authentik_sources_telegram.usertelegramsourceconnection",
"authentik_sources_telegram.grouptelegramsourceconnection",
"authentik_stages_authenticator_duo.authenticatorduostage",
"authentik_stages_authenticator_duo.duodevice",
"authentik_stages_authenticator_email.authenticatoremailstage",
"authentik_stages_authenticator_email.emaildevice",
"authentik_stages_authenticator_sms.authenticatorsmsstage",
"authentik_stages_authenticator_sms.smsdevice",
"authentik_stages_authenticator_static.authenticatorstaticstage",
"authentik_stages_authenticator_static.staticdevice",
"authentik_stages_authenticator_totp.authenticatortotpstage",
"authentik_stages_authenticator_totp.totpdevice",
"authentik_stages_authenticator_validate.authenticatorvalidatestage",
"authentik_stages_authenticator_webauthn.authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.webauthndevice",
"authentik_stages_captcha.captchastage",
"authentik_stages_consent.consentstage",
"authentik_stages_deny.denystage",
"authentik_stages_dummy.dummystage",
"authentik_stages_email.emailstage",
"authentik_stages_identification.identificationstage",
"authentik_stages_invitation.invitationstage",
"authentik_stages_invitation.invitation",
"authentik_stages_password.passwordstage",
"authentik_stages_prompt.prompt",
"authentik_stages_prompt.promptstage",
"authentik_stages_redirect.redirectstage",
"authentik_stages_user_delete.userdeletestage",
"authentik_stages_user_login.userloginstage",
"authentik_stages_user_logout.userlogoutstage",
"authentik_stages_user_write.userwritestage",
"authentik_tasks_schedules.schedule",
"authentik_brands.brand",
"authentik_blueprints.blueprintinstance",
"authentik_agents.agent",
"authentik_endpoints_connectors_fleet.fleetconnector",
"authentik_endpoints_connectors_google_chrome.googlechromeconnector",
"authentik_lifecycle.lifecyclerule",
"authentik_lifecycle.lifecycleiteration",
"authentik_lifecycle.review",
"authentik_lifecycle.useroffboarding",
"authentik_policies_unique_password.uniquepasswordpolicy",
"authentik_providers_google_workspace.googleworkspaceprovider",
"authentik_providers_google_workspace.googleworkspaceprovidermapping",
"authentik_providers_microsoft_entra.microsoftentraprovider",
"authentik_providers_microsoft_entra.microsoftentraprovidermapping",
"authentik_providers_ssf.ssfprovider",
"authentik_providers_ws_federation.wsfederationprovider",
"authentik_reports.dataexport",
"authentik_requests.requestrulechildbinding",
"authentik_requests.requestrulebinding",
"authentik_requests.requestrule",
"authentik_requests.grantrequest",
"authentik_stages_account_lockdown.accountlockdownstage",
"authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage",
"authentik_stages_mtls.mutualtlsstage",
"authentik_stages_source.sourcestage"
],
"title": "Model",
"description": "Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched."
},
"query": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Query"
}
},
"required": []
},
"model_authentik_policies_event_matcher.eventmatcherpolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_eventmatcherpolicy",
"change_eventmatcherpolicy",
"delete_eventmatcherpolicy",
"view_eventmatcherpolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_expiry.passwordexpirypolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"days": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Days"
},
"deny_only": {
"type": "boolean",
"title": "Deny only"
}
},
"required": []
},
"model_authentik_policies_expiry.passwordexpirypolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_passwordexpirypolicy",
"change_passwordexpirypolicy",
"delete_passwordexpirypolicy",
"view_passwordexpirypolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_expression.expressionpolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_policies_expression.expressionpolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_expressionpolicy",
"change_expressionpolicy",
"delete_expressionpolicy",
"view_expressionpolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_geoip.geoippolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"asns": {
"type": "array",
"items": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Asns"
},
"title": "Asns"
},
"countries": {
"type": "array",
"items": {
"type": "string",
"enum": [
"",
"AF",
"AX",
"AL",
"DZ",
"AS",
"AD",
"AO",
"AI",
"AQ",
"AG",
"AR",
"AM",
"AW",
"AU",
"AT",
"AZ",
"BS",
"BH",
"BD",
"BB",
"BY",
"BE",
"BZ",
"BJ",
"BM",
"BT",
"BO",
"BQ",
"BA",
"BW",
"BV",
"BR",
"IO",
"BN",
"BG",
"BF",
"BI",
"CV",
"KH",
"CM",
"CA",
"KY",
"CF",
"TD",
"CL",
"CN",
"CX",
"CC",
"CO",
"KM",
"CG",
"CK",
"CR",
"CI",
"HR",
"CU",
"CW",
"CY",
"CZ",
"CD",
"DK",
"DJ",
"DM",
"DO",
"EC",
"EG",
"SV",
"GQ",
"ER",
"EE",
"SZ",
"ET",
"FK",
"FO",
"FJ",
"FI",
"FR",
"GF",
"PF",
"TF",
"GA",
"GM",
"GE",
"DE",
"GH",
"GI",
"GR",
"GL",
"GD",
"GP",
"GU",
"GT",
"GG",
"GN",
"GW",
"GY",
"HT",
"HM",
"HN",
"HK",
"HU",
"IS",
"IN",
"ID",
"IR",
"IQ",
"IE",
"IM",
"IL",
"IT",
"JM",
"JP",
"JE",
"JO",
"KZ",
"KE",
"KI",
"KW",
"KG",
"LA",
"LV",
"LB",
"LS",
"LR",
"LY",
"LI",
"LT",
"LU",
"MO",
"MG",
"MW",
"MY",
"MV",
"ML",
"MT",
"MH",
"MQ",
"MR",
"MU",
"YT",
"MX",
"FM",
"MD",
"MC",
"MN",
"ME",
"MS",
"MA",
"MZ",
"MM",
"NA",
"NR",
"NP",
"NL",
"NC",
"NZ",
"NI",
"NE",
"NG",
"NU",
"NF",
"KP",
"MK",
"MP",
"NO",
"OM",
"PK",
"PW",
"PS",
"PA",
"PG",
"PY",
"PE",
"PH",
"PN",
"PL",
"PT",
"PR",
"QA",
"RE",
"RO",
"RU",
"RW",
"BL",
"SH",
"KN",
"LC",
"MF",
"PM",
"VC",
"WS",
"SM",
"ST",
"SA",
"SN",
"RS",
"SC",
"SL",
"SG",
"SX",
"SK",
"SI",
"SB",
"SO",
"ZA",
"GS",
"KR",
"SS",
"ES",
"LK",
"SD",
"SR",
"SJ",
"SE",
"CH",
"SY",
"TW",
"TJ",
"TZ",
"TH",
"TL",
"TG",
"TK",
"TO",
"TT",
"TN",
"TR",
"TM",
"TC",
"TV",
"UG",
"UA",
"AE",
"GB",
"UM",
"US",
"UY",
"UZ",
"VU",
"VA",
"VE",
"VN",
"VG",
"VI",
"WF",
"EH",
"YE",
"ZM",
"ZW"
]
},
"maxItems": 249,
"title": "Countries"
},
"check_history_distance": {
"type": "boolean",
"title": "Check history distance"
},
"history_max_distance_km": {
"type": "integer",
"minimum": 0,
"maximum": 9223372036854775807,
"title": "History max distance km"
},
"distance_tolerance_km": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Distance tolerance km"
},
"history_login_count": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "History login count"
},
"check_impossible_travel": {
"type": "boolean",
"title": "Check impossible travel"
},
"impossible_tolerance_km": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Impossible tolerance km"
}
},
"required": []
},
"model_authentik_policies_geoip.geoippolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_geoippolicy",
"change_geoippolicy",
"delete_geoippolicy",
"view_geoippolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies.policybinding": {
"type": "object",
"properties": {
"policy": {
"type": "string",
"format": "uuid",
"title": "Policy"
},
"group": {
"type": "string",
"format": "uuid",
"title": "Group"
},
"user": {
"type": "integer",
"title": "User"
},
"target": {
"type": "string",
"format": "uuid",
"title": "Target"
},
"negate": {
"type": "boolean",
"title": "Negate",
"description": "Negates the outcome of the policy. Messages are unaffected."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"order": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Order"
},
"timeout": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Timeout",
"description": "Timeout after which Policy execution is terminated."
},
"failure_result": {
"type": "boolean",
"title": "Failure result",
"description": "Result if the Policy execution fails."
}
},
"required": []
},
"model_authentik_policies.policybinding_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_policybinding",
"change_policybinding",
"delete_policybinding",
"view_policybinding"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_password.passwordpolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"password_field": {
"type": "string",
"minLength": 1,
"title": "Password field",
"description": "Field key to check, field keys defined in Prompt stages are available."
},
"amount_digits": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Amount digits"
},
"amount_uppercase": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Amount uppercase"
},
"amount_lowercase": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Amount lowercase"
},
"amount_symbols": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Amount symbols"
},
"length_min": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Length min"
},
"symbol_charset": {
"type": "string",
"minLength": 1,
"title": "Symbol charset"
},
"error_message": {
"type": "string",
"title": "Error message"
},
"check_static_rules": {
"type": "boolean",
"title": "Check static rules"
},
"check_have_i_been_pwned": {
"type": "boolean",
"title": "Check have i been pwned"
},
"check_zxcvbn": {
"type": "boolean",
"title": "Check zxcvbn"
},
"hibp_allowed_count": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Hibp allowed count",
"description": "How many times the password hash is allowed to be on haveibeenpwned"
},
"zxcvbn_score_threshold": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Zxcvbn score threshold",
"description": "If the zxcvbn score is equal or less than this value, the policy will fail."
}
},
"required": []
},
"model_authentik_policies_password.passwordpolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_passwordpolicy",
"change_passwordpolicy",
"delete_passwordpolicy",
"view_passwordpolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_policies_reputation.reputationpolicy": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"execution_logging": {
"type": "boolean",
"title": "Execution logging",
"description": "When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged."
},
"check_ip": {
"type": "boolean",
"title": "Check ip"
},
"check_username": {
"type": "boolean",
"title": "Check username"
},
"threshold": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Threshold"
}
},
"required": []
},
"model_authentik_policies_reputation.reputationpolicy_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_reputationpolicy",
"change_reputationpolicy",
"delete_reputationpolicy",
"view_reputationpolicy"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_ldap.ldapprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Invalidation flow",
"description": "Flow used ending the session from a provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"base_dn": {
"type": "string",
"minLength": 1,
"title": "Base dn",
"description": "DN under which objects are accessible."
},
"certificate": {
"type": "string",
"format": "uuid",
"title": "Certificate"
},
"tls_server_name": {
"type": "string",
"title": "Tls server name"
},
"uid_start_number": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Uid start number",
"description": "The start for uidNumbers, this number is added to the user.pk to make sure that the numbers aren't too low for POSIX users. Default is 2000 to ensure that we don't collide with local users uidNumber"
},
"gid_start_number": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Gid start number",
"description": "The start for gidNumbers, this number is added to a number generated from the group.pk to make sure that the numbers aren't too low for POSIX groups. Default is 4000 to ensure that we don't collide with local groups or users primary groups gidNumber"
},
"search_mode": {
"type": "string",
"enum": [
"direct",
"cached"
],
"title": "Search mode"
},
"bind_mode": {
"type": "string",
"enum": [
"direct",
"cached"
],
"title": "Bind mode"
},
"mfa_support": {
"type": "boolean",
"title": "MFA Support",
"description": "When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon."
}
},
"required": []
},
"model_authentik_providers_ldap.ldapprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_ldapprovider",
"change_ldapprovider",
"delete_ldapprovider",
"search_full_directory",
"view_ldapprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_oauth2.oauth2dynamicclientregistration": {
"type": "object",
"properties": {
"provider": {
"type": "integer",
"title": "Provider"
},
"default_application_group": {
"type": "string",
"title": "Default application group",
"description": "Group to assign to automatically created applications."
},
"override_authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Override authorization flow",
"description": "Authorization flow applied to dynamically registered clients."
},
"override_invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Override invalidation flow"
},
"override_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Scope mappings applied to dynamically registered clients."
},
"title": "Override property mappings",
"description": "Scope mappings applied to dynamically registered clients."
},
"access_token_validity": {
"type": "string",
"minLength": 1,
"title": "Access token validity",
"description": "Maximum access token validity for registered clients (Format: hours=1;minutes=2;seconds=3)."
},
"refresh_token_validity": {
"type": "string",
"minLength": 1,
"title": "Refresh token validity",
"description": "Maximum refresh token validity for registered clients (Format: hours=1;minutes=2;seconds=3)."
},
"allowed_grant_types": {
"type": "array",
"items": {
"type": "string",
"enum": [
"authorization_code",
"implicit",
"hybrid",
"refresh_token",
"client_credentials",
"password",
"urn:ietf:params:oauth:grant-type:device_code",
"urn:ietf:params:oauth:grant-type:token-exchange"
],
"title": "Allowed grant types"
},
"title": "Allowed grant types",
"description": "If empty, all grant types are allowed."
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
}
},
"required": []
},
"model_authentik_providers_oauth2.oauth2dynamicclientregistration_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_oauth2dynamicclientregistration",
"change_oauth2dynamicclientregistration",
"delete_oauth2dynamicclientregistration",
"view_oauth2dynamicclientregistration"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_oauth2.oauth2provider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Invalidation flow",
"description": "Flow used ending the session from a provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"client_type": {
"type": "string",
"enum": [
"confidential",
"public"
],
"title": "Client Type",
"description": "Confidential clients are capable of maintaining the confidentiality of their credentials. Public clients are incapable"
},
"grant_types": {
"type": "array",
"items": {
"type": "string",
"enum": [
"authorization_code",
"implicit",
"hybrid",
"refresh_token",
"client_credentials",
"password",
"urn:ietf:params:oauth:grant-type:device_code",
"urn:ietf:params:oauth:grant-type:token-exchange"
],
"title": "Grant types"
},
"title": "Grant types"
},
"client_id": {
"type": "string",
"maxLength": 255,
"minLength": 1,
"title": "Client ID"
},
"client_secret": {
"type": "string",
"maxLength": 255,
"title": "Client Secret"
},
"access_code_validity": {
"type": "string",
"minLength": 1,
"title": "Access code validity",
"description": "Access codes not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"access_token_validity": {
"type": "string",
"minLength": 1,
"title": "Access token validity",
"description": "Tokens not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"refresh_token_validity": {
"type": "string",
"minLength": 1,
"title": "Refresh token validity",
"description": "Tokens not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"refresh_token_threshold": {
"type": "string",
"minLength": 1,
"title": "Refresh token threshold",
"description": "When refreshing a token, if the refresh token is valid for less than this duration, it will be renewed. When set to seconds=0, token will always be renewed. (Format: hours=1;minutes=2;seconds=3)."
},
"include_claims_in_id_token": {
"type": "boolean",
"title": "Include claims in id_token",
"description": "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint."
},
"signing_key": {
"type": "string",
"format": "uuid",
"title": "Signing Key",
"description": "Key used to sign the tokens."
},
"encryption_key": {
"type": "string",
"format": "uuid",
"title": "Encryption Key",
"description": "Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs."
},
"redirect_uris": {
"type": "array",
"items": {
"type": "object",
"properties": {
"matching_mode": {
"type": "string",
"enum": [
"strict",
"regex"
],
"title": "Matching mode"
},
"url": {
"type": "string",
"minLength": 1,
"title": "Url"
},
"redirect_uri_type": {
"type": "string",
"enum": [
"authorization",
"logout"
],
"title": "Redirect uri type"
}
},
"required": [
"matching_mode",
"url"
]
},
"title": "Redirect uris"
},
"logout_uri": {
"type": "string",
"title": "Logout URI"
},
"logout_method": {
"type": "string",
"enum": [
"backchannel",
"frontchannel"
],
"title": "Logout Method",
"description": "Backchannel logs out with server to server calls. Frontchannel uses iframes in your browser"
},
"sub_mode": {
"type": "string",
"enum": [
"hashed_user_id",
"user_id",
"user_uuid",
"user_username",
"user_email",
"user_upn"
],
"title": "Sub mode",
"description": "Configure what data should be used as unique User Identifier. For most cases, the default should be fine."
},
"issuer_mode": {
"type": "string",
"enum": [
"global",
"per_provider"
],
"title": "Issuer mode",
"description": "Configure how the issuer field of the ID Token should be filled."
},
"jwt_federation_sources": {
"type": "array",
"items": {
"type": "integer",
"title": "Any JWT signed by the JWK of the selected source can be used to authenticate."
},
"title": "Any JWT signed by the JWK of the selected source can be used to authenticate."
},
"jwt_federation_providers": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Jwt federation providers"
}
},
"required": []
},
"model_authentik_providers_oauth2.oauth2provider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_oauth2provider",
"change_oauth2provider",
"delete_oauth2provider",
"view_oauth2provider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_oauth2.scopemapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
},
"scope_name": {
"type": "string",
"minLength": 1,
"title": "Scope name",
"description": "Scope name requested by the client"
},
"description": {
"type": "string",
"title": "Description",
"description": "Description shown to the user when consenting. If left empty, the user won't be informed."
}
},
"required": []
},
"model_authentik_providers_oauth2.scopemapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_scopemapping",
"change_scopemapping",
"delete_scopemapping",
"view_scopemapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_proxy.proxyprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Invalidation flow",
"description": "Flow used ending the session from a provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"internal_host": {
"type": "string",
"title": "Internal host"
},
"external_host": {
"type": "string",
"minLength": 1,
"title": "External host"
},
"internal_host_ssl_validation": {
"type": "boolean",
"title": "Internal host SSL Validation",
"description": "Validate SSL Certificates of upstream servers"
},
"certificate": {
"type": "string",
"format": "uuid",
"title": "Certificate"
},
"skip_path_regex": {
"type": "string",
"title": "Skip path regex",
"description": "Regular expressions for which authentication is not required. Each new line is interpreted as a new Regular Expression."
},
"basic_auth_enabled": {
"type": "boolean",
"title": "Set HTTP-Basic Authentication",
"description": "Set a custom HTTP-Basic Authentication header based on values from authentik."
},
"basic_auth_password_attribute": {
"type": "string",
"title": "HTTP-Basic Password Key",
"description": "User/Group Attribute used for the password part of the HTTP-Basic Header."
},
"basic_auth_user_attribute": {
"type": "string",
"title": "HTTP-Basic Username Key",
"description": "User/Group Attribute used for the user part of the HTTP-Basic Header. If not set, the user's Email address is used."
},
"mode": {
"type": "string",
"enum": [
"proxy",
"forward_single",
"forward_domain"
],
"title": "Mode",
"description": "Enable support for forwardAuth in traefik and nginx auth_request. Exclusive with internal_host."
},
"intercept_header_auth": {
"type": "boolean",
"title": "Intercept header auth",
"description": "When enabled, this provider will intercept the authorization header and authenticate requests based on its value."
},
"cookie_domain": {
"type": "string",
"title": "Cookie domain"
},
"jwt_federation_sources": {
"type": "array",
"items": {
"type": "integer",
"title": "Any JWT signed by the JWK of the selected source can be used to authenticate."
},
"title": "Any JWT signed by the JWK of the selected source can be used to authenticate."
},
"jwt_federation_providers": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Jwt federation providers"
},
"access_token_validity": {
"type": "string",
"minLength": 1,
"title": "Access token validity",
"description": "Tokens not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"refresh_token_validity": {
"type": "string",
"minLength": 1,
"title": "Refresh token validity",
"description": "Tokens not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
}
},
"required": []
},
"model_authentik_providers_proxy.proxyprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_proxyprovider",
"change_proxyprovider",
"delete_proxyprovider",
"view_proxyprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_rac.endpoint": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"provider": {
"type": "integer",
"title": "Provider"
},
"protocol": {
"type": "string",
"enum": [
"rdp",
"vnc",
"ssh"
],
"title": "Protocol"
},
"host": {
"type": "string",
"minLength": 1,
"title": "Host"
},
"settings": {
"type": "object",
"additionalProperties": true,
"title": "Settings"
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"auth_mode": {
"type": "string",
"enum": [
"static",
"prompt"
],
"title": "Auth mode"
},
"maximum_connections": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Maximum connections"
}
},
"required": []
},
"model_authentik_providers_rac.endpoint_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_endpoint",
"change_endpoint",
"delete_endpoint",
"view_endpoint"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_rac.racpropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"title": "Expression"
},
"static_settings": {
"type": "object",
"additionalProperties": true,
"title": "Static settings"
}
},
"required": []
},
"model_authentik_providers_rac.racpropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_racpropertymapping",
"change_racpropertymapping",
"delete_racpropertymapping",
"view_racpropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_rac.racprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"settings": {
"type": "object",
"additionalProperties": true,
"title": "Settings"
},
"connection_expiry": {
"type": "string",
"minLength": 1,
"title": "Connection expiry",
"description": "Determines how long a session lasts. Default of 0 means that the sessions lasts until the browser is closed. (Format: hours=-1;minutes=-2;seconds=-3)"
},
"delete_token_on_disconnect": {
"type": "boolean",
"title": "Delete token on disconnect",
"description": "When set to true, connection tokens will be deleted upon disconnect."
}
},
"required": []
},
"model_authentik_providers_rac.racprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_racprovider",
"change_racprovider",
"delete_racprovider",
"view_racprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_radius.radiusprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Invalidation flow",
"description": "Flow used ending the session from a provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"client_networks": {
"type": "string",
"minLength": 1,
"title": "Client networks",
"description": "List of CIDRs (comma-separated) that clients can connect from. A more specific CIDR will match before a looser one. Clients connecting from a non-specified CIDR will be dropped."
},
"shared_secret": {
"type": "string",
"minLength": 1,
"title": "Shared secret",
"description": "Shared secret between clients and server to hash packets."
},
"mfa_support": {
"type": "boolean",
"title": "MFA Support",
"description": "When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon."
},
"certificate": {
"type": "string",
"format": "uuid",
"title": "Certificate"
}
},
"required": []
},
"model_authentik_providers_radius.radiusprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_radiusprovider",
"change_radiusprovider",
"delete_radiusprovider",
"view_radiusprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_radius.radiusproviderpropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_providers_radius.radiusproviderpropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_radiusproviderpropertymapping",
"change_radiusproviderpropertymapping",
"delete_radiusproviderpropertymapping",
"view_radiusproviderpropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_saml.samlpropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
},
"saml_name": {
"type": "string",
"minLength": 1,
"title": "SAML Name"
},
"friendly_name": {
"type": [
"string",
"null"
],
"title": "Friendly name"
}
},
"required": []
},
"model_authentik_providers_saml.samlpropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_samlpropertymapping",
"change_samlpropertymapping",
"delete_samlpropertymapping",
"view_samlpropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_saml.samlprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow used for authentication when the associated application is accessed by an un-authenticated user."
},
"authorization_flow": {
"type": "string",
"format": "uuid",
"title": "Authorization flow",
"description": "Flow used when authorizing this provider."
},
"invalidation_flow": {
"type": "string",
"format": "uuid",
"title": "Invalidation flow",
"description": "Flow used ending the session from a provider."
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"acs_url": {
"type": "string",
"minLength": 1,
"title": "ACS URL"
},
"sls_url": {
"type": "string",
"title": "SLS URL",
"description": "Single Logout Service URL where the logout response should be sent."
},
"audience": {
"type": "string",
"title": "Audience",
"description": "Value of the audience restriction field of the assertion. When left empty, no audience restriction will be added."
},
"issuer_override": {
"type": "string",
"title": "Issuer override",
"description": "Also known as EntityID. Providing a value overrides the default issuer generated by authentik."
},
"assertion_valid_not_before": {
"type": "string",
"minLength": 1,
"title": "Assertion valid not before",
"description": "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)."
},
"assertion_valid_not_on_or_after": {
"type": "string",
"minLength": 1,
"title": "Assertion valid not on or after",
"description": "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"session_valid_not_on_or_after": {
"type": "string",
"minLength": 1,
"title": "Session valid not on or after",
"description": "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
},
"name_id_mapping": {
"type": "string",
"format": "uuid",
"title": "NameID Property Mapping",
"description": "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be considered"
},
"authn_context_class_ref_mapping": {
"type": "string",
"format": "uuid",
"title": "AuthnContextClassRef Property Mapping",
"description": "Configure how the AuthnContextClassRef value will be created. When left empty, the AuthnContextClassRef will be set based on which authentication methods the user used to authenticate."
},
"digest_algorithm": {
"type": "string",
"enum": [
"http://www.w3.org/2000/09/xmldsig#sha1",
"http://www.w3.org/2001/04/xmlenc#sha256",
"http://www.w3.org/2001/04/xmldsig-more#sha384",
"http://www.w3.org/2001/04/xmlenc#sha512"
],
"title": "Digest algorithm"
},
"signature_algorithm": {
"type": "string",
"enum": [
"http://www.w3.org/2000/09/xmldsig#rsa-sha1",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha384",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha512",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512",
"http://www.w3.org/2000/09/xmldsig#dsa-sha1"
],
"title": "Signature algorithm"
},
"signing_kp": {
"type": "string",
"format": "uuid",
"title": "Signing Keypair",
"description": "Keypair used to sign outgoing Responses going to the Service Provider."
},
"verification_kp": {
"type": "string",
"format": "uuid",
"title": "Verification Certificate",
"description": "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
},
"encryption_kp": {
"type": "string",
"format": "uuid",
"title": "Encryption Keypair",
"description": "When selected, incoming assertions are encrypted by the IdP using the public key of the encryption keypair. The assertion is decrypted by the SP using the the private key."
},
"sign_assertion": {
"type": "boolean",
"title": "Sign assertion"
},
"sign_response": {
"type": "boolean",
"title": "Sign response"
},
"sign_logout_request": {
"type": "boolean",
"title": "Sign logout request"
},
"sign_logout_response": {
"type": "boolean",
"title": "Sign logout response"
},
"sp_binding": {
"type": "string",
"enum": [
"redirect",
"post"
],
"title": "Service Provider Binding",
"description": "This determines how authentik sends the response back to the Service Provider."
},
"sls_binding": {
"type": "string",
"enum": [
"redirect",
"post"
],
"title": "SLS Binding",
"description": "This determines how authentik sends the logout response back to the Service Provider."
},
"logout_method": {
"type": "string",
"enum": [
"frontchannel_iframe",
"frontchannel_native",
"backchannel"
],
"title": "Logout method",
"description": "Method to use for logout. Front-channel iframe loads all logout URLs simultaneously in hidden iframes. Front-channel native uses your active browser tab to send post requests and redirect to providers. Back-channel sends logout requests directly from the server without user interaction (requires POST SLS binding)."
},
"default_relay_state": {
"type": "string",
"title": "Default relay state",
"description": "Default relay_state value for IDP-initiated logins"
},
"default_name_id_policy": {
"type": "string",
"enum": [
"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
"urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName",
"urn:oasis:names:tc:SAML:2.0:nameid-format:WindowsDomainQualifiedName",
"urn:oasis:names:tc:SAML:2.0:nameid-format:transient",
"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
],
"title": "Default name id policy"
}
},
"required": []
},
"model_authentik_providers_saml.samlprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_samlprovider",
"change_samlprovider",
"delete_samlprovider",
"view_samlprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_scim.scimmapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_providers_scim.scimmapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_scimmapping",
"change_scimmapping",
"delete_scimmapping",
"view_scimmapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_providers_scim.scimprovider": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Property mappings"
},
"property_mappings_group": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Property mappings used for group creation/updating."
},
"title": "Property mappings group",
"description": "Property mappings used for group creation/updating."
},
"url": {
"type": "string",
"minLength": 1,
"title": "Url",
"description": "Base URL to SCIM requests, usually ends in /v2"
},
"verify_certificates": {
"type": "boolean",
"title": "Verify certificates"
},
"token": {
"type": "string",
"title": "Token",
"description": "Authentication token"
},
"auth_mode": {
"type": "string",
"enum": [
"token",
"oauth",
"oauth_interactive"
],
"title": "Auth mode"
},
"auth_oauth": {
"type": "integer",
"title": "Auth oauth",
"description": "OAuth Source used for authentication"
},
"auth_oauth_params": {
"type": "object",
"additionalProperties": true,
"title": "Auth oauth params",
"description": "Additional OAuth parameters, such as grant_type"
},
"compatibility_mode": {
"type": "string",
"enum": [
"default",
"aws",
"slack",
"sfdc",
"gitlab",
"webex",
"vcenter"
],
"title": "SCIM Compatibility Mode",
"description": "Alter authentik behavior for vendor-specific SCIM implementations."
},
"service_provider_config_cache_timeout": {
"type": "string",
"minLength": 1,
"title": "Service provider config cache timeout",
"description": "Cache duration for ServiceProviderConfig responses. Set minutes=0 to disable."
},
"exclude_users_service_account": {
"type": "boolean",
"title": "Exclude users service account"
},
"sync_page_size": {
"type": "integer",
"minimum": 1,
"maximum": 2147483647,
"title": "Sync page size",
"description": "Controls the number of objects synced in a single task"
},
"sync_page_timeout": {
"type": "string",
"minLength": 1,
"title": "Sync page timeout",
"description": "Timeout for synchronization of a single page"
},
"discovery_enabled": {
"type": "boolean",
"title": "Discovery enabled",
"description": "When enabled, authentik will attempt to discover existing resources in the remote system."
},
"group_filters": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Group filters used to define sync-scope for groups."
},
"title": "Group filters",
"description": "Group filters used to define sync-scope for groups."
},
"dry_run": {
"type": "boolean",
"title": "Dry run",
"description": "When enabled, provider will not modify or create objects in the remote system."
}
},
"required": []
},
"model_authentik_providers_scim.scimprovider_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_scimprovider",
"change_scimprovider",
"delete_scimprovider",
"view_scimprovider"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_rbac.initialpermissions": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 150,
"minLength": 1,
"title": "Name"
},
"role": {
"type": "string",
"format": "uuid",
"title": "Role"
},
"permissions": {
"type": "array",
"items": {
"type": "integer"
},
"title": "Permissions"
}
},
"required": []
},
"model_authentik_rbac.initialpermissions_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_initialpermissions",
"change_initialpermissions",
"delete_initialpermissions",
"view_initialpermissions"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_rbac.role": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"permissions": {
"type": "array",
"items": {
"type": "string",
"enum": [
"authentik_agents.add_agent",
"authentik_agents.add_agent_self_service",
"authentik_agents.change_agent",
"authentik_agents.delete_agent",
"authentik_agents.view_agent",
"authentik_blueprints.add_blueprintinstance",
"authentik_blueprints.change_blueprintinstance",
"authentik_blueprints.delete_blueprintinstance",
"authentik_blueprints.view_blueprintinstance",
"authentik_brands.add_brand",
"authentik_brands.add_brandclientcertificate",
"authentik_brands.change_brand",
"authentik_brands.change_brandclientcertificate",
"authentik_brands.delete_brand",
"authentik_brands.delete_brandclientcertificate",
"authentik_brands.view_brand",
"authentik_brands.view_brandclientcertificate",
"authentik_core.add_actor",
"authentik_core.add_application",
"authentik_core.add_applicationentitlement",
"authentik_core.add_authenticatedsession",
"authentik_core.add_group",
"authentik_core.add_groupancestrynode",
"authentik_core.add_groupparentagenode",
"authentik_core.add_grouprole",
"authentik_core.add_groupsourceconnection",
"authentik_core.add_objectattribute",
"authentik_core.add_propertymapping",
"authentik_core.add_provider",
"authentik_core.add_providerpropertymapping",
"authentik_core.add_source",
"authentik_core.add_sourcegrouppropertymapping",
"authentik_core.add_sourceuserpropertymapping",
"authentik_core.add_token",
"authentik_core.add_user",
"authentik_core.add_user_to_group",
"authentik_core.add_usergroup",
"authentik_core.add_userrole",
"authentik_core.add_usersourceconnection",
"authentik_core.change_actor",
"authentik_core.change_application",
"authentik_core.change_applicationentitlement",
"authentik_core.change_authenticatedsession",
"authentik_core.change_group",
"authentik_core.change_groupancestrynode",
"authentik_core.change_groupparentagenode",
"authentik_core.change_grouprole",
"authentik_core.change_groupsourceconnection",
"authentik_core.change_objectattribute",
"authentik_core.change_propertymapping",
"authentik_core.change_provider",
"authentik_core.change_providerpropertymapping",
"authentik_core.change_source",
"authentik_core.change_sourcegrouppropertymapping",
"authentik_core.change_sourceuserpropertymapping",
"authentik_core.change_token",
"authentik_core.change_user",
"authentik_core.change_usergroup",
"authentik_core.change_userrole",
"authentik_core.change_usersourceconnection",
"authentik_core.delete_actor",
"authentik_core.delete_application",
"authentik_core.delete_applicationentitlement",
"authentik_core.delete_authenticatedsession",
"authentik_core.delete_group",
"authentik_core.delete_groupancestrynode",
"authentik_core.delete_groupparentagenode",
"authentik_core.delete_grouprole",
"authentik_core.delete_groupsourceconnection",
"authentik_core.delete_objectattribute",
"authentik_core.delete_propertymapping",
"authentik_core.delete_provider",
"authentik_core.delete_providerpropertymapping",
"authentik_core.delete_source",
"authentik_core.delete_sourcegrouppropertymapping",
"authentik_core.delete_sourceuserpropertymapping",
"authentik_core.delete_token",
"authentik_core.delete_user",
"authentik_core.delete_usergroup",
"authentik_core.delete_userrole",
"authentik_core.delete_usersourceconnection",
"authentik_core.disable_group_superuser",
"authentik_core.enable_group_superuser",
"authentik_core.impersonate",
"authentik_core.preview_user",
"authentik_core.remove_user_from_group",
"authentik_core.reset_user_password",
"authentik_core.set_token_key",
"authentik_core.view_actor",
"authentik_core.view_application",
"authentik_core.view_applicationentitlement",
"authentik_core.view_authenticatedsession",
"authentik_core.view_group",
"authentik_core.view_groupancestrynode",
"authentik_core.view_groupparentagenode",
"authentik_core.view_grouprole",
"authentik_core.view_groupsourceconnection",
"authentik_core.view_objectattribute",
"authentik_core.view_propertymapping",
"authentik_core.view_provider",
"authentik_core.view_providerpropertymapping",
"authentik_core.view_source",
"authentik_core.view_sourcegrouppropertymapping",
"authentik_core.view_sourceuserpropertymapping",
"authentik_core.view_token",
"authentik_core.view_token_key",
"authentik_core.view_user",
"authentik_core.view_user_applications",
"authentik_core.view_usergroup",
"authentik_core.view_userrole",
"authentik_core.view_usersourceconnection",
"authentik_crypto.add_certificatekeypair",
"authentik_crypto.change_certificatekeypair",
"authentik_crypto.delete_certificatekeypair",
"authentik_crypto.view_certificatekeypair",
"authentik_crypto.view_certificatekeypair_certificate",
"authentik_crypto.view_certificatekeypair_key",
"authentik_endpoints.add_connector",
"authentik_endpoints.add_device",
"authentik_endpoints.add_deviceaccessgroup",
"authentik_endpoints.add_deviceconnection",
"authentik_endpoints.add_devicefactsnapshot",
"authentik_endpoints.add_deviceuserbinding",
"authentik_endpoints.add_endpointstage",
"authentik_endpoints.change_connector",
"authentik_endpoints.change_device",
"authentik_endpoints.change_deviceaccessgroup",
"authentik_endpoints.change_deviceconnection",
"authentik_endpoints.change_devicefactsnapshot",
"authentik_endpoints.change_deviceuserbinding",
"authentik_endpoints.change_endpointstage",
"authentik_endpoints.delete_connector",
"authentik_endpoints.delete_device",
"authentik_endpoints.delete_deviceaccessgroup",
"authentik_endpoints.delete_deviceconnection",
"authentik_endpoints.delete_devicefactsnapshot",
"authentik_endpoints.delete_deviceuserbinding",
"authentik_endpoints.delete_endpointstage",
"authentik_endpoints.view_connector",
"authentik_endpoints.view_device",
"authentik_endpoints.view_deviceaccessgroup",
"authentik_endpoints.view_deviceconnection",
"authentik_endpoints.view_devicefactsnapshot",
"authentik_endpoints.view_deviceuserbinding",
"authentik_endpoints.view_endpointstage",
"authentik_endpoints_connectors_agent.add_agentconnector",
"authentik_endpoints_connectors_agent.add_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.add_agentdeviceconnection",
"authentik_endpoints_connectors_agent.add_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.add_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.add_applenonce",
"authentik_endpoints_connectors_agent.add_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.add_devicetoken",
"authentik_endpoints_connectors_agent.add_enrollmenttoken",
"authentik_endpoints_connectors_agent.change_agentconnector",
"authentik_endpoints_connectors_agent.change_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.change_agentdeviceconnection",
"authentik_endpoints_connectors_agent.change_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.change_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.change_applenonce",
"authentik_endpoints_connectors_agent.change_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.change_devicetoken",
"authentik_endpoints_connectors_agent.change_enrollmenttoken",
"authentik_endpoints_connectors_agent.delete_agentconnector",
"authentik_endpoints_connectors_agent.delete_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.delete_agentdeviceconnection",
"authentik_endpoints_connectors_agent.delete_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.delete_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.delete_applenonce",
"authentik_endpoints_connectors_agent.delete_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.delete_devicetoken",
"authentik_endpoints_connectors_agent.delete_enrollmenttoken",
"authentik_endpoints_connectors_agent.view_agentconnector",
"authentik_endpoints_connectors_agent.view_agentconnectorjwtfederationprovider",
"authentik_endpoints_connectors_agent.view_agentdeviceconnection",
"authentik_endpoints_connectors_agent.view_agentdeviceuserbinding",
"authentik_endpoints_connectors_agent.view_appleindependentsecureenclave",
"authentik_endpoints_connectors_agent.view_applenonce",
"authentik_endpoints_connectors_agent.view_deviceauthenticationtoken",
"authentik_endpoints_connectors_agent.view_devicetoken",
"authentik_endpoints_connectors_agent.view_enrollment_token_key",
"authentik_endpoints_connectors_agent.view_enrollmenttoken",
"authentik_endpoints_connectors_fleet.add_fleetconnector",
"authentik_endpoints_connectors_fleet.change_fleetconnector",
"authentik_endpoints_connectors_fleet.delete_fleetconnector",
"authentik_endpoints_connectors_fleet.view_fleetconnector",
"authentik_endpoints_connectors_google_chrome.add_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.change_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.delete_googlechromeconnector",
"authentik_endpoints_connectors_google_chrome.view_googlechromeconnector",
"authentik_enterprise.add_license",
"authentik_enterprise.add_licenseusage",
"authentik_enterprise.change_license",
"authentik_enterprise.change_licenseusage",
"authentik_enterprise.delete_license",
"authentik_enterprise.delete_licenseusage",
"authentik_enterprise.view_license",
"authentik_enterprise.view_licenseusage",
"authentik_events.add_event",
"authentik_events.add_notification",
"authentik_events.add_notificationrule",
"authentik_events.add_notificationrulenotificationtransport",
"authentik_events.add_notificationtransport",
"authentik_events.add_notificationwebhookmapping",
"authentik_events.change_event",
"authentik_events.change_notification",
"authentik_events.change_notificationrule",
"authentik_events.change_notificationrulenotificationtransport",
"authentik_events.change_notificationtransport",
"authentik_events.change_notificationwebhookmapping",
"authentik_events.delete_event",
"authentik_events.delete_notification",
"authentik_events.delete_notificationrule",
"authentik_events.delete_notificationrulenotificationtransport",
"authentik_events.delete_notificationtransport",
"authentik_events.delete_notificationwebhookmapping",
"authentik_events.view_event",
"authentik_events.view_notification",
"authentik_events.view_notificationrule",
"authentik_events.view_notificationrulenotificationtransport",
"authentik_events.view_notificationtransport",
"authentik_events.view_notificationwebhookmapping",
"authentik_flows.add_flow",
"authentik_flows.add_flowstagebinding",
"authentik_flows.add_flowtoken",
"authentik_flows.add_stage",
"authentik_flows.change_flow",
"authentik_flows.change_flowstagebinding",
"authentik_flows.change_flowtoken",
"authentik_flows.change_stage",
"authentik_flows.clear_flow_cache",
"authentik_flows.delete_flow",
"authentik_flows.delete_flowstagebinding",
"authentik_flows.delete_flowtoken",
"authentik_flows.delete_stage",
"authentik_flows.export_flow",
"authentik_flows.inspect_flow",
"authentik_flows.view_flow",
"authentik_flows.view_flow_cache",
"authentik_flows.view_flowstagebinding",
"authentik_flows.view_flowtoken",
"authentik_flows.view_stage",
"authentik_lifecycle.add_lifecycleiteration",
"authentik_lifecycle.add_lifecyclerule",
"authentik_lifecycle.add_lifecyclerulenotificationtransport",
"authentik_lifecycle.add_lifecyclerulereviewer",
"authentik_lifecycle.add_lifecyclerulereviewergroup",
"authentik_lifecycle.add_review",
"authentik_lifecycle.add_useroffboarding",
"authentik_lifecycle.change_lifecycleiteration",
"authentik_lifecycle.change_lifecyclerule",
"authentik_lifecycle.change_lifecyclerulenotificationtransport",
"authentik_lifecycle.change_lifecyclerulereviewer",
"authentik_lifecycle.change_lifecyclerulereviewergroup",
"authentik_lifecycle.change_review",
"authentik_lifecycle.change_useroffboarding",
"authentik_lifecycle.delete_lifecycleiteration",
"authentik_lifecycle.delete_lifecyclerule",
"authentik_lifecycle.delete_lifecyclerulenotificationtransport",
"authentik_lifecycle.delete_lifecyclerulereviewer",
"authentik_lifecycle.delete_lifecyclerulereviewergroup",
"authentik_lifecycle.delete_review",
"authentik_lifecycle.delete_useroffboarding",
"authentik_lifecycle.view_lifecycleiteration",
"authentik_lifecycle.view_lifecyclerule",
"authentik_lifecycle.view_lifecyclerulenotificationtransport",
"authentik_lifecycle.view_lifecyclerulereviewer",
"authentik_lifecycle.view_lifecyclerulereviewergroup",
"authentik_lifecycle.view_review",
"authentik_lifecycle.view_useroffboarding",
"authentik_outposts.add_dockerserviceconnection",
"authentik_outposts.add_kubernetesserviceconnection",
"authentik_outposts.add_outpost",
"authentik_outposts.add_outpostprovider",
"authentik_outposts.add_outpostserviceconnection",
"authentik_outposts.change_dockerserviceconnection",
"authentik_outposts.change_kubernetesserviceconnection",
"authentik_outposts.change_outpost",
"authentik_outposts.change_outpostprovider",
"authentik_outposts.change_outpostserviceconnection",
"authentik_outposts.delete_dockerserviceconnection",
"authentik_outposts.delete_kubernetesserviceconnection",
"authentik_outposts.delete_outpost",
"authentik_outposts.delete_outpostprovider",
"authentik_outposts.delete_outpostserviceconnection",
"authentik_outposts.view_dockerserviceconnection",
"authentik_outposts.view_kubernetesserviceconnection",
"authentik_outposts.view_outpost",
"authentik_outposts.view_outpostprovider",
"authentik_outposts.view_outpostserviceconnection",
"authentik_policies.add_policy",
"authentik_policies.add_policybinding",
"authentik_policies.add_policybindingmodel",
"authentik_policies.change_policy",
"authentik_policies.change_policybinding",
"authentik_policies.change_policybindingmodel",
"authentik_policies.clear_policy_cache",
"authentik_policies.delete_policy",
"authentik_policies.delete_policybinding",
"authentik_policies.delete_policybindingmodel",
"authentik_policies.view_policy",
"authentik_policies.view_policy_cache",
"authentik_policies.view_policybinding",
"authentik_policies.view_policybindingmodel",
"authentik_policies_dummy.add_dummypolicy",
"authentik_policies_dummy.change_dummypolicy",
"authentik_policies_dummy.delete_dummypolicy",
"authentik_policies_dummy.view_dummypolicy",
"authentik_policies_event_matcher.add_eventmatcherpolicy",
"authentik_policies_event_matcher.change_eventmatcherpolicy",
"authentik_policies_event_matcher.delete_eventmatcherpolicy",
"authentik_policies_event_matcher.view_eventmatcherpolicy",
"authentik_policies_expiry.add_passwordexpirypolicy",
"authentik_policies_expiry.change_passwordexpirypolicy",
"authentik_policies_expiry.delete_passwordexpirypolicy",
"authentik_policies_expiry.view_passwordexpirypolicy",
"authentik_policies_expression.add_expressionpolicy",
"authentik_policies_expression.change_expressionpolicy",
"authentik_policies_expression.delete_expressionpolicy",
"authentik_policies_expression.view_expressionpolicy",
"authentik_policies_geoip.add_geoippolicy",
"authentik_policies_geoip.change_geoippolicy",
"authentik_policies_geoip.delete_geoippolicy",
"authentik_policies_geoip.view_geoippolicy",
"authentik_policies_password.add_passwordpolicy",
"authentik_policies_password.change_passwordpolicy",
"authentik_policies_password.delete_passwordpolicy",
"authentik_policies_password.view_passwordpolicy",
"authentik_policies_reputation.add_reputation",
"authentik_policies_reputation.add_reputationpolicy",
"authentik_policies_reputation.change_reputation",
"authentik_policies_reputation.change_reputationpolicy",
"authentik_policies_reputation.delete_reputation",
"authentik_policies_reputation.delete_reputationpolicy",
"authentik_policies_reputation.view_reputation",
"authentik_policies_reputation.view_reputationpolicy",
"authentik_policies_unique_password.add_uniquepasswordpolicy",
"authentik_policies_unique_password.add_userpasswordhistory",
"authentik_policies_unique_password.change_uniquepasswordpolicy",
"authentik_policies_unique_password.change_userpasswordhistory",
"authentik_policies_unique_password.delete_uniquepasswordpolicy",
"authentik_policies_unique_password.delete_userpasswordhistory",
"authentik_policies_unique_password.view_uniquepasswordpolicy",
"authentik_policies_unique_password.view_userpasswordhistory",
"authentik_providers_google_workspace.add_googleworkspaceprovider",
"authentik_providers_google_workspace.add_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.add_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.add_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.add_googleworkspaceprovideruser",
"authentik_providers_google_workspace.change_googleworkspaceprovider",
"authentik_providers_google_workspace.change_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.change_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.change_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.change_googleworkspaceprovideruser",
"authentik_providers_google_workspace.delete_googleworkspaceprovider",
"authentik_providers_google_workspace.delete_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.delete_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.delete_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.delete_googleworkspaceprovideruser",
"authentik_providers_google_workspace.view_googleworkspaceprovider",
"authentik_providers_google_workspace.view_googleworkspaceprovidergroup",
"authentik_providers_google_workspace.view_googleworkspaceprovidermapping",
"authentik_providers_google_workspace.view_googleworkspaceproviderpropertymappingsgroup",
"authentik_providers_google_workspace.view_googleworkspaceprovideruser",
"authentik_providers_ldap.add_ldapprovider",
"authentik_providers_ldap.change_ldapprovider",
"authentik_providers_ldap.delete_ldapprovider",
"authentik_providers_ldap.search_full_directory",
"authentik_providers_ldap.view_ldapprovider",
"authentik_providers_microsoft_entra.add_microsoftentraprovider",
"authentik_providers_microsoft_entra.add_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.add_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.add_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.add_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.change_microsoftentraprovider",
"authentik_providers_microsoft_entra.change_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.change_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.change_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.change_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.delete_microsoftentraprovider",
"authentik_providers_microsoft_entra.delete_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.delete_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.delete_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.delete_microsoftentraprovideruser",
"authentik_providers_microsoft_entra.view_microsoftentraprovider",
"authentik_providers_microsoft_entra.view_microsoftentraprovidergroup",
"authentik_providers_microsoft_entra.view_microsoftentraprovidermapping",
"authentik_providers_microsoft_entra.view_microsoftentraproviderpropertymappingsgroup",
"authentik_providers_microsoft_entra.view_microsoftentraprovideruser",
"authentik_providers_oauth2.add_accesstoken",
"authentik_providers_oauth2.add_authorizationcode",
"authentik_providers_oauth2.add_devicetoken",
"authentik_providers_oauth2.add_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.add_oauth2dynamicclientregistration",
"authentik_providers_oauth2.add_oauth2provider",
"authentik_providers_oauth2.add_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.add_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.add_refreshtoken",
"authentik_providers_oauth2.add_scopemapping",
"authentik_providers_oauth2.change_accesstoken",
"authentik_providers_oauth2.change_authorizationcode",
"authentik_providers_oauth2.change_devicetoken",
"authentik_providers_oauth2.change_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.change_oauth2dynamicclientregistration",
"authentik_providers_oauth2.change_oauth2provider",
"authentik_providers_oauth2.change_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.change_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.change_refreshtoken",
"authentik_providers_oauth2.change_scopemapping",
"authentik_providers_oauth2.delete_accesstoken",
"authentik_providers_oauth2.delete_authorizationcode",
"authentik_providers_oauth2.delete_devicetoken",
"authentik_providers_oauth2.delete_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.delete_oauth2dynamicclientregistration",
"authentik_providers_oauth2.delete_oauth2provider",
"authentik_providers_oauth2.delete_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.delete_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.delete_refreshtoken",
"authentik_providers_oauth2.delete_scopemapping",
"authentik_providers_oauth2.view_accesstoken",
"authentik_providers_oauth2.view_authorizationcode",
"authentik_providers_oauth2.view_devicetoken",
"authentik_providers_oauth2.view_dynamicclientregistrationpropertymapping",
"authentik_providers_oauth2.view_oauth2dynamicclientregistration",
"authentik_providers_oauth2.view_oauth2provider",
"authentik_providers_oauth2.view_oauth2providerjwtfederationprovider",
"authentik_providers_oauth2.view_oauth2providerjwtfederationsource",
"authentik_providers_oauth2.view_refreshtoken",
"authentik_providers_oauth2.view_scopemapping",
"authentik_providers_proxy.add_proxyprovider",
"authentik_providers_proxy.add_proxysession",
"authentik_providers_proxy.change_proxyprovider",
"authentik_providers_proxy.change_proxysession",
"authentik_providers_proxy.delete_proxyprovider",
"authentik_providers_proxy.delete_proxysession",
"authentik_providers_proxy.view_proxyprovider",
"authentik_providers_proxy.view_proxysession",
"authentik_providers_rac.add_connectiontoken",
"authentik_providers_rac.add_endpoint",
"authentik_providers_rac.add_endpointpropertymapping",
"authentik_providers_rac.add_racpropertymapping",
"authentik_providers_rac.add_racprovider",
"authentik_providers_rac.change_connectiontoken",
"authentik_providers_rac.change_endpoint",
"authentik_providers_rac.change_endpointpropertymapping",
"authentik_providers_rac.change_racpropertymapping",
"authentik_providers_rac.change_racprovider",
"authentik_providers_rac.delete_connectiontoken",
"authentik_providers_rac.delete_endpoint",
"authentik_providers_rac.delete_endpointpropertymapping",
"authentik_providers_rac.delete_racpropertymapping",
"authentik_providers_rac.delete_racprovider",
"authentik_providers_rac.view_connectiontoken",
"authentik_providers_rac.view_endpoint",
"authentik_providers_rac.view_endpointpropertymapping",
"authentik_providers_rac.view_racpropertymapping",
"authentik_providers_rac.view_racprovider",
"authentik_providers_radius.add_radiusprovider",
"authentik_providers_radius.add_radiusproviderpropertymapping",
"authentik_providers_radius.change_radiusprovider",
"authentik_providers_radius.change_radiusproviderpropertymapping",
"authentik_providers_radius.delete_radiusprovider",
"authentik_providers_radius.delete_radiusproviderpropertymapping",
"authentik_providers_radius.view_radiusprovider",
"authentik_providers_radius.view_radiusproviderpropertymapping",
"authentik_providers_saml.add_samlpropertymapping",
"authentik_providers_saml.add_samlprovider",
"authentik_providers_saml.add_samlsession",
"authentik_providers_saml.change_samlpropertymapping",
"authentik_providers_saml.change_samlprovider",
"authentik_providers_saml.change_samlsession",
"authentik_providers_saml.delete_samlpropertymapping",
"authentik_providers_saml.delete_samlprovider",
"authentik_providers_saml.delete_samlsession",
"authentik_providers_saml.view_samlpropertymapping",
"authentik_providers_saml.view_samlprovider",
"authentik_providers_saml.view_samlsession",
"authentik_providers_scim.add_scimmapping",
"authentik_providers_scim.add_scimprovider",
"authentik_providers_scim.add_scimprovidergroup",
"authentik_providers_scim.add_scimprovidergroupfilter",
"authentik_providers_scim.add_scimprovidergrouppropertymapping",
"authentik_providers_scim.add_scimprovideruser",
"authentik_providers_scim.change_scimmapping",
"authentik_providers_scim.change_scimprovider",
"authentik_providers_scim.change_scimprovidergroup",
"authentik_providers_scim.change_scimprovidergroupfilter",
"authentik_providers_scim.change_scimprovidergrouppropertymapping",
"authentik_providers_scim.change_scimprovideruser",
"authentik_providers_scim.delete_scimmapping",
"authentik_providers_scim.delete_scimprovider",
"authentik_providers_scim.delete_scimprovidergroup",
"authentik_providers_scim.delete_scimprovidergroupfilter",
"authentik_providers_scim.delete_scimprovidergrouppropertymapping",
"authentik_providers_scim.delete_scimprovideruser",
"authentik_providers_scim.view_scimmapping",
"authentik_providers_scim.view_scimprovider",
"authentik_providers_scim.view_scimprovidergroup",
"authentik_providers_scim.view_scimprovidergroupfilter",
"authentik_providers_scim.view_scimprovidergrouppropertymapping",
"authentik_providers_scim.view_scimprovideruser",
"authentik_providers_ssf.add_ssfprovider",
"authentik_providers_ssf.add_ssfprovideroidcauthprovider",
"authentik_providers_ssf.add_stream",
"authentik_providers_ssf.add_streamevent",
"authentik_providers_ssf.change_ssfprovider",
"authentik_providers_ssf.change_ssfprovideroidcauthprovider",
"authentik_providers_ssf.change_stream",
"authentik_providers_ssf.change_streamevent",
"authentik_providers_ssf.delete_ssfprovider",
"authentik_providers_ssf.delete_ssfprovideroidcauthprovider",
"authentik_providers_ssf.delete_stream",
"authentik_providers_ssf.delete_streamevent",
"authentik_providers_ssf.view_ssfprovider",
"authentik_providers_ssf.view_ssfprovideroidcauthprovider",
"authentik_providers_ssf.view_stream",
"authentik_providers_ssf.view_streamevent",
"authentik_providers_ws_federation.add_wsfederationprovider",
"authentik_providers_ws_federation.change_wsfederationprovider",
"authentik_providers_ws_federation.delete_wsfederationprovider",
"authentik_providers_ws_federation.view_wsfederationprovider",
"authentik_rbac.access_admin_interface",
"authentik_rbac.add_initialpermissions",
"authentik_rbac.add_initialpermissionspermission",
"authentik_rbac.add_role",
"authentik_rbac.assign_role_permissions",
"authentik_rbac.change_initialpermissions",
"authentik_rbac.change_initialpermissionspermission",
"authentik_rbac.change_role",
"authentik_rbac.delete_initialpermissions",
"authentik_rbac.delete_initialpermissionspermission",
"authentik_rbac.delete_role",
"authentik_rbac.edit_system_settings",
"authentik_rbac.manage_media_files",
"authentik_rbac.unassign_role_permissions",
"authentik_rbac.view_initialpermissions",
"authentik_rbac.view_initialpermissionspermission",
"authentik_rbac.view_media_files",
"authentik_rbac.view_role",
"authentik_rbac.view_system_info",
"authentik_rbac.view_system_settings",
"authentik_reports.add_dataexport",
"authentik_reports.change_dataexport",
"authentik_reports.delete_dataexport",
"authentik_reports.view_dataexport",
"authentik_requests.add_grantrequest",
"authentik_requests.add_grantrequestapproval",
"authentik_requests.add_grantrequesttarget",
"authentik_requests.add_requestrule",
"authentik_requests.add_requestrulebinding",
"authentik_requests.add_requestrulechildbinding",
"authentik_requests.add_requestrulenotificationtransport",
"authentik_requests.change_grantrequest",
"authentik_requests.change_grantrequestapproval",
"authentik_requests.change_grantrequesttarget",
"authentik_requests.change_requestrule",
"authentik_requests.change_requestrulebinding",
"authentik_requests.change_requestrulechildbinding",
"authentik_requests.change_requestrulenotificationtransport",
"authentik_requests.delete_grantrequest",
"authentik_requests.delete_grantrequestapproval",
"authentik_requests.delete_grantrequesttarget",
"authentik_requests.delete_requestrule",
"authentik_requests.delete_requestrulebinding",
"authentik_requests.delete_requestrulechildbinding",
"authentik_requests.delete_requestrulenotificationtransport",
"authentik_requests.fulfill_grantrequest",
"authentik_requests.request_grantrequest",
"authentik_requests.revoke_grantrequest",
"authentik_requests.view_grantrequest",
"authentik_requests.view_grantrequestapproval",
"authentik_requests.view_grantrequesttarget",
"authentik_requests.view_requestrule",
"authentik_requests.view_requestrulebinding",
"authentik_requests.view_requestrulechildbinding",
"authentik_requests.view_requestrulenotificationtransport",
"authentik_sources_kerberos.add_groupkerberossourceconnection",
"authentik_sources_kerberos.add_kerberossource",
"authentik_sources_kerberos.add_kerberossourcepropertymapping",
"authentik_sources_kerberos.add_userkerberossourceconnection",
"authentik_sources_kerberos.change_groupkerberossourceconnection",
"authentik_sources_kerberos.change_kerberossource",
"authentik_sources_kerberos.change_kerberossourcepropertymapping",
"authentik_sources_kerberos.change_userkerberossourceconnection",
"authentik_sources_kerberos.delete_groupkerberossourceconnection",
"authentik_sources_kerberos.delete_kerberossource",
"authentik_sources_kerberos.delete_kerberossourcepropertymapping",
"authentik_sources_kerberos.delete_userkerberossourceconnection",
"authentik_sources_kerberos.view_groupkerberossourceconnection",
"authentik_sources_kerberos.view_kerberossource",
"authentik_sources_kerberos.view_kerberossourcepropertymapping",
"authentik_sources_kerberos.view_userkerberossourceconnection",
"authentik_sources_ldap.add_groupldapsourceconnection",
"authentik_sources_ldap.add_ldapsource",
"authentik_sources_ldap.add_ldapsourcepropertymapping",
"authentik_sources_ldap.add_userldapsourceconnection",
"authentik_sources_ldap.change_groupldapsourceconnection",
"authentik_sources_ldap.change_ldapsource",
"authentik_sources_ldap.change_ldapsourcepropertymapping",
"authentik_sources_ldap.change_userldapsourceconnection",
"authentik_sources_ldap.delete_groupldapsourceconnection",
"authentik_sources_ldap.delete_ldapsource",
"authentik_sources_ldap.delete_ldapsourcepropertymapping",
"authentik_sources_ldap.delete_userldapsourceconnection",
"authentik_sources_ldap.view_groupldapsourceconnection",
"authentik_sources_ldap.view_ldapsource",
"authentik_sources_ldap.view_ldapsourcepropertymapping",
"authentik_sources_ldap.view_userldapsourceconnection",
"authentik_sources_oauth.add_groupoauthsourceconnection",
"authentik_sources_oauth.add_oauthsource",
"authentik_sources_oauth.add_oauthsourcepropertymapping",
"authentik_sources_oauth.add_useroauthsourceconnection",
"authentik_sources_oauth.change_groupoauthsourceconnection",
"authentik_sources_oauth.change_oauthsource",
"authentik_sources_oauth.change_oauthsourcepropertymapping",
"authentik_sources_oauth.change_useroauthsourceconnection",
"authentik_sources_oauth.delete_groupoauthsourceconnection",
"authentik_sources_oauth.delete_oauthsource",
"authentik_sources_oauth.delete_oauthsourcepropertymapping",
"authentik_sources_oauth.delete_useroauthsourceconnection",
"authentik_sources_oauth.view_groupoauthsourceconnection",
"authentik_sources_oauth.view_oauthsource",
"authentik_sources_oauth.view_oauthsourcepropertymapping",
"authentik_sources_oauth.view_useroauthsourceconnection",
"authentik_sources_plex.add_groupplexsourceconnection",
"authentik_sources_plex.add_plexsource",
"authentik_sources_plex.add_plexsourcepropertymapping",
"authentik_sources_plex.add_userplexsourceconnection",
"authentik_sources_plex.change_groupplexsourceconnection",
"authentik_sources_plex.change_plexsource",
"authentik_sources_plex.change_plexsourcepropertymapping",
"authentik_sources_plex.change_userplexsourceconnection",
"authentik_sources_plex.delete_groupplexsourceconnection",
"authentik_sources_plex.delete_plexsource",
"authentik_sources_plex.delete_plexsourcepropertymapping",
"authentik_sources_plex.delete_userplexsourceconnection",
"authentik_sources_plex.view_groupplexsourceconnection",
"authentik_sources_plex.view_plexsource",
"authentik_sources_plex.view_plexsourcepropertymapping",
"authentik_sources_plex.view_userplexsourceconnection",
"authentik_sources_saml.add_groupsamlsourceconnection",
"authentik_sources_saml.add_samlsource",
"authentik_sources_saml.add_samlsourcepropertymapping",
"authentik_sources_saml.add_usersamlsourceconnection",
"authentik_sources_saml.change_groupsamlsourceconnection",
"authentik_sources_saml.change_samlsource",
"authentik_sources_saml.change_samlsourcepropertymapping",
"authentik_sources_saml.change_usersamlsourceconnection",
"authentik_sources_saml.delete_groupsamlsourceconnection",
"authentik_sources_saml.delete_samlsource",
"authentik_sources_saml.delete_samlsourcepropertymapping",
"authentik_sources_saml.delete_usersamlsourceconnection",
"authentik_sources_saml.view_groupsamlsourceconnection",
"authentik_sources_saml.view_samlsource",
"authentik_sources_saml.view_samlsourcepropertymapping",
"authentik_sources_saml.view_usersamlsourceconnection",
"authentik_sources_scim.add_scimsource",
"authentik_sources_scim.add_scimsourcegroup",
"authentik_sources_scim.add_scimsourcepropertymapping",
"authentik_sources_scim.add_scimsourceuser",
"authentik_sources_scim.change_scimsource",
"authentik_sources_scim.change_scimsourcegroup",
"authentik_sources_scim.change_scimsourcepropertymapping",
"authentik_sources_scim.change_scimsourceuser",
"authentik_sources_scim.delete_scimsource",
"authentik_sources_scim.delete_scimsourcegroup",
"authentik_sources_scim.delete_scimsourcepropertymapping",
"authentik_sources_scim.delete_scimsourceuser",
"authentik_sources_scim.view_scimsource",
"authentik_sources_scim.view_scimsourcegroup",
"authentik_sources_scim.view_scimsourcepropertymapping",
"authentik_sources_scim.view_scimsourceuser",
"authentik_sources_telegram.add_grouptelegramsourceconnection",
"authentik_sources_telegram.add_telegramsource",
"authentik_sources_telegram.add_telegramsourcepropertymapping",
"authentik_sources_telegram.add_usertelegramsourceconnection",
"authentik_sources_telegram.change_grouptelegramsourceconnection",
"authentik_sources_telegram.change_telegramsource",
"authentik_sources_telegram.change_telegramsourcepropertymapping",
"authentik_sources_telegram.change_usertelegramsourceconnection",
"authentik_sources_telegram.delete_grouptelegramsourceconnection",
"authentik_sources_telegram.delete_telegramsource",
"authentik_sources_telegram.delete_telegramsourcepropertymapping",
"authentik_sources_telegram.delete_usertelegramsourceconnection",
"authentik_sources_telegram.view_grouptelegramsourceconnection",
"authentik_sources_telegram.view_telegramsource",
"authentik_sources_telegram.view_telegramsourcepropertymapping",
"authentik_sources_telegram.view_usertelegramsourceconnection",
"authentik_stages_account_lockdown.add_accountlockdownstage",
"authentik_stages_account_lockdown.change_accountlockdownstage",
"authentik_stages_account_lockdown.delete_accountlockdownstage",
"authentik_stages_account_lockdown.view_accountlockdownstage",
"authentik_stages_authenticator_duo.add_authenticatorduostage",
"authentik_stages_authenticator_duo.add_duodevice",
"authentik_stages_authenticator_duo.change_authenticatorduostage",
"authentik_stages_authenticator_duo.change_duodevice",
"authentik_stages_authenticator_duo.delete_authenticatorduostage",
"authentik_stages_authenticator_duo.delete_duodevice",
"authentik_stages_authenticator_duo.view_authenticatorduostage",
"authentik_stages_authenticator_duo.view_duodevice",
"authentik_stages_authenticator_email.add_authenticatoremailstage",
"authentik_stages_authenticator_email.add_emaildevice",
"authentik_stages_authenticator_email.change_authenticatoremailstage",
"authentik_stages_authenticator_email.change_emaildevice",
"authentik_stages_authenticator_email.delete_authenticatoremailstage",
"authentik_stages_authenticator_email.delete_emaildevice",
"authentik_stages_authenticator_email.view_authenticatoremailstage",
"authentik_stages_authenticator_email.view_emaildevice",
"authentik_stages_authenticator_endpoint_gdtc.add_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.add_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.add_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.change_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.change_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.change_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.delete_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.delete_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.delete_endpointdeviceconnection",
"authentik_stages_authenticator_endpoint_gdtc.view_authenticatorendpointgdtcstage",
"authentik_stages_authenticator_endpoint_gdtc.view_endpointdevice",
"authentik_stages_authenticator_endpoint_gdtc.view_endpointdeviceconnection",
"authentik_stages_authenticator_sms.add_authenticatorsmsstage",
"authentik_stages_authenticator_sms.add_smsdevice",
"authentik_stages_authenticator_sms.change_authenticatorsmsstage",
"authentik_stages_authenticator_sms.change_smsdevice",
"authentik_stages_authenticator_sms.delete_authenticatorsmsstage",
"authentik_stages_authenticator_sms.delete_smsdevice",
"authentik_stages_authenticator_sms.view_authenticatorsmsstage",
"authentik_stages_authenticator_sms.view_smsdevice",
"authentik_stages_authenticator_static.add_authenticatorstaticstage",
"authentik_stages_authenticator_static.add_staticdevice",
"authentik_stages_authenticator_static.add_statictoken",
"authentik_stages_authenticator_static.change_authenticatorstaticstage",
"authentik_stages_authenticator_static.change_staticdevice",
"authentik_stages_authenticator_static.change_statictoken",
"authentik_stages_authenticator_static.delete_authenticatorstaticstage",
"authentik_stages_authenticator_static.delete_staticdevice",
"authentik_stages_authenticator_static.delete_statictoken",
"authentik_stages_authenticator_static.view_authenticatorstaticstage",
"authentik_stages_authenticator_static.view_staticdevice",
"authentik_stages_authenticator_static.view_statictoken",
"authentik_stages_authenticator_totp.add_authenticatortotpstage",
"authentik_stages_authenticator_totp.add_totpdevice",
"authentik_stages_authenticator_totp.change_authenticatortotpstage",
"authentik_stages_authenticator_totp.change_totpdevice",
"authentik_stages_authenticator_totp.delete_authenticatortotpstage",
"authentik_stages_authenticator_totp.delete_totpdevice",
"authentik_stages_authenticator_totp.view_authenticatortotpstage",
"authentik_stages_authenticator_totp.view_totpdevice",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.add_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.change_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.delete_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestage",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestageconfigurationstage",
"authentik_stages_authenticator_validate.view_authenticatorvalidatestagewebauthnalloweddevicetype",
"authentik_stages_authenticator_webauthn.add_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.add_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.add_webauthndevice",
"authentik_stages_authenticator_webauthn.add_webauthndevicetype",
"authentik_stages_authenticator_webauthn.change_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.change_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.change_webauthndevice",
"authentik_stages_authenticator_webauthn.change_webauthndevicetype",
"authentik_stages_authenticator_webauthn.delete_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.delete_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.delete_webauthndevice",
"authentik_stages_authenticator_webauthn.delete_webauthndevicetype",
"authentik_stages_authenticator_webauthn.view_authenticatorwebauthnstage",
"authentik_stages_authenticator_webauthn.view_authenticatorwebauthnstagedevicetyperestriction",
"authentik_stages_authenticator_webauthn.view_webauthndevice",
"authentik_stages_authenticator_webauthn.view_webauthndevicetype",
"authentik_stages_captcha.add_captchastage",
"authentik_stages_captcha.change_captchastage",
"authentik_stages_captcha.delete_captchastage",
"authentik_stages_captcha.view_captchastage",
"authentik_stages_consent.add_consentstage",
"authentik_stages_consent.add_userconsent",
"authentik_stages_consent.change_consentstage",
"authentik_stages_consent.change_userconsent",
"authentik_stages_consent.delete_consentstage",
"authentik_stages_consent.delete_userconsent",
"authentik_stages_consent.view_consentstage",
"authentik_stages_consent.view_userconsent",
"authentik_stages_deny.add_denystage",
"authentik_stages_deny.change_denystage",
"authentik_stages_deny.delete_denystage",
"authentik_stages_deny.view_denystage",
"authentik_stages_dummy.add_dummystage",
"authentik_stages_dummy.change_dummystage",
"authentik_stages_dummy.delete_dummystage",
"authentik_stages_dummy.view_dummystage",
"authentik_stages_email.add_emailstage",
"authentik_stages_email.change_emailstage",
"authentik_stages_email.delete_emailstage",
"authentik_stages_email.view_emailstage",
"authentik_stages_identification.add_identificationstage",
"authentik_stages_identification.add_identificationstagesource",
"authentik_stages_identification.change_identificationstage",
"authentik_stages_identification.change_identificationstagesource",
"authentik_stages_identification.delete_identificationstage",
"authentik_stages_identification.delete_identificationstagesource",
"authentik_stages_identification.view_identificationstage",
"authentik_stages_identification.view_identificationstagesource",
"authentik_stages_invitation.add_invitation",
"authentik_stages_invitation.add_invitationstage",
"authentik_stages_invitation.change_invitation",
"authentik_stages_invitation.change_invitationstage",
"authentik_stages_invitation.delete_invitation",
"authentik_stages_invitation.delete_invitationstage",
"authentik_stages_invitation.view_invitation",
"authentik_stages_invitation.view_invitationstage",
"authentik_stages_mtls.add_mutualtlsstage",
"authentik_stages_mtls.add_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.change_mutualtlsstage",
"authentik_stages_mtls.change_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.delete_mutualtlsstage",
"authentik_stages_mtls.delete_mutualtlsstagecertificateauthority",
"authentik_stages_mtls.pass_outpost_certificate",
"authentik_stages_mtls.view_mutualtlsstage",
"authentik_stages_mtls.view_mutualtlsstagecertificateauthority",
"authentik_stages_password.add_passwordstage",
"authentik_stages_password.change_passwordstage",
"authentik_stages_password.delete_passwordstage",
"authentik_stages_password.view_passwordstage",
"authentik_stages_prompt.add_prompt",
"authentik_stages_prompt.add_promptstage",
"authentik_stages_prompt.add_promptstagefield",
"authentik_stages_prompt.add_promptstagevalidationpolicy",
"authentik_stages_prompt.change_prompt",
"authentik_stages_prompt.change_promptstage",
"authentik_stages_prompt.change_promptstagefield",
"authentik_stages_prompt.change_promptstagevalidationpolicy",
"authentik_stages_prompt.delete_prompt",
"authentik_stages_prompt.delete_promptstage",
"authentik_stages_prompt.delete_promptstagefield",
"authentik_stages_prompt.delete_promptstagevalidationpolicy",
"authentik_stages_prompt.view_prompt",
"authentik_stages_prompt.view_promptstage",
"authentik_stages_prompt.view_promptstagefield",
"authentik_stages_prompt.view_promptstagevalidationpolicy",
"authentik_stages_redirect.add_redirectstage",
"authentik_stages_redirect.change_redirectstage",
"authentik_stages_redirect.delete_redirectstage",
"authentik_stages_redirect.view_redirectstage",
"authentik_stages_source.add_sourcestage",
"authentik_stages_source.change_sourcestage",
"authentik_stages_source.delete_sourcestage",
"authentik_stages_source.view_sourcestage",
"authentik_stages_user_delete.add_userdeletestage",
"authentik_stages_user_delete.change_userdeletestage",
"authentik_stages_user_delete.delete_userdeletestage",
"authentik_stages_user_delete.view_userdeletestage",
"authentik_stages_user_login.add_userloginstage",
"authentik_stages_user_login.change_userloginstage",
"authentik_stages_user_login.delete_userloginstage",
"authentik_stages_user_login.view_userloginstage",
"authentik_stages_user_logout.add_userlogoutstage",
"authentik_stages_user_logout.change_userlogoutstage",
"authentik_stages_user_logout.delete_userlogoutstage",
"authentik_stages_user_logout.view_userlogoutstage",
"authentik_stages_user_write.add_userwritestage",
"authentik_stages_user_write.change_userwritestage",
"authentik_stages_user_write.delete_userwritestage",
"authentik_stages_user_write.view_userwritestage",
"authentik_tasks.retry_task",
"authentik_tasks.view_task",
"authentik_tasks_schedules.change_schedule",
"authentik_tasks_schedules.send_schedule",
"authentik_tasks_schedules.view_schedule",
"authentik_tenants.add_domain",
"authentik_tenants.add_tenant",
"authentik_tenants.change_domain",
"authentik_tenants.change_tenant",
"authentik_tenants.delete_domain",
"authentik_tenants.delete_tenant",
"authentik_tenants.view_domain",
"authentik_tenants.view_tenant"
]
},
"title": "Permissions"
}
},
"required": []
},
"model_authentik_rbac.role_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_role",
"assign_role_permissions",
"change_role",
"delete_role",
"unassign_role_permissions",
"view_role"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_kerberos.groupkerberossourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_kerberos.groupkerberossourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_groupkerberossourceconnection",
"change_groupkerberossourceconnection",
"delete_groupkerberossourceconnection",
"view_groupkerberossourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_kerberos.kerberossource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"promoted": {
"type": "boolean",
"title": "Promoted",
"description": "When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon."
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow to use when authenticating existing users."
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Flow to use when enrolling new users."
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"user_matching_mode": {
"type": "string",
"enum": [
"identifier",
"email_link",
"email_deny",
"username_link",
"username_deny"
],
"title": "User matching mode",
"description": "How the source determines if an existing user should be authenticated or a new user enrolled."
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
},
"icon": {
"type": "string",
"title": "Icon"
},
"group_matching_mode": {
"type": "string",
"enum": [
"identifier",
"name_link",
"name_deny"
],
"title": "Group matching mode",
"description": "How the source determines if an existing group should be used or a new group created."
},
"realm": {
"type": "string",
"minLength": 1,
"title": "Realm",
"description": "Kerberos realm"
},
"krb5_conf": {
"type": "string",
"title": "Krb5 conf",
"description": "Custom krb5.conf to use. Uses the system one by default"
},
"kadmin_type": {
"type": "string",
"enum": [
"MIT",
"Heimdal"
],
"title": "Kadmin type",
"description": "KAdmin server type"
},
"sync_users": {
"type": "boolean",
"title": "Sync users",
"description": "Sync users from Kerberos into authentik"
},
"sync_users_password": {
"type": "boolean",
"title": "Sync users password",
"description": "When a user changes their password, sync it back to Kerberos"
},
"sync_principal": {
"type": "string",
"title": "Sync principal",
"description": "Principal to authenticate to kadmin for sync."
},
"sync_password": {
"type": "string",
"title": "Sync password",
"description": "Password to authenticate to kadmin for sync"
},
"sync_keytab": {
"type": "string",
"title": "Sync keytab",
"description": "Keytab to authenticate to kadmin for sync. Must be base64-encoded or in the form TYPE:residual"
},
"sync_ccache": {
"type": "string",
"title": "Sync ccache",
"description": "Credentials cache to authenticate to kadmin for sync. Must be in the form TYPE:residual"
},
"spnego_server_name": {
"type": "string",
"title": "Spnego server name",
"description": "Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname"
},
"spnego_keytab": {
"type": "string",
"title": "Spnego keytab",
"description": "SPNEGO keytab base64-encoded or path to keytab in the form FILE:path"
},
"spnego_ccache": {
"type": "string",
"title": "Spnego ccache",
"description": "Credential cache to use for SPNEGO in form type:residual"
},
"password_login_update_internal_password": {
"type": "boolean",
"title": "Password login update internal password",
"description": "If enabled, the authentik-stored password will be updated upon login with the Kerberos password backend"
},
"sync_outgoing_trigger_mode": {
"type": "string",
"enum": [
"none",
"immediate",
"deferred_end"
],
"title": "Sync outgoing trigger mode",
"description": "When to trigger sync for outgoing providers"
}
},
"required": []
},
"model_authentik_sources_kerberos.kerberossource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_kerberossource",
"change_kerberossource",
"delete_kerberossource",
"view_kerberossource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_kerberos.kerberossourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_kerberos.kerberossourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_kerberossourcepropertymapping",
"change_kerberossourcepropertymapping",
"delete_kerberossourcepropertymapping",
"view_kerberossourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_kerberos.userkerberossourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_kerberos.userkerberossourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userkerberossourceconnection",
"change_userkerberossourceconnection",
"delete_userkerberossourceconnection",
"view_userkerberossourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_ldap.groupldapsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_ldap.groupldapsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_groupldapsourceconnection",
"change_groupldapsourceconnection",
"delete_groupldapsourceconnection",
"view_groupldapsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_ldap.ldapsource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"promoted": {
"type": "boolean",
"title": "Promoted",
"description": "When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon."
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow to use when authenticating existing users."
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Flow to use when enrolling new users."
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"user_matching_mode": {
"type": "string",
"enum": [
"identifier",
"email_link",
"email_deny",
"username_link",
"username_deny"
],
"title": "User matching mode",
"description": "How the source determines if an existing user should be authenticated or a new user enrolled."
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
},
"icon": {
"type": "string",
"title": "Icon"
},
"server_uri": {
"type": "string",
"minLength": 1,
"title": "Server URI"
},
"peer_certificate": {
"type": "string",
"format": "uuid",
"title": "Peer certificate",
"description": "Optionally verify the LDAP Server's Certificate against the CA Chain in this keypair."
},
"client_certificate": {
"type": "string",
"format": "uuid",
"title": "Client certificate",
"description": "Client certificate to authenticate against the LDAP Server's Certificate."
},
"bind_cn": {
"type": "string",
"title": "Bind CN"
},
"bind_password": {
"type": "string",
"title": "Bind password"
},
"start_tls": {
"type": "boolean",
"title": "Enable Start TLS"
},
"sni": {
"type": "boolean",
"title": "Use Server URI for SNI verification"
},
"base_dn": {
"type": "string",
"minLength": 1,
"title": "Base DN"
},
"additional_user_dn": {
"type": "string",
"title": "Addition User DN",
"description": "Prepended to Base DN for User-queries."
},
"additional_group_dn": {
"type": "string",
"title": "Addition Group DN",
"description": "Prepended to Base DN for Group-queries."
},
"user_object_filter": {
"type": "string",
"minLength": 1,
"title": "User object filter",
"description": "Consider Objects matching this filter to be Users."
},
"group_object_filter": {
"type": "string",
"minLength": 1,
"title": "Group object filter",
"description": "Consider Objects matching this filter to be Groups."
},
"group_membership_field": {
"type": "string",
"minLength": 1,
"title": "Group membership field",
"description": "Field which contains members of a group."
},
"user_membership_attribute": {
"type": "string",
"minLength": 1,
"title": "User membership attribute",
"description": "Attribute which matches the value of `group_membership_field`."
},
"object_uniqueness_field": {
"type": "string",
"minLength": 1,
"title": "Object uniqueness field",
"description": "Field which contains a unique Identifier."
},
"password_login_update_internal_password": {
"type": "boolean",
"title": "Password login update internal password",
"description": "Update internal authentik password when login succeeds with LDAP"
},
"sync_users": {
"type": "boolean",
"title": "Sync users"
},
"sync_users_password": {
"type": "boolean",
"title": "Sync users password",
"description": "When a user changes their password, sync it back to LDAP. This can only be enabled on a single LDAP source."
},
"sync_groups": {
"type": "boolean",
"title": "Sync groups"
},
"sync_parent_group": {
"type": "string",
"format": "uuid",
"title": "Sync parent group"
},
"lookup_groups_from_user": {
"type": "boolean",
"title": "Lookup groups from user",
"description": "Lookup group membership based on a user attribute instead of a group attribute. This allows nested group resolution on systems like FreeIPA and Active Directory"
},
"delete_not_found_objects": {
"type": "boolean",
"title": "Delete not found objects",
"description": "Delete authentik users and groups which were previously supplied by this source, but are now missing from it."
},
"sync_outgoing_trigger_mode": {
"type": "string",
"enum": [
"none",
"immediate",
"deferred_end"
],
"title": "Sync outgoing trigger mode",
"description": "When to trigger sync for outgoing providers"
},
"sync_group_hierarchy": {
"type": "boolean",
"title": "Sync group hierarchy",
"description": "Sync group parentage/hierarchy from LDAP directories."
}
},
"required": []
},
"model_authentik_sources_ldap.ldapsource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_ldapsource",
"change_ldapsource",
"delete_ldapsource",
"view_ldapsource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_ldap.ldapsourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_ldap.ldapsourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_ldapsourcepropertymapping",
"change_ldapsourcepropertymapping",
"delete_ldapsourcepropertymapping",
"view_ldapsourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_ldap.userldapsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_ldap.userldapsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userldapsourceconnection",
"change_userldapsourceconnection",
"delete_userldapsourceconnection",
"view_userldapsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_oauth.groupoauthsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_oauth.groupoauthsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_groupoauthsourceconnection",
"change_groupoauthsourceconnection",
"delete_groupoauthsourceconnection",
"view_groupoauthsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_oauth.oauthsource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"promoted": {
"type": "boolean",
"title": "Promoted",
"description": "When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon."
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow to use when authenticating existing users."
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Flow to use when enrolling new users."
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"user_matching_mode": {
"type": "string",
"enum": [
"identifier",
"email_link",
"email_deny",
"username_link",
"username_deny"
],
"title": "User matching mode",
"description": "How the source determines if an existing user should be authenticated or a new user enrolled."
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
},
"icon": {
"type": "string",
"title": "Icon"
},
"group_matching_mode": {
"type": "string",
"enum": [
"identifier",
"name_link",
"name_deny"
],
"title": "Group matching mode",
"description": "How the source determines if an existing group should be used or a new group created."
},
"provider_type": {
"type": "string",
"enum": [
"openidconnect",
"apple",
"discord",
"entraid",
"facebook",
"github",
"gitlab",
"google",
"mailcow",
"okta",
"patreon",
"reddit",
"slack",
"twitch",
"twitter",
"wechat"
],
"title": "Provider type"
},
"request_token_url": {
"type": [
"string",
"null"
],
"title": "Request Token URL",
"description": "URL used to request the initial token. This URL is only required for OAuth 1."
},
"authorization_url": {
"type": [
"string",
"null"
],
"title": "Authorization URL",
"description": "URL the user is redirect to to conest the flow."
},
"access_token_url": {
"type": [
"string",
"null"
],
"title": "Access Token URL",
"description": "URL used by authentik to retrieve tokens."
},
"profile_url": {
"type": [
"string",
"null"
],
"title": "Profile URL",
"description": "URL used by authentik to get user information."
},
"pkce": {
"type": "string",
"enum": [
"none",
"plain",
"S256"
],
"title": "PKCE"
},
"consumer_key": {
"type": "string",
"minLength": 1,
"title": "Consumer key"
},
"consumer_secret": {
"type": "string",
"minLength": 1,
"title": "Consumer secret"
},
"additional_scopes": {
"type": "string",
"title": "Additional Scopes"
},
"oidc_well_known_url": {
"type": "string",
"title": "Oidc well known url"
},
"oidc_jwks_url": {
"type": "string",
"title": "Oidc jwks url"
},
"oidc_jwks": {
"type": "object",
"additionalProperties": true,
"title": "Oidc jwks"
},
"authorization_code_auth_method": {
"type": "string",
"enum": [
"basic_auth",
"post_body"
],
"title": "Authorization code auth method",
"description": "How to perform authentication during an authorization_code token request flow"
}
},
"required": []
},
"model_authentik_sources_oauth.oauthsource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_oauthsource",
"change_oauthsource",
"delete_oauthsource",
"view_oauthsource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_oauth.oauthsourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_oauth.oauthsourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_oauthsourcepropertymapping",
"change_oauthsourcepropertymapping",
"delete_oauthsourcepropertymapping",
"view_oauthsourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_oauth.useroauthsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
},
"access_token": {
"type": [
"string",
"null"
],
"title": "Access token"
},
"expires": {
"type": "string",
"format": "date-time",
"title": "Expires"
}
},
"required": []
},
"model_authentik_sources_oauth.useroauthsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_useroauthsourceconnection",
"change_useroauthsourceconnection",
"delete_useroauthsourceconnection",
"view_useroauthsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_plex.groupplexsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_plex.groupplexsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_groupplexsourceconnection",
"change_groupplexsourceconnection",
"delete_groupplexsourceconnection",
"view_groupplexsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_plex.plexsource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"promoted": {
"type": "boolean",
"title": "Promoted",
"description": "When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon."
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow to use when authenticating existing users."
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Flow to use when enrolling new users."
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"user_matching_mode": {
"type": "string",
"enum": [
"identifier",
"email_link",
"email_deny",
"username_link",
"username_deny"
],
"title": "User matching mode",
"description": "How the source determines if an existing user should be authenticated or a new user enrolled."
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
},
"icon": {
"type": "string",
"title": "Icon"
},
"group_matching_mode": {
"type": "string",
"enum": [
"identifier",
"name_link",
"name_deny"
],
"title": "Group matching mode",
"description": "How the source determines if an existing group should be used or a new group created."
},
"client_id": {
"type": "string",
"minLength": 1,
"title": "Client id",
"description": "Client identifier used to talk to Plex."
},
"allowed_servers": {
"type": "array",
"items": {
"type": "string",
"minLength": 1,
"title": "Allowed servers"
},
"title": "Allowed servers",
"description": "Which servers a user has to be a member of to be granted access. Empty list allows every server."
},
"allow_friends": {
"type": "boolean",
"title": "Allow friends",
"description": "Allow friends to authenticate, even if you don't share a server."
},
"plex_token": {
"type": "string",
"minLength": 1,
"title": "Plex token",
"description": "Plex token used to check friends"
}
},
"required": []
},
"model_authentik_sources_plex.plexsource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_plexsource",
"change_plexsource",
"delete_plexsource",
"view_plexsource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_plex.plexsourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_plex.plexsourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_plexsourcepropertymapping",
"change_plexsourcepropertymapping",
"delete_plexsourcepropertymapping",
"view_plexsourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_plex.userplexsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
},
"plex_token": {
"type": "string",
"minLength": 1,
"title": "Plex token"
}
},
"required": []
},
"model_authentik_sources_plex.userplexsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userplexsourceconnection",
"change_userplexsourceconnection",
"delete_userplexsourceconnection",
"view_userplexsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_saml.groupsamlsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_saml.groupsamlsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_groupsamlsourceconnection",
"change_groupsamlsourceconnection",
"delete_groupsamlsourceconnection",
"view_groupsamlsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_saml.samlsource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"promoted": {
"type": "boolean",
"title": "Promoted",
"description": "When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon."
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow to use when authenticating existing users."
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Flow to use when enrolling new users."
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"user_matching_mode": {
"type": "string",
"enum": [
"identifier",
"email_link",
"email_deny",
"username_link",
"username_deny"
],
"title": "User matching mode",
"description": "How the source determines if an existing user should be authenticated or a new user enrolled."
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
},
"icon": {
"type": "string",
"title": "Icon"
},
"group_matching_mode": {
"type": "string",
"enum": [
"identifier",
"name_link",
"name_deny"
],
"title": "Group matching mode",
"description": "How the source determines if an existing group should be used or a new group created."
},
"pre_authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Pre authentication flow",
"description": "Flow used before authentication."
},
"issuer_override": {
"type": "string",
"title": "Issuer override",
"description": "Also known as Entity ID. Defaults to the Metadata URL."
},
"sso_url": {
"type": "string",
"minLength": 1,
"title": "SSO URL",
"description": "URL that the initial Login request is sent to."
},
"slo_url": {
"type": [
"string",
"null"
],
"title": "SLO URL",
"description": "Optional URL if your IDP supports Single-Logout."
},
"allow_idp_initiated": {
"type": "boolean",
"title": "Allow idp initiated",
"description": "Allows authentication flows initiated by the IdP. This can be a security risk, as no validation of the request ID is done."
},
"force_authn": {
"type": "boolean",
"title": "Force authn",
"description": "When enabled, the IdP will re-authenticate the user even if a session exists."
},
"name_id_policy": {
"type": "string",
"enum": [
"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
"urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName",
"urn:oasis:names:tc:SAML:2.0:nameid-format:WindowsDomainQualifiedName",
"urn:oasis:names:tc:SAML:2.0:nameid-format:transient",
"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
],
"title": "Name id policy",
"description": "NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent."
},
"binding_type": {
"type": "string",
"enum": [
"REDIRECT",
"POST",
"POST_AUTO"
],
"title": "Binding type"
},
"verification_kp": {
"type": "string",
"format": "uuid",
"title": "Verification Certificate",
"description": "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
},
"signing_kp": {
"type": "string",
"format": "uuid",
"title": "Signing Keypair",
"description": "Keypair used to sign outgoing Responses going to the Identity Provider."
},
"digest_algorithm": {
"type": "string",
"enum": [
"http://www.w3.org/2000/09/xmldsig#sha1",
"http://www.w3.org/2001/04/xmlenc#sha256",
"http://www.w3.org/2001/04/xmldsig-more#sha384",
"http://www.w3.org/2001/04/xmlenc#sha512"
],
"title": "Digest algorithm"
},
"signature_algorithm": {
"type": "string",
"enum": [
"http://www.w3.org/2000/09/xmldsig#rsa-sha1",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha384",
"http://www.w3.org/2001/04/xmldsig-more#rsa-sha512",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384",
"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512",
"http://www.w3.org/2000/09/xmldsig#dsa-sha1"
],
"title": "Signature algorithm"
},
"temporary_user_delete_after": {
"type": "string",
"minLength": 1,
"title": "Delete temporary users after",
"description": "Time offset when temporary users should be deleted. This only applies if your IDP uses the NameID Format 'transient', and the user doesn't log out manually. (Format: hours=1;minutes=2;seconds=3)."
},
"encryption_kp": {
"type": "string",
"format": "uuid",
"title": "Encryption Keypair",
"description": "When selected, incoming assertions are encrypted by the IdP using the public key of the encryption keypair. The assertion is decrypted by the SP using the the private key."
},
"signed_assertion": {
"type": "boolean",
"title": "Signed assertion"
},
"signed_response": {
"type": "boolean",
"title": "Signed response"
}
},
"required": []
},
"model_authentik_sources_saml.samlsource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_samlsource",
"change_samlsource",
"delete_samlsource",
"view_samlsource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_saml.samlsourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_saml.samlsourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_samlsourcepropertymapping",
"change_samlsourcepropertymapping",
"delete_samlsourcepropertymapping",
"view_samlsourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_saml.usersamlsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_saml.usersamlsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_usersamlsourceconnection",
"change_usersamlsourceconnection",
"delete_usersamlsourceconnection",
"view_usersamlsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_scim.scimsource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
}
},
"required": []
},
"model_authentik_sources_scim.scimsource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_scimsource",
"change_scimsource",
"delete_scimsource",
"view_scimsource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_scim.scimsourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_scim.scimsourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_scimsourcepropertymapping",
"change_scimsourcepropertymapping",
"delete_scimsourcepropertymapping",
"view_scimsourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_telegram.grouptelegramsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_telegram.grouptelegramsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_grouptelegramsourceconnection",
"change_grouptelegramsourceconnection",
"delete_grouptelegramsourceconnection",
"view_grouptelegramsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_telegram.telegramsource": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name",
"description": "Source's display Name."
},
"slug": {
"type": "string",
"minLength": 1,
"title": "Slug",
"description": "Internal source name, used in URLs."
},
"enabled": {
"type": "boolean",
"title": "Enabled"
},
"promoted": {
"type": "boolean",
"title": "Promoted",
"description": "When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon."
},
"authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Authentication flow",
"description": "Flow to use when authenticating existing users."
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Flow to use when enrolling new users."
},
"user_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "User property mappings"
},
"group_property_mappings": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Group property mappings"
},
"policy_engine_mode": {
"type": "string",
"enum": [
"all",
"any"
],
"title": "Policy engine mode"
},
"user_matching_mode": {
"type": "string",
"enum": [
"identifier",
"email_link",
"email_deny",
"username_link",
"username_deny"
],
"title": "User matching mode",
"description": "How the source determines if an existing user should be authenticated or a new user enrolled."
},
"user_path_template": {
"type": "string",
"minLength": 1,
"title": "User path template"
},
"icon": {
"type": "string",
"title": "Icon"
},
"bot_username": {
"type": "string",
"minLength": 1,
"title": "Bot username",
"description": "Telegram bot username"
},
"bot_token": {
"type": "string",
"minLength": 1,
"title": "Bot token",
"description": "Telegram bot token"
},
"request_message_access": {
"type": "boolean",
"title": "Request message access",
"description": "Request access to send messages from your bot."
},
"pre_authentication_flow": {
"type": "string",
"format": "uuid",
"title": "Pre authentication flow",
"description": "Flow used before authentication."
}
},
"required": []
},
"model_authentik_sources_telegram.telegramsource_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_telegramsource",
"change_telegramsource",
"delete_telegramsource",
"view_telegramsource"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_telegram.telegramsourcepropertymapping": {
"type": "object",
"properties": {
"managed": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Managed by authentik",
"description": "Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update."
},
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expression": {
"type": "string",
"minLength": 1,
"title": "Expression"
}
},
"required": []
},
"model_authentik_sources_telegram.telegramsourcepropertymapping_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_telegramsourcepropertymapping",
"change_telegramsourcepropertymapping",
"delete_telegramsourcepropertymapping",
"view_telegramsourcepropertymapping"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_sources_telegram.usertelegramsourceconnection": {
"type": "object",
"properties": {
"source": {
"type": "string",
"format": "uuid",
"title": "Source"
},
"identifier": {
"type": "string",
"minLength": 1,
"title": "Identifier"
}
},
"required": []
},
"model_authentik_sources_telegram.usertelegramsourceconnection_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_usertelegramsourceconnection",
"change_usertelegramsourceconnection",
"delete_usertelegramsourceconnection",
"view_usertelegramsourceconnection"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_duo.authenticatorduostage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"client_id": {
"type": "string",
"minLength": 1,
"title": "Client id"
},
"client_secret": {
"type": "string",
"minLength": 1,
"title": "Client secret"
},
"api_hostname": {
"type": "string",
"minLength": 1,
"title": "Api hostname"
},
"admin_integration_key": {
"type": "string",
"title": "Admin integration key"
},
"admin_secret_key": {
"type": "string",
"title": "Admin secret key"
}
},
"required": []
},
"model_authentik_stages_authenticator_duo.authenticatorduostage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatorduostage",
"change_authenticatorduostage",
"delete_authenticatorduostage",
"view_authenticatorduostage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_duo.duodevice": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 1,
"title": "Name",
"description": "The human-readable name of this device."
}
},
"required": []
},
"model_authentik_stages_authenticator_duo.duodevice_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_duodevice",
"change_duodevice",
"delete_duodevice",
"view_duodevice"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_email.authenticatoremailstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"use_global_settings": {
"type": "boolean",
"title": "Use global settings",
"description": "When enabled, global Email connection settings will be used and connection settings below will be ignored."
},
"host": {
"type": "string",
"minLength": 1,
"title": "Host"
},
"port": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Port"
},
"username": {
"type": "string",
"title": "Username"
},
"password": {
"type": "string",
"title": "Password"
},
"use_tls": {
"type": "boolean",
"title": "Use tls"
},
"use_ssl": {
"type": "boolean",
"title": "Use ssl"
},
"timeout": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Timeout"
},
"from_address": {
"type": "string",
"format": "email",
"maxLength": 254,
"minLength": 1,
"title": "From address"
},
"subject": {
"type": "string",
"minLength": 1,
"title": "Subject"
},
"token_expiry": {
"type": "string",
"minLength": 1,
"title": "Token expiry",
"description": "Time the token sent is valid (Format: hours=3,minutes=17,seconds=300)."
},
"template": {
"type": "string",
"minLength": 1,
"title": "Template"
}
},
"required": []
},
"model_authentik_stages_authenticator_email.authenticatoremailstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatoremailstage",
"change_authenticatoremailstage",
"delete_authenticatoremailstage",
"view_authenticatoremailstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_email.emaildevice": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 1,
"title": "Name",
"description": "The human-readable name of this device."
}
},
"required": []
},
"model_authentik_stages_authenticator_email.emaildevice_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_emaildevice",
"change_emaildevice",
"delete_emaildevice",
"view_emaildevice"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_sms.authenticatorsmsstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"provider": {
"type": "string",
"enum": [
"twilio",
"generic"
],
"title": "Provider"
},
"from_number": {
"type": "string",
"minLength": 1,
"title": "From number"
},
"account_sid": {
"type": "string",
"minLength": 1,
"title": "Account sid"
},
"auth": {
"type": "string",
"minLength": 1,
"title": "Auth"
},
"auth_password": {
"type": "string",
"title": "Auth password"
},
"auth_type": {
"type": "string",
"enum": [
"basic",
"bearer"
],
"title": "Auth type"
},
"verify_only": {
"type": "boolean",
"title": "Verify only",
"description": "When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future."
},
"mapping": {
"type": "string",
"format": "uuid",
"title": "Mapping",
"description": "Optionally modify the payload being sent to custom providers."
}
},
"required": []
},
"model_authentik_stages_authenticator_sms.authenticatorsmsstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatorsmsstage",
"change_authenticatorsmsstage",
"delete_authenticatorsmsstage",
"view_authenticatorsmsstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_sms.smsdevice": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 1,
"title": "Name",
"description": "The human-readable name of this device."
}
},
"required": []
},
"model_authentik_stages_authenticator_sms.smsdevice_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_smsdevice",
"change_smsdevice",
"delete_smsdevice",
"view_smsdevice"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_static.authenticatorstaticstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"token_count": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Token count"
},
"token_length": {
"type": "integer",
"minimum": 0,
"maximum": 100,
"title": "Token length"
}
},
"required": []
},
"model_authentik_stages_authenticator_static.authenticatorstaticstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatorstaticstage",
"change_authenticatorstaticstage",
"delete_authenticatorstaticstage",
"view_authenticatorstaticstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_static.staticdevice": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 1,
"title": "Name",
"description": "The human-readable name of this device."
}
},
"required": []
},
"model_authentik_stages_authenticator_static.staticdevice_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_staticdevice",
"change_staticdevice",
"delete_staticdevice",
"view_staticdevice"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_totp.authenticatortotpstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"digits": {
"type": "string",
"enum": [
"6",
"8"
],
"title": "Digits"
}
},
"required": []
},
"model_authentik_stages_authenticator_totp.authenticatortotpstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatortotpstage",
"change_authenticatortotpstage",
"delete_authenticatortotpstage",
"view_authenticatortotpstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_totp.totpdevice": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 1,
"title": "Name",
"description": "The human-readable name of this device."
}
},
"required": []
},
"model_authentik_stages_authenticator_totp.totpdevice_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_totpdevice",
"change_totpdevice",
"delete_totpdevice",
"view_totpdevice"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_validate.authenticatorvalidatestage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"not_configured_action": {
"type": "string",
"enum": [
"skip",
"deny",
"configure"
],
"title": "Not configured action"
},
"device_classes": {
"type": "array",
"items": {
"type": "string",
"enum": [
"static",
"totp",
"webauthn",
"duo",
"sms",
"email"
],
"title": "Device classes"
},
"title": "Device classes",
"description": "Device classes which can be used to authenticate"
},
"configuration_stages": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again."
},
"title": "Configuration stages",
"description": "Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again."
},
"last_auth_threshold": {
"type": "string",
"minLength": 1,
"title": "Last auth threshold",
"description": "If any of the user's device has been used within this threshold, this stage will be skipped"
},
"webauthn_user_verification": {
"type": "string",
"enum": [
"required",
"preferred",
"discouraged"
],
"title": "Webauthn user verification",
"description": "Enforce user verification for WebAuthn devices."
},
"webauthn_hints": {
"type": "array",
"items": {
"type": "string",
"enum": [
"security-key",
"client-device",
"hybrid"
],
"title": "Webauthn hints"
},
"title": "Webauthn hints"
},
"webauthn_allowed_device_types": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Webauthn allowed device types"
},
"email_otp_throttling_factor": {
"type": "number",
"title": "Email otp throttling factor"
},
"sms_otp_throttling_factor": {
"type": "number",
"title": "Sms otp throttling factor"
},
"totp_otp_throttling_factor": {
"type": "number",
"title": "Totp otp throttling factor"
},
"static_otp_throttling_factor": {
"type": "number",
"title": "Static otp throttling factor"
}
},
"required": []
},
"model_authentik_stages_authenticator_validate.authenticatorvalidatestage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatorvalidatestage",
"change_authenticatorvalidatestage",
"delete_authenticatorvalidatestage",
"view_authenticatorvalidatestage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_webauthn.authenticatorwebauthnstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"friendly_name": {
"type": "string",
"title": "Friendly name"
},
"user_verification": {
"type": "string",
"enum": [
"required",
"preferred",
"discouraged"
],
"title": "User verification"
},
"authenticator_attachment": {
"type": [
"null",
"string"
],
"enum": [
null,
"platform",
"cross-platform"
],
"title": "Authenticator attachment"
},
"resident_key_requirement": {
"type": "string",
"enum": [
"discouraged",
"preferred",
"required"
],
"title": "Resident key requirement"
},
"hints": {
"type": "array",
"items": {
"type": "string",
"enum": [
"security-key",
"client-device",
"hybrid"
],
"title": "Hints"
},
"title": "Hints"
},
"device_type_restrictions": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Device type restrictions"
},
"max_attempts": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Max attempts"
}
},
"required": []
},
"model_authentik_stages_authenticator_webauthn.authenticatorwebauthnstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_authenticatorwebauthnstage",
"change_authenticatorwebauthnstage",
"delete_authenticatorwebauthnstage",
"view_authenticatorwebauthnstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_authenticator_webauthn.webauthndevice": {
"type": "object",
"properties": {
"name": {
"type": "string",
"maxLength": 200,
"minLength": 1,
"title": "Name"
}
},
"required": []
},
"model_authentik_stages_authenticator_webauthn.webauthndevice_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_webauthndevice",
"change_webauthndevice",
"delete_webauthndevice",
"view_webauthndevice"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_captcha.captchastage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"public_key": {
"type": "string",
"minLength": 1,
"title": "Public key",
"description": "Public key, acquired your captcha Provider."
},
"private_key": {
"type": "string",
"minLength": 1,
"title": "Private key",
"description": "Private key, acquired your captcha Provider."
},
"js_url": {
"type": "string",
"minLength": 1,
"title": "Js url"
},
"api_url": {
"type": "string",
"minLength": 1,
"title": "Api url"
},
"request_content_type": {
"type": "string",
"enum": [
"application/x-www-form-urlencoded",
"application/json"
],
"title": "Request content type"
},
"interactive": {
"type": "boolean",
"title": "Interactive"
},
"score_min_threshold": {
"type": "number",
"title": "Score min threshold"
},
"score_max_threshold": {
"type": "number",
"title": "Score max threshold"
},
"error_on_invalid_score": {
"type": "boolean",
"title": "Error on invalid score",
"description": "When enabled and the received captcha score is outside of the given threshold, the stage will show an error message. When not enabled, the flow will continue, but the data from the captcha will be available in the context for policy decisions"
}
},
"required": []
},
"model_authentik_stages_captcha.captchastage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_captchastage",
"change_captchastage",
"delete_captchastage",
"view_captchastage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_consent.consentstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"mode": {
"type": "string",
"enum": [
"always_require",
"permanent",
"expiring"
],
"title": "Mode"
},
"consent_expire_in": {
"type": "string",
"minLength": 1,
"title": "Consent expires in",
"description": "Offset after which consent expires. (Format: hours=1;minutes=2;seconds=3)."
}
},
"required": []
},
"model_authentik_stages_consent.consentstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_consentstage",
"change_consentstage",
"delete_consentstage",
"view_consentstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_deny.denystage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"deny_message": {
"type": "string",
"title": "Deny message"
}
},
"required": []
},
"model_authentik_stages_deny.denystage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_denystage",
"change_denystage",
"delete_denystage",
"view_denystage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_dummy.dummystage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"throw_error": {
"type": "boolean",
"title": "Throw error"
}
},
"required": []
},
"model_authentik_stages_dummy.dummystage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_dummystage",
"change_dummystage",
"delete_dummystage",
"view_dummystage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_email.emailstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"use_global_settings": {
"type": "boolean",
"title": "Use global settings",
"description": "When enabled, global Email connection settings will be used and connection settings below will be ignored."
},
"host": {
"type": "string",
"minLength": 1,
"title": "Host"
},
"port": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Port"
},
"username": {
"type": "string",
"title": "Username"
},
"password": {
"type": "string",
"title": "Password"
},
"use_tls": {
"type": "boolean",
"title": "Use tls"
},
"use_ssl": {
"type": "boolean",
"title": "Use ssl"
},
"timeout": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Timeout"
},
"from_address": {
"type": "string",
"format": "email",
"maxLength": 254,
"minLength": 1,
"title": "From address"
},
"token_expiry": {
"type": "string",
"minLength": 1,
"title": "Token expiry",
"description": "Time the token sent is valid (Format: hours=3,minutes=17,seconds=300)."
},
"subject": {
"type": "string",
"minLength": 1,
"title": "Subject"
},
"template": {
"type": "string",
"minLength": 1,
"title": "Template"
},
"activate_user_on_success": {
"type": "boolean",
"title": "Activate user on success",
"description": "Activate users upon completion of stage."
},
"recovery_max_attempts": {
"type": "integer",
"minimum": 0,
"maximum": 2147483647,
"title": "Recovery max attempts"
},
"recovery_cache_timeout": {
"type": "string",
"minLength": 1,
"title": "Recovery cache timeout",
"description": "The time window used to count recent account recovery attempts. If the number of attempts exceed recovery_max_attempts within this period, further attempts will be rate-limited. (Format: hours=1;minutes=2;seconds=3)."
}
},
"required": []
},
"model_authentik_stages_email.emailstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_emailstage",
"change_emailstage",
"delete_emailstage",
"view_emailstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_identification.identificationstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"user_fields": {
"type": "array",
"items": {
"type": "string",
"enum": [
"email",
"username",
"upn"
],
"title": "User fields"
},
"title": "User fields",
"description": "Fields of the user object to match against. (Hold shift to select multiple options)"
},
"password_stage": {
"type": "string",
"format": "uuid",
"title": "Password stage",
"description": "When set, shows a password field, instead of showing the password field as separate step."
},
"captcha_stage": {
"type": "string",
"format": "uuid",
"title": "Captcha stage",
"description": "When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage."
},
"case_insensitive_matching": {
"type": "boolean",
"title": "Case insensitive matching",
"description": "When enabled, user fields are matched regardless of their casing."
},
"show_matched_user": {
"type": "boolean",
"title": "Show matched user",
"description": "When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown"
},
"enrollment_flow": {
"type": "string",
"format": "uuid",
"title": "Enrollment flow",
"description": "Optional enrollment flow, which is linked at the bottom of the page."
},
"recovery_flow": {
"type": "string",
"format": "uuid",
"title": "Recovery flow",
"description": "Optional recovery flow, which is linked at the bottom of the page."
},
"passwordless_flow": {
"type": "string",
"format": "uuid",
"title": "Passwordless flow",
"description": "Optional passwordless flow, which is linked at the bottom of the page."
},
"sources": {
"type": "array",
"items": {
"type": "string",
"format": "uuid",
"description": "Specify which sources should be shown."
},
"title": "Sources",
"description": "Specify which sources should be shown."
},
"show_source_labels": {
"type": "boolean",
"title": "Show source labels"
},
"pretend_user_exists": {
"type": "boolean",
"title": "Pretend user exists",
"description": "When enabled, the stage will succeed and continue even when incorrect user info is entered."
},
"enable_remember_me": {
"type": "boolean",
"title": "Enable remember me",
"description": "Show the user the 'Remember me on this device' toggle, allowing repeat users to skip straight to entering their password."
},
"webauthn_stage": {
"type": "string",
"format": "uuid",
"title": "Webauthn stage",
"description": "When set, and conditional WebAuthn is available, allow the user to use their passkey as a first factor."
}
},
"required": []
},
"model_authentik_stages_identification.identificationstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_identificationstage",
"change_identificationstage",
"delete_identificationstage",
"view_identificationstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_invitation.invitation": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"expires": {
"type": [
"string",
"null"
],
"format": "date-time",
"title": "Expires"
},
"fixed_data": {
"type": "object",
"additionalProperties": true,
"title": "Fixed data"
},
"created_by": {
"type": "integer",
"title": "Created by"
},
"single_use": {
"type": "boolean",
"title": "Single use",
"description": "When enabled, the invitation will be deleted after usage."
},
"flow": {
"type": "string",
"format": "uuid",
"title": "Flow",
"description": "When set, only the configured flow can use this invitation."
}
},
"required": []
},
"model_authentik_stages_invitation.invitation_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_invitation",
"change_invitation",
"delete_invitation",
"view_invitation"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_invitation.invitationstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"continue_flow_without_invitation": {
"type": "boolean",
"title": "Continue flow without invitation",
"description": "If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given."
}
},
"required": []
},
"model_authentik_stages_invitation.invitationstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_invitationstage",
"change_invitationstage",
"delete_invitationstage",
"view_invitationstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_password.passwordstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"backends": {
"type": "array",
"items": {
"type": "string",
"enum": [
"authentik.core.auth.InbuiltBackend",
"authentik.core.auth.TokenBackend",
"authentik.sources.ldap.auth.LDAPBackend",
"authentik.sources.kerberos.auth.KerberosBackend"
],
"title": "Backends"
},
"title": "Backends",
"description": "Selection of backends to test the password against."
},
"configure_flow": {
"type": "string",
"format": "uuid",
"title": "Configure flow",
"description": "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
},
"failed_attempts_before_cancel": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Failed attempts before cancel",
"description": "How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage."
},
"allow_show_password": {
"type": "boolean",
"title": "Allow show password",
"description": "When enabled, provides a 'show password' button with the password input field."
}
},
"required": []
},
"model_authentik_stages_password.passwordstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_passwordstage",
"change_passwordstage",
"delete_passwordstage",
"view_passwordstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_prompt.prompt": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"field_key": {
"type": "string",
"minLength": 1,
"title": "Field key",
"description": "Name of the form field, also used to store the value"
},
"label": {
"type": "string",
"minLength": 1,
"title": "Label"
},
"type": {
"type": "string",
"enum": [
"text",
"text_area",
"text_read_only",
"text_area_read_only",
"username",
"email",
"password",
"number",
"checkbox",
"radio-button-group",
"dropdown",
"date",
"date-time",
"file",
"separator",
"hidden",
"static",
"alert_info",
"alert_warning",
"alert_danger",
"ak-locale"
],
"title": "Type"
},
"required": {
"type": "boolean",
"title": "Required"
},
"placeholder": {
"type": "string",
"title": "Placeholder",
"description": "Optionally provide a short hint that describes the expected input value. When creating a fixed choice field, enable interpreting as expression and return a list to return multiple choices."
},
"initial_value": {
"type": "string",
"title": "Initial value",
"description": "Optionally pre-fill the input with an initial value. When creating a fixed choice field, enable interpreting as expression and return a list to return multiple default choices."
},
"order": {
"type": "integer",
"minimum": -2147483648,
"maximum": 2147483647,
"title": "Order"
},
"sub_text": {
"type": "string",
"title": "Sub text"
},
"placeholder_expression": {
"type": "boolean",
"title": "Placeholder expression"
},
"initial_value_expression": {
"type": "boolean",
"title": "Initial value expression"
}
},
"required": []
},
"model_authentik_stages_prompt.prompt_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_prompt",
"change_prompt",
"delete_prompt",
"view_prompt"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_prompt.promptstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"fields": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Fields"
},
"validation_policies": {
"type": "array",
"items": {
"type": "string",
"format": "uuid"
},
"title": "Validation policies"
}
},
"required": []
},
"model_authentik_stages_prompt.promptstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_promptstage",
"change_promptstage",
"delete_promptstage",
"view_promptstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_redirect.redirectstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"keep_context": {
"type": "boolean",
"title": "Keep context"
},
"mode": {
"type": "string",
"enum": [
"static",
"flow"
],
"title": "Mode"
},
"target_static": {
"type": "string",
"title": "Target static"
},
"target_flow": {
"type": "string",
"format": "uuid",
"title": "Target flow"
}
},
"required": []
},
"model_authentik_stages_redirect.redirectstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_redirectstage",
"change_redirectstage",
"delete_redirectstage",
"view_redirectstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_user_delete.userdeletestage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
}
},
"required": []
},
"model_authentik_stages_user_delete.userdeletestage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userdeletestage",
"change_userdeletestage",
"delete_userdeletestage",
"view_userdeletestage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_user_login.userloginstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"session_duration": {
"type": "string",
"minLength": 1,
"title": "Session duration",
"description": "Determines how long a session lasts. Default of 0 means that the sessions lasts until the browser is closed. (Format: hours=-1;minutes=-2;seconds=-3)"
},
"terminate_other_sessions": {
"type": "boolean",
"title": "Terminate other sessions",
"description": "Terminate all other sessions of the user logging in."
},
"remember_me_offset": {
"type": "string",
"minLength": 1,
"title": "Remember me offset",
"description": "Offset the session will be extended by when the user picks the remember me option. Default of 0 means that the remember me option will not be shown. (Format: hours=-1;minutes=-2;seconds=-3)"
},
"network_binding": {
"type": "string",
"enum": [
"no_binding",
"bind_asn",
"bind_asn_network",
"bind_asn_network_ip"
],
"title": "Network binding",
"description": "Bind sessions created by this stage to the configured network"
},
"geoip_binding": {
"type": "string",
"enum": [
"no_binding",
"bind_continent",
"bind_continent_country",
"bind_continent_country_city"
],
"title": "Geoip binding",
"description": "Bind sessions created by this stage to the configured GeoIP location"
},
"remember_device": {
"type": "string",
"minLength": 1,
"title": "Remember device",
"description": "When set to a non-zero value, authentik will save a cookie with a longer expiry,to remember the device the user is logging in from. (Format: hours=-1;minutes=-2;seconds=-3)"
}
},
"required": []
},
"model_authentik_stages_user_login.userloginstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userloginstage",
"change_userloginstage",
"delete_userloginstage",
"view_userloginstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_user_logout.userlogoutstage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
}
},
"required": []
},
"model_authentik_stages_user_logout.userlogoutstage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userlogoutstage",
"change_userlogoutstage",
"delete_userlogoutstage",
"view_userlogoutstage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_stages_user_write.userwritestage": {
"type": "object",
"properties": {
"name": {
"type": "string",
"minLength": 1,
"title": "Name"
},
"user_creation_mode": {
"type": "string",
"enum": [
"never_create",
"create_when_required",
"always_create"
],
"title": "User creation mode"
},
"create_users_as_inactive": {
"type": "boolean",
"title": "Create users as inactive",
"description": "When set, newly created users are inactive and cannot login."
},
"create_users_group": {
"type": "string",
"format": "uuid",
"title": "Create users group",
"description": "Optionally add newly created users to this group."
},
"user_type": {
"type": "string",
"enum": [
"internal",
"external",
"service_account",
"internal_service_account"
],
"title": "User type"
},
"user_path_template": {
"type": "string",
"title": "User path template"
}
},
"required": []
},
"model_authentik_stages_user_write.userwritestage_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_userwritestage",
"change_userwritestage",
"delete_userwritestage",
"view_userwritestage"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_tasks_schedules.schedule": {
"type": "object",
"properties": {
"rel_obj_id": {
"type": [
"string",
"null"
],
"minLength": 1,
"title": "Rel obj id"
},
"crontab": {
"type": "string",
"minLength": 1,
"title": "Crontab",
"description": "When to schedule tasks"
},
"paused": {
"type": "boolean",
"title": "Paused",
"description": "Pause this schedule"
}
},
"required": []
},
"model_authentik_tasks_schedules.schedule_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"change_schedule",
"send_schedule",
"view_schedule"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
},
"model_authentik_tenants.domain": {
"type": "object",
"properties": {
"domain": {
"type": "string",
"maxLength": 253,
"minLength": 1,
"title": "Domain"
},
"is_primary": {
"type": "boolean",
"title": "Is primary"
},
"tenant": {
"type": "string",
"format": "uuid",
"title": "Tenant"
}
},
"required": []
},
"model_authentik_tenants.domain_permissions": {
"type": "array",
"items": {
"type": "object",
"required": [
"permission"
],
"properties": {
"permission": {
"type": "string",
"enum": [
"add_domain",
"change_domain",
"delete_domain",
"view_domain"
]
},
"user": {
"type": "integer"
},
"role": {
"type": "string"
}
}
}
}
}
}
Reference in New Issue View Git Blame Copy Permalink