mirror of
https://github.com/goauthentik/authentik.git
synced 2026-08-30 18:51:39 -07:00
b2a50acfb4
* website/docs: show how to handle an object-shaped `groups` claim #25208 made an unusable group identifier a skip rather than an HTTP 500, and documented that entries which are not simple values are dropped. It did not say what an affected operator should do instead, so the docs stop at describing the loss. @rissson's point on #25396 is the right one: there is no standard for what a `groups` claim contains, so authentik should not guess at it, and the extension point for this is property mappings. That works today — a user property mapping runs before the identifiers are read, so it can reduce object entries itself. Documents both halves of the recipe: reducing entries to identifiers in a user property mapping, and recovering the provider's own group names in a group property mapping, which receives `group_id` alongside the claim. Both snippets were run against a source with an object-shaped claim before being written down: input: [{"id": "g1", "name": "Admins"}, {"value": "g2", "display": "Devs"}, "plain"] result: {"g1": {"name": "Admins"}, "g2": {"name": "Devs"}, "plain": {"name": "plain"}} covering the `id`/`name` and SCIM `value`/`display` shapes and leaving a plain string entry untouched. * Update index.md Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Update website/docs/users-sources/sources/property-mappings/index.md Co-authored-by: Dominic Roy <dominic@goauthentik.io> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> --------- Signed-off-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dominic Roy <dominic@goauthentik.io>
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
 |
 |
 |
 |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
When you contribute documentation, either to accompany a code change or as a standalone contribution, please be sure to follow our documentation Style Guide.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!
License
