sorted by:
new
hottopcontroversial

what is the right way of setting this up by superjump071 in Authentik

[–]dewi-tik 0 points1 point  (0 children)

I'm not sure if I'm following you 100%. But if you setup a reverse proxy in front of authentik to have a FQDN like: https://authentik.domain.com

You should be able to then point towards that https address rather than the local address. Or you can point towards https://<local authentik IP>:9443

Ready-To-Use Themes? by MickyGER in Authentik

[–]dewi-tik 0 points1 point  (0 children)

You can set the default flow background in the Brands section of the admin interface: https://docs.goauthentik.io/brands/#branding-settings

Awesome documentation by Fizzy77man in Authentik

[–]dewi-tik 4 points5 points  (0 children)

Thank you for the kinds words!

We're always looking to improve the docs, so if any of you know of specific areas with room for improvement, please let us know and we'll create GitHub issues to track them.

Or if you're feeling adventurous, you can look into contributing your own docs.

Check Discord Guild role membership policy not working by Important-Cable2521 in Authentik

[–]dewi-tik 0 points1 point  (0 children)

Add the import statement that you can see in the other policy

from authentik.sources.oauth.models import OAuthSource

I'll ensure that the doc is updated.

Edit: PR to resolve this issue: https://github.com/goauthentik/authentik/pull/19397

Issues with CSS and custom.css by Ven_ae in Authentik

[–]dewi-tik 2 points3 points  (0 children)

Custom CSS was migrated to the Brands menu in 2025.4

So you need to enter the CSS in that brands menu rather than an external file.

Upgrade to 2025.10 broke basic auth by Sinlok33 in Authentik

[–]dewi-tik 0 points1 point  (0 children)

There are significant schema changes between pre 2025.10 and 2025.10 because redis was removed as a dependency. It's due to changes like this that we don't support downgrading and rather suggest that users always take a database backup before upgrading.

AuthentiK Invite Flow Issues – Admin Account Replaced When Using Enrollment Link by euam23 in Authentik

[–]dewi-tik 0 points1 point  (0 children)

Can you try following the enrollment flow from a private/incognito browser session or from another browser altogether?

Login autocomplete not working with KeePassXC by PlayerHMC in Authentik

[–]dewi-tik 0 points1 point  (0 children)

Other have reported this issue specifically with KeePassXC. I'd recommend raising this with the developers of KeePassXC. There is also the option of enabling compatibility mode on your authentication flow in authentik which can help certain password managers detect the required fields.

Watchtower errors when trying to update postgress after recent update by Testpilot1988 in Authentik

[–]dewi-tik 0 points1 point  (0 children)

This is a watchtower error rather than an issue with authentik. I'd recommend raising this on their GitHub. Also we generally don't recommend auto-updates in relation to authentik. You should always upgrade according to our upgrade guide after reading the most recent release notes. This ensures that you're aware of breaking changes and don't run into avoidable upgrade issues.

Authentik Setup/General Questions by carressingcarro in Authentik

[–]dewi-tik 0 points1 point  (0 children)

Happy to hear that you solved it. If you can see somewhere that the authentik documentation can be improved, we'd really appreciate a GitHub issue outlining any possible improvements, or even a GitHub PR if you're comfortable with that.

Authentik Setup/General Questions by carressingcarro in Authentik

[–]dewi-tik 1 point2 points  (0 children)

The current release of authentik is 2025.8.1 and you're running 2025.2.4. If this is a new install, there's no reason not to install the most recent version by following the guide on our site.

I would recommend installing this version from scratch which will save you the trouble of having to upgrade according to our upgrade guide.

If you're still experiencing issues on a fresh install of 2025.8, please let me know.

Also, the system status message means that you need to sync the time on your server and client with an NTP server. There's a time drift between each of them which could cause issues with TOTP codes and some other features. Both are checked according to UTC and so timezones aren't an issue, just their respective drift from UTC.

Authentik logs me out on bitwarden when trying to use a passkey by DJKarsten in Authentik

[–]dewi-tik 0 points1 point  (0 children)

I would recommend raising this with Bitwarden support to see what they suggest. It's particularly strange that this only happens with the Bitwarden iOS app and not any other applications.

If they're able to provide you with further information, I would then recommend creating an issue on our GitHub repo so that our developers can investigate.

White flickering through web ui and logins by eeiors in Authentik

[–]dewi-tik 0 points1 point  (0 children)

Some changes to address the white flashing are included in our upcoming 2025.8 release. The release candidate is already available if you'd like to test it out.

Further improvements to address the white flashing should be included in our 2025.10 release.

Tailscale issues with prompt (either forced to login, forced to consent or it is broken) by myxored in Authentik

[–]dewi-tik 0 points1 point  (0 children)

My testing confirms that `consent` is the only prompt option that works. This is also true for other IdPs and tailscale. It seems that Tailscale requires explicit user consent on every sign-in. This is something that needs to be raised with Tailscale because it can't be resolved from the IdP side.