authentik version/2026.5.0 released on 22-05-2026
authentik version/2026.5.0 is out now. Documentation and integration guides have been consolidated and updated, SAML metadata handling and compatibility have been improved, and a range of enterprise, security and web/API fixes are included.
Read the full release notes and changelog on the project’s GitHub and the official documentation site for upgrade instructions and detailed changes.
What’s in this release
- Consolidated website and docs updates: revised release notes, new screenshots, invitation and binding wizard documentation, updated integration guides to match the auto-generated issuer, values.yaml snippets updated to include global, and assorted typo/style fixes plus added integration entries (for example Absorb LMS) and a CVE email-link fix.
- SAML and integration improvements: properly import audience from metadata, add SLS to the SAML overview, handle XML declarations in the unified endpoint, update SAML docs/endpoints and sources to include force-authenticate details, and remove the sp binding field from integrations.
- Enterprise, security and infrastructure changes: SCIM provider support for interactive OAuth2, mtls stage fixes (including freezing time for expired certificate handling and adjustments for freezegun), configuration to exclude the cryptography library from freezegun, certificate typo fixes, and an upstream bump of the goauthentik/fips-python base image from 3.14.3 to 3.14.5.
Upgrade notes
- Removed sp binding field in integrations may require you to review and update integration configurations; consult the updated integration guides and release notes on the documentation site for exact steps.
- No specific rollback instructions are included in the release notes; if you must revert, consult the full changelog and compare view on GitHub: https://github.com/goauthentik/authentik/compare/version/2026.5.0-rc2…version/2026.5.0
Share your experience with the upgrade — report issues or feedback via the project’s GitHub or the documentation feedback channels so maintainers can follow up.
