authentik version/2026.5.4 released on 08-07-2026
authentik version/2026.5.4 is out now. It delivers front-end and user-facing bug fixes, improvements to SCIM/LDAP and provider discovery/sync, reliability and performance fixes for background tasks and caching, plus documentation and dependency updates.
Full details are available on the project documentation and the full changelog on GitHub: release notes and full changelog.
What’s in this release
- Web UI and UX fixes: correct default paths in the user list, resolve stale flow locales and unsynchronised locale selector options, restore the passkey autofill dropdown on identification, fix stale clipboard tokens and untranslated labels, improve focus and checkbox outlines, and clean up the Invitation Wizard and form validation.
- SCIM, LDAP and provider discovery/sync: additional SCIM provider documentation and clarified SCIM source trust model and filtering, allow failures and handle users with no email during SCIM discovery, ensure outgoing sync providers declare can_discover, optimise LDAP connection reuse and endpoints, and remove incorrect LDAP validation for code authenticator extraction.
- Background tasks, caching and DB performance: dramatiq-postgres broker now purges at loop start and fixes a race causing repeated completed tasks, add pre_delete handling for TasksModel to avoid OOM, django-postgres-cache changes to reduce warnings and expensive queries, skip unnecessary cache invalidation on User.last_login, and select_related optimisations for hot paths.
Upgrade notes
- Behaviour change: the WebAuthn authenticator now has prevent_duplicate_devices disabled by default — review your authenticator settings if you rely on that protection.
- Dependency bumps (for example pyo3 and pydantic) are included; if you need to roll back, revert to version/2026.5.3 using the GitHub compare and your usual deployment procedures: compare.
Share any feedback or issues via the project’s GitHub so the team can see how these fixes behave in real deployments.
