authentik version/2026.5.6 released on 22-07-2026
authentik version/2026.5.6 is out now. It fixes several SCIM provider and connector issues, restores intended flow and UI behaviour, tightens dependencies and adds an in-process per‑IP rate throttle — improving SCIM compliance, connector reliability and the admin/end-user experience.
See the release notes on the project documentation site (https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202656) or the full changelog on GitHub (https://github.com/goauthentik/authentik/compare/version/2026.5.5…version/2026.5.6) for complete details.
What’s in this release
- SCIM provider fixes: group PATCH payloads now exclude read-only id fields, non-schema-compliant member removals are fixed, and null-members adds are handled correctly.
- Connector improvements: the connectors/fleet endpoint now passes populate_policies correctly, and the agent connector’s device endpoint authentication schema has been corrected.
- Web, UI and flow fixes: the locale-driven flow re-request behaviour was reverted in the FlowExecutor; admin app view errors when lacking events permissions are fixed; hCaptcha UI height corrected; and form-friendly error messages were added for uniqueness constraint violations.
Upgrade notes
- Container images no longer include curl and runit. If deployment tooling or scripts depend on those binaries, add them to derived images or adjust automation accordingly.
- If you need to roll back, revert to version/2026.5.5; consult the full changelog on GitHub for the relevant commits and guidance (https://github.com/goauthentik/authentik/compare/version/2026.5.5…version/2026.5.6).
Share any comments or issues on the project’s GitHub issue tracker or community channels so others can benefit from your experience.
