authentik version/2026.8.0 released on 18-08-2026
authentik version/2026.8.0 is out now. Operators and integrators will find clearer documentation and a bundle of fixes across providers, sources, the web UI and core that improve interoperability and operator guidance.
See the project release notes and updated documentation on the authentik website or GitHub for full details and upgrade guidance.
What’s in this release
- Documentation and guidance: new docs for object attributes, agents, access requests and OBO; updated source field labels and a UI label-capitalisation style rule; fixes for proxy provider nginx redirects and the unauthenticated proxy path regex; deprecated PostgreSQL options are now marked.
- Providers, sources and protocols: OAuth2 fixes (DCR csrf_exempt, correct token-exchange provider lookup, back-channel logout on user deactivation), SCIM group-membership removals fixed, RADIUS allowance for empty message authenticators, SAML sources gain an audience-override, Telegram source restores next= redirect, and agent connector now passes login_hint; proxy/outpost redirects now preserve host/port and include query strings.
- Web UI, admin and core fixes: restored preview banner for object attributes, layout and nested-CSS fixes in compatibility mode, correct prioritisation for dotted input-field serialization, patched agent request-access URL behaviour, dompurify bumped, and task status aggregation changed to use logs with related stage/task fixes.
Upgrade notes
- PostgreSQL: deprecated options are now marked in the docs — review the database settings and the updated documentation before upgrading.
- Task status behaviour: task status is now aggregated from logs rather than the legacy field; consult the 2026.8 release notes for how this affects monitoring and status reporting.
Share any comments or experiences with the upgrade and configuration changes so other operators can learn from practical outcomes.
