authentik version/2026.8.0 released on 18-08-2026
authentik version/2026.8.0 is out now. Operators and administrators benefit from documentation and UI text updates, identity-provider and session/logout fixes, and corrected proxy/agent redirect behaviour.
See the project documentation and the GitHub release notes for full details and upgrade guidance.
What’s in this release
- Documentation and UI text updates: new docs for object attributes, agents, access requests and OBO, proxy docs and the 2026.8 release notes; UI label capitalization aligned with the docs.
- Identity provider and session/logout fixes: OAuth2 DCR csrf_exempt fix, correct token-exchange provider lookup, SAML sources gain an audience-override field, SCIM group membership removal fixes, RADIUS allows an empty message authenticator, and deactivating a user now deletes all user sessions (with OAuth2 back-channel logout sent on deactivation).
- Outposts, agents, proxy and frontend fixes: post-authentication redirects now include the query string, proxy provider nginx redirects preserve host and port, various web/admin layout and form-serialization fixes, and dompurify bumped to 3.4.13.
Upgrade notes
- Tasks now aggregate status from logs instead of the legacy field — consult the 2026.8 release notes and updated docs for examples and behaviour notes to understand the change.
- Operators should verify client DCR behaviour, logout expectations and SCIM membership syncs after upgrading; no specific rollback instructions are provided in the release notes, so follow your standard rollback procedure if needed.
Share any comments on your upgrade experience and any unexpected behaviour you observe — it helps others and the project maintainers.
