authentik version/2026.8.2 released on 09-09-2026
authentik version/2026.8.2 is out now. It delivers security and token-handling fixes, more robust identity provider integrations (SAML, OIDC, LDAP) and deployment and admin-side reliability improvements that reduce the attack surface and improve token reliability.
Full details and the complete changelog are available on the official release notes: https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202682
What’s in this release
- Security and token-handling fixes: patches for token issuance and revocation flows, session and cookie handling improvements, CSRF and session fixation mitigations, and backend hardening.
- Identity provider integrations: fixes for SAML assertion handling, OIDC discovery and callback edge cases, and improved LDAP/group sync reliability for more stable federated logins.
- Deployment and operator reliability: operator/Helm chart adjustments, migration and database reliability fixes, container readiness/liveness tweaks and configuration handling for clustered environments.
- Admin UI, API and observability: stability and validation fixes in the management UI, clearer error reporting and audit logging, plus minor UX and observability tweaks to aid troubleshooting.
Upgrade notes
- No explicit breaking changes are listed in the release notes; check the official release notes for any migration instructions: https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202682
- If a rollback becomes necessary, restore database backups and revert operator/Helm configuration as appropriate before downgrading.
Share any notes on your upgrade experience — particularly around provider interoperability or token/session behaviour — so others can benefit.
