LoginSign Up
← Back to all sparks
A

authentik

INFRA · APIS
Velocity5.0

Open-source identity provider and single sign-on platform

goauthentik.io ↗

authentik patches 2026.8 and 2026.5 together, with cert updates after the eMudhra CA compromise.

identityssoopen-sourcesecurity-patchnon-human-identity
◆Current state
authentik is in maintenance mode on its release branches. 2026.8.5 fixes an endpoints MultipleObjectsReturned error, skips members already in Microsoft Entra groups during sync, stops the Agents tab flashing for unlicensed users, and bumps certificate dependencies after the eMudhra CA compromise. 2026.5.8 backports a longer list, including a consent re-grant error, websocket header handling and pool credential refresh.
◆Where it's heading
Since the 2026.8.0 Agent and Actors release, every entry has been a patch on 2026.8 or an older branch, and the team keeps three branches supported. The fixes are concentrated in sync providers, the proxy outpost and the new Agents UI.
◆Prediction
Expect further 2026.8.x patches and a 2026.11 release candidate; the entries don't yet show what the next feature release contains.

◆Recent moves

  1. 8d ago

    2026.8.5: Entra sync fix and eMudhra certificate update

    Five cherry-picked fixes on the current branch, including Entra group sync and a cert-dependency bump for the eMudhra CA compromise. Continued stabilization of 2026.8 with nothing new for users.

    View source ↗
  2. 8d ago

    2026.5.8: backported consent, websocket and cert fixes

    A backport bundle for the older 2026.5 branch, covering consent, websocket, WebAuthn and database-pool fixes plus the eMudhra cert bump. It shows authentik still supporting customers who haven't moved to 2026.8.

    View source ↗
  3. 14d ago

    Release 2026.8.4

    2026.8.4 is a wide bug-fix patch: the proxy outpost stops negotiating HTTP/2 upstream and uses HTTP/1.1 for OAuth backchannel calls, SCIM user conflicts resolve correctly and surface remote error details, and endpoint device lookup no longer fails when one identifier is missing. It is cleanup on the machine-identity surface 2026.8.0 introduced, not new capability.

    View source ↗
  4. 1mo ago

    2026.8.3: Case-insensitive file search, search autocomplete, and blueprint fix

    2026.8.3 makes admin file search case-insensitive, adds JSON field relations to search autocomplete, and corrects an employee_department typo in blueprints. Standard housekeeping with no behavioral changes for end users.

    View source ↗
  5. 1mo ago

    Release 2026.8.2

    2026.8.2 is a maintenance patch in the active release branch, continuing the rapid stabilization cadence after the major 2026.8.0 ship.

    View source ↗
  6. 1mo ago

    2026.5.7: Backport CI and endpoint auth schema fixes

    2026.5.7 backports CI path fixes and endpoint auth schema corrections to an older stable branch. The continued 2026.5 maintenance reflects enterprise deployments that aren't upgrading to 2026.8 yet.

    View source ↗