Conversation
The Shibboleth guide recommends transient NameIDs without explaining that authentik creates temporary accounts. Document account creation, deletion on logout, and expiration cleanup, including deletion while a session remains active. Explain the “Delete temporary users after” setting and recommend persistent NameIDs when accounts need to survive across logins.
dominic-r
added
the
backport/version-2026.8
✅ Deploy Preview for authentik-docs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #26284 +/- ##
==========================================
+ Coverage 92.00% 94.77% +2.76%
==========================================
Files 1175 1138 -37
Lines 76288 72382 -3906
Branches 4056 0 -4056
==========================================
- Hits 70192 68603 -1589
+ Misses 6054 3779 -2275
+ Partials 42 0 -42
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. |
Playwright e2eDownload this run's HTML report, traces and server logs, then open the report: gh run download 35681887183 -D playwright-artifacts
npx playwright show-report playwright-artifacts/playwright-reportInstallation instructionsInstructions for docker-composeAdd the following block to your AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-a424129ea02d82fbf2fb0d72f9ff5cea2776b5d6
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)sAfterwards, run the upgrade commands from the latest release notes. Instructions for KubernetesAdd the following block to your authentik:
outposts:
container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
image:
repository: ghcr.io/goauthentik/dev-server
tag: gh-a424129ea02d82fbf2fb0d72f9ff5cea2776b5d6Afterwards, run the upgrade commands from the latest release notes. |
dewi-tik
left a comment
dewi-tik
left a comment
There was a problem hiding this comment.
One small optional change
|
Ugh, there is a whole thing with this and features requested for this. IDR all the details offhand but don't merge this yet please. Slight can of worms |
|
Nothing stated in the documentation is wrong, its smart to mention this, but there were oddities with how transient gets used, especially in academic circles. Just want to double check some things before talking more about it |
Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Dominic Roy <dominic@sdko.org>
|
I've marked you as a requested reviewer @PeshekDotDev Feel free to push to this PR directly/merge it when ready/block it for now. You know way more about this than me, so this is probably best |
✅ Deploy Preview for authentik-integrations ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
This branch has not been deployed
3 participants
The Shibboleth guide recommends transient NameIDs without explaining that authentik creates temporary accounts.
Document account creation, deletion on logout, and expiration cleanup, including deletion while a session remains active. Explain the “Delete temporary users after” setting and recommend persistent NameIDs when accounts need to survive across logins.