Release 2026.11.0: Required

Issues

• GeoIP replacement from MaxMind

  enhancement/confirmed
  Task

  goauthentik/authentik#23550 · Filter by author dewi-tik opened on Jun 30, 2026 · Release 2026.11.0: Required
  1

• web: triage and consolidate form input/label patterns

  a11yarea:frontendenhancement
  Task

  goauthentik/authentik#22389 · Filter by author GirlBossRush opened on May 15, 2026 · Release 2026.11.0: Required
  2

  

• Expiring users/offboarding users (ent)

  enhancement/confirmedenterprise
  Feature

  goauthentik/authentik#22823 · Filter by author BeryJu opened on Jun 3, 2026 · Release 2026.11.0: Required
  3

  

• core: allow creating tokens for other user without superuser

  area:backend
  Unread
  goauthentik/authentik#16224·BeryJu opened Aug 18, 2025 · Updated Jul 29, 2026
  9

• authentik_device cookie not set when "Stay signed in" is configured, causing known_device to always be False

  bug/confirmedbug
  Bug

  goauthentik/authentik#22466 · Filter by author julian-piehl opened on May 19, 2026 · Release 2026.11.0: Required
  1

• Bug: Runtime values are used as structured log event names or field keys

  bug/confirmedbuggood first issue
  Bug

  goauthentik/authentik#22196 · Filter by author angrychow opened on May 10, 2026 · Release 2026.11.0: Required
  2

• RDP via RAC (Firefox only) opens context menu on every click

  bug/confirmedbug
  Bug

  goauthentik/authentik#13664 · Filter by author spanguel opened on Mar 25, 2025 · Release 2026.11.0: Required
  16

  

• Support configurable WebAuthn expected origins (native Android app support via android:apk-key-hash)

  enhancement/confirmed
  Feature

  goauthentik/authentik#24791 · Filter by author dewi-tik opened on Aug 5, 2026 · Release 2026.11.0: Required

• Show previously configured NameID and AuthnContextClassRef parameters for SAML

  Unread
  goauthentik/authentik#20440·bitpavel-l25 opened Feb 20, 2026 · Updated Aug 6, 2026
  5

  

• core: honor expiry date for API tokens

  Unread
  goauthentik/authentik#23901·sebastian-mora opened Jul 10, 2026 · Updated Sep 1, 2026
  6

• enterprise: add required actions for users

  area:backend
  Unread
  goauthentik/authentik#24846·dominic-r opened Aug 6, 2026 · Updated Oct 10, 2026·1/4
  17

  

• website/docs: document required actions

  area:docs
  Unread
  goauthentik/authentik#24847·dominic-r opened Aug 6, 2026 · Updated Oct 10, 2026·2/4
  17

  

• website/docs: add required actions to the 2026.11 release notes

  area:docs
  Unread
  goauthentik/authentik#24848·dominic-r opened Aug 6, 2026 · Updated Oct 10, 2026·3/4
  11

  

• web/admin: add a required actions card to the user page

  area:frontend
  Unread
  goauthentik/authentik#24850·dominic-r opened Aug 6, 2026 · Updated Oct 10, 2026·4/4
  13

  

• Introduce a "Secret" object

  enhancement/confirmed
  Feature

  goauthentik/authentik#24961 · Filter by author emilburzo opened on Aug 10, 2026 · Release 2026.11.0: Required
  1

  

• sources/scim: add managed_objects_only option for stricter provisioning

  Unread
  goauthentik/authentik#22536·sreelim opened May 21, 2026 · Updated Aug 13, 2026
  3

  

• SCIM should sync on bind, unbind, and group-membership change

  area:backendbug/confirmedbugenhancement/confirmed
  goauthentik/authentik#25291 · Filter by author dominic-r opened on Aug 19, 2026 · Release 2026.11.0: Required

• Force password change at next logon, including the AD flag 773 case

  enhancement/confirmedenhancement
  goauthentik/authentik#25310 · Filter by author dominic-r opened on Aug 19, 2026 · Release 2026.11.0: Required

• web/flow: Continuous Login Locks

  backport/version-2026.8
  Unread
  goauthentik/authentik#25692·GirlBossRush opened Sep 3, 2026 · Updated Sep 10, 2026
  5

  

• website/docs: improve radius provider docs

  area:docs
  Unread
  goauthentik/authentik#25976·dewi-tik opened Sep 9, 2026 · Updated Sep 21, 2026
  8

  

• crypto: add managed secrets API

  area:backend
  Unread
  goauthentik/authentik#25415·dominic-r opened Aug 23, 2026 · Updated Oct 10, 2026·1/12
  29

  

• providers/oauth2: use managed secrets for OAuth and proxy providers

  area:backend
  Unread
  goauthentik/authentik#26095·dominic-r opened Sep 14, 2026 · Updated Oct 10, 2026·2/12
  22

  

• sources: use managed secrets for OAuth, Plex and Telegram

  area:backend
  Unread
  goauthentik/authentik#26096·dominic-r opened Sep 14, 2026 · Updated Oct 10, 2026·4/12
  7

  

• outposts/events: use managed service credentials

  area:backend
  Unread
  goauthentik/authentik#26097·dominic-r opened Sep 14, 2026 · Updated Oct 10, 2026·8/12
  7

  

• website/docs: document managed credentials and manual rotation

  area:docs
  Unread
  goauthentik/authentik#26098·dominic-r opened Sep 14, 2026 · Updated Oct 10, 2026·12/12
  15