Issues

• Token exchange delegation: create non-expiring actors without enterprise Agents

  enhancementtriage
  Feature

  goauthentik/authentik#27386 · Filter by author andrein opened on Oct 30, 2026

• Support for OAuth Profile for Open Public Clients

  enhancementstatus/reviewing
  Feature

  goauthentik/authentik#27352 · Filter by author violoncelloCH opened on Oct 29, 2026
  

• iOS TOTP QuickType AutoFill causes duplicate authenticator validation requests

  bug
  Bug

  goauthentik/authentik#27335 · Filter by author jayo60013 opened on Oct 29, 2026
  4

• Rebuild 2026.8.x images for libbrotli1 CVE-2026-111497 (flagged by scanners, likely not reachable)

  bugtriage
  Bug

  goauthentik/authentik#27318 · Filter by author bernhardkelm opened on Oct 28, 2026
  

• Add RFC 9207 issuer identification to OAuth2 authorization responses

  area:backend
  Feature

  goauthentik/authentik#27316 · Filter by author melizeche opened on Oct 28, 2026
  

• Adding multiple existing users to a group at once only adds a single user

  bug/confirmed
  Bug

  goauthentik/authentik#27277 · Filter by author johnkeates opened on Oct 27, 2026 · Release 2026.11.0
  1

  

• Add support for federated Libravatar avatars

  enhancementstatus/reviewing
  Feature

  goauthentik/authentik#27259 · Filter by author ApolloFops opened on Oct 27, 2026 · Future release

• Include token in email OTP subject

  enhancement/confirmed
  Feature

  goauthentik/authentik#27257 · Filter by author MarinBons opened on Oct 26, 2026 · Release 2027.2.0
  2

  

• Authenticator validation code field: autofocus on load suppresses iOS password-manager suggestion for the one-time code

  goauthentik/authentik#27201 · Filter by author maksim-101 opened on Oct 26, 2026

• Error after approving DUO push during SAML sign-in via in-app WebView

  bugstatus/reviewing
  Bug

  goauthentik/authentik#27194 · Filter by author runleveldev opened on Oct 26, 2026
  1

  

• Improve time handling in event viewer logs

  enhancement/confirmed
  Feature

  goauthentik/authentik#27188 · Filter by author dewi-tik opened on Oct 26, 2026

• access requests - allow requesting non-finite access

  enhancement/confirmed
  Feature

  goauthentik/authentik#27187 · Filter by author dewi-tik opened on Oct 26, 2026 · Release 2026.11.0

• access requests - allow approving access request for yourself

  enhancement/confirmed
  Feature

  goauthentik/authentik#27186 · Filter by author dewi-tik opened on Oct 26, 2026 · Release 2026.11.0

• authentik agent - Document using UI to create profile

  enhancement/confirmed
  Task

  goauthentik/authentik#27184 · Filter by author dewi-tik opened on Oct 26, 2026
  

• Request sent right after OAuth2 token exchange gets no response for ~2 s (userinfo times out), 2026.8.5 behind NPM

  bug/confirmed
  Bug

  goauthentik/authentik#27181 · Filter by author BadWolf97 opened on Oct 26, 2026
  

• Ship Swedish (sv-SE) locale

  enhancement/confirmed
  Feature

  goauthentik/authentik#27180 · Filter by author hej-helo opened on Oct 26, 2026 · Release 2026.11.0
  1

  

• Hardware OTP Token Management & Restrictive Self-Service Policies

  enhancement/confirmed
  Feature

  goauthentik/authentik#27176 · Filter by author cosmo222 opened on Oct 26, 2026 · Release 2027.2.0
  1

  

• RAC sessions should respect access request lifetimes

  enhancementtriage
  Feature

  goauthentik/authentik#27149 · Filter by author KingHenry6666 opened on Oct 25, 2026
  

• [Feature Request] Support custom WASM asset URLs for Cap CAPTCHA

  enhancementstatus/reviewing
  Feature

  goauthentik/authentik#27140 · Filter by author yimjr opened on Oct 23, 2026 · Future release
  1

  

• SSO/SAML Support for user switch

  bugtriage
  Bug

  goauthentik/authentik#27138 · Filter by author leoleoasd opened on Oct 23, 2026
  1

  

• proxy_set_defaults reconciler locks all ProxyProviders for minutes on every process start, blocking /application/o/token/

  bug/confirmed
  Bug

  goauthentik/authentik#27137 · Filter by author renato-nmoraes opened on Oct 23, 2026
  1

• Placholder aren't "recognized"

  bug/confirmed
  Bug

  goauthentik/authentik#27134 · Filter by author LorickLaBrique opened on Oct 23, 2026 · Release 2026.11.0
  1

  

• Login resets to identification stage: session-rotation races flow executor's /ws/client/ reconnect

  goauthentik/authentik#27122 · Filter by author karlocizma opened on Oct 22, 2026

• Flow executor: renderer process crashes when a message is rendered (2026.8.3)

  goauthentik/authentik#27085 · Filter by author carlosjgp opened on Oct 21, 2026
  

• remove/replace askama dependency

  Task

  goauthentik/authentik#27055 · Filter by author emilburzo opened on Oct 20, 2026