September 2026 Summaries

authentik 2026.8 expands the open-source identity provider with enterprise privileged access management, delegated agent accounts for automation and AI services, browser-based account switching, scheduled user offboarding, customizable directory object attributes, and self-hosted event maps for restricted environments. The release also earns OpenID Certified status and adds substantial OAuth 2.0 and OpenID Connect capabilities, including token exchange, on-behalf-of delegation, dynamic client registration, and key-bound ID tokens. Other enhancements include nested LDAP group synchronization, expiring access bindings, PostgreSQL transaction-pooler support, Rust rewrites of the server entrypoint and proxy outpost, improved task reporting, a dashboard list view, expanded CAPTCHA support, and Microsoft 365 integration through WS-Federation. It introduces more than 40 application integration guides, while upgrade considerations include a safer interactive password-hashing command, removal of a WebAuthn duplicate-device setting, and deprecation of custom PostgreSQL connection options.