Jens L.

interesting, can you check the server container logs to see what the unknown error actually is? I'm assuming it's failing with something email related and just continuing

The original error seems to indeed happen due to a leading space in the path. The reason for the docker socket is documented here https://goauthentik.io/docs/outposts/integrations/docker (and yes I agree it's...

@agrimpelhuber > 1. Make the hard-coded parts of an authentication workflow just as customizable as flows (on tenant level?): Background etc. There isn't really much hardcoded during authentication; and while...

The main reason why this is not configurable currently is that that the outposts, the web interface and the terraform provider all get their sentry config from the main server,...

But looking into it, GitLab has a configurable Sentry DSN and that just exposes it everywhere so I guess that's not an issue; I just don't want to make assumptions...

Cookies can be added to proxy applications, however not directly like this. The property mappings are python and run in the core server, while the outposts are go and don't...

The actual lookups shouldnt be too slow when using the cached searcher (configurable in the provder), but binds currently do take a couple seconds. This is because the LDAP Bind...

just FYI this would've also been broken with the old system of allowing "*" as redirect_uri

There's a difference between Integrated Windows auth and Kerberos, the former mostly "requires" an IIS server, the latter doesn't. I have played around with kerberos and it does _work_, except...

Starting with 2022.7 if a redirect URL can't be parsed as regex it's compared directly as it was in previous versions, https://github.com/goauthentik/authentik/commit/0cad56ec73044d003b0a88997d337d97747d5918