goauthentik
Federation between Authentik
Describe your question/ Hey there, I'm relative new to spend time into Authentik and SSO, Is it possible to federate between 2 Authentik instances? Under Federation I think OpenID OAuth Source would be the correct option. Both Authentik instances have ldap sources configured, too.
So could we connect the second Authentik to our instance that remote ldap users can sign in into our delegated services we want to use?
Relevant infos 2023.10.6
Screenshots
- authentik version: [2023.10.6]
- Deployment: [docker-compose]
I’m also trying to do this and got OIDC to work, but groups don’t come across.
I also tried LDAP, but can only sync users, can’t get sync to even run when sync groups is enabled.
Last thing I’m trying is SAML, it almost works, but user gets a CSRF validation failure for an unknown reason at this point or a 405 depending on if configured as redirect or post.
I am also trying to do this but when the user logs in I get an authentication failed: could not retrieve token. error，and occasionally it succeeds
Required group sync from OAuth sources will be supported with the upcoming 2024.8 release: https://docs.goauthentik.io/docs/releases/2024.8#new-features
For @tseking555 could you post the logs of the server container when this error message shows up?
setting up authentik federation via OIDC should pretty much just work out of the box, however this is also something we'll document in the future.
