slugstring required
Internal source name, used in URLs.
promotedboolean
When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.
authentication_flowstring uuid nullable
Flow to use when authenticating existing users.
enrollment_flowstring uuid nullable
Flow to use when enrolling new users.
user_property_mappingsstring[]
group_property_mappingsstring[]
componentstring required
Get object component so that we know how to edit the object
verbose_namestring required
Return object's verbose_name
verbose_name_pluralstring required
Return object's plural verbose_name
meta_model_namestring required
Return internal model name
policy_engine_mode'all' | 'any'
user_matching_mode'identifier' | 'email_link' | 'email_deny' | 'username_link' | 'username_deny'
managedstring nullable required
Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update.
group_matching_mode'identifier' | 'name_link' | 'name_deny'
krb5_confstring
Custom krb5.conf to use. Uses the system one by default
kadmin_type'MIT' | 'Heimdal'
sync_usersboolean
Sync users from Kerberos into authentik
sync_users_passwordboolean
When a user changes their password, sync it back to Kerberos
sync_principalstring
Principal to authenticate to kadmin for sync.
connectivityobject nullable required
Get cached source connectivity
spnego_server_namestring
Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
password_login_update_internal_passwordboolean
If enabled, the authentik-stored password will be updated upon login with the Kerberos password backend
sync_outgoing_trigger_mode'none' | 'immediate' | 'deferred_end'