📄️ Duo authenticator setup stage
This stage configures a Duo authenticator. To get the API Credentials for this stage, open your Duo Admin dashboard.
📄️ SMS authenticator setup stage
This stage configures an SMS-based authenticator using either Twilio, or a generic HTTP endpoint.
📄️ Static authenticator setup stage
This stage configures static Tokens, which can be used as a backup method to time-based OTP tokens.
📄️ TOTP authenticator setup stage
This stage configures a time-based OTP Device, such as Google Authenticator or Authy.
📄️ Authenticator Validation Stage
This stage validates an already configured Authenticator Device. This device has to be configured using any of the other authenticator stages:
📄️ WebAuthn authenticator setup stage
This stage configures a WebAuthn-based Authenticator. This can either be a browser, biometrics or a Security stick like a YubiKey.
📄️ Captcha stage
This stage adds a form of verification using Google's ReCaptcha.
📄️ Deny stage
This stage stops the execution of a flow. This can be used to conditionally deny users access to a flow,
📄️ Email stage
This stage can be used for email verification. authentik's background worker will send an email using the specified connection details. When an email can't be delivered, delivery is automatically retried periodically.
📄️ Identification stage
This stage provides a ready-to-go form for users to identify themselves.
📄️ Invitation stage
This stage can be used to invite users. You can use this to enroll users with preset values.
📄️ Password stage
This is a generic password prompt which authenticates the current pending_user. This stage allows the selection of the source the user is authenticated against.
📄️ Prompt stage
This stage is used to show the user arbitrary prompts.
📄️ User delete stage
This stage deletes the pending_user without any confirmation. You have to make sure the user is aware of this.
📄️ User login stage
This stage attaches a currently pending user to the current session.
📄️ User logout stage
Opposite stage of User Login Stages. It removes the user from the current session.
📄️ User write stage
This stages writes data from the current context to the current pending user. If no user is pending, a new one is created.