Requires authentik 2022.7
Paths can be used to organize users into folders depending on which source created them or organizational structure. Paths may not start or end with a slash, but they can contain any other character as path segments. The paths are currently purely used for organization, it does not affect their permissions, group memberships, or anything else.
Optional flag, when set to false, Tokens created by the user will not expire.
Only applies when the token creation is triggered by the user with this attribute set. Additionally, the flag does not apply to superusers.
See Troubleshooting access problems, when set, the user gets a more detailed explanation of access decisions.
This field is only used by the Proxy Provider.
Some applications can be configured to create new users using header information forwarded from authentik. You can forward additional header information by adding each header
These headers will now be passed to the application when the user logs in. Most applications will need to be configured to accept these headers. Some examples of applications that can accept additional headers from an authentik Proxy Provider are Grafana and Tandoor Recipes.
The User object has the following attributes:
username: User's username.
uidUser's unique ID
nameUser's display name.
is_staffBoolean field if user is staff.
is_activeBoolean field if user is active.
date_joinedDate user joined/was created.
password_change_dateDate password was last changed.
attributesDynamic attributes, see above
group_attributes()Merged attributes of all groups the user is member of and the user's own attributes.
ak_groupsThis is a queryset of all the user's groups.
You can do additional filtering like
To get the name of all groups, you can do
[group.name for group in user.ak_groups.all()]
List all the User's group names:
for group in user.ak_groups.all():