About users
In authentik you can create and manage users with fine-tuned access control, session and event details, group membership, role assignment, super-user rights, impersonation, and password management and recovery.
To learn more about Enterprise licenses with internal and external users, refer to Manage Enterprise licensing.
To learn more about working with users in authentik, refer to the following topics:
Invitations
Learn how to create an invitation URL for new users to enroll.
Password reset on login
You can require users to reset their password on their next login, using expression policies, custom stages, and a custom user attribute. This guide explains how to configure this with the default-authentication-flow; however, the same steps apply to any authentication flow.
User interface
End-users who are accessing their applications via authentik typically only access the User interface, not the Admin interface. (There are exceptions; some end-users have permissions to also access the Admin interface, while some end-users never go to the User interface, but rather log directly into their application using authentik behind the scenes.)
User account switching
authentik can keep multiple user accounts signed in within the same browser. Users can switch between their user accounts from the User interface header.
Manage users
Use these procedures to create, modify, deactivate, delete, and recover users.
User properties and attributes
Object properties