Stages | authentik

📄️ Duo authenticator setup stage

This stage configures a Duo authenticator. To get the API Credentials for this stage, open your Duo Admin dashboard.

📄️ SMS authenticator setup stage

This stage configures an SMS-based authenticator using either Twilio, or a generic HTTP endpoint.

📄️ Static authenticator setup stage

This stage configures static Tokens, which can be used as a backup method to time-based OTP tokens.

📄️ TOTP authenticator setup stage

This stage configures a time-based OTP Device, such as Google Authenticator or Authy.

📄️ Authenticator validation stage

This stage validates an already configured Authenticator Device. This device has to be configured using any of the other authenticator stages:

📄️ WebAuthn authenticator setup stage

This stage configures a WebAuthn-based Authenticator. This can either be a browser, biometrics or a Security stick like a YubiKey.

📄️ Captcha stage

This stage adds a form of verification using Google's ReCaptcha or compatible services. Currently supported implementations:

📄️ Deny stage

This stage stops the execution of a flow. This can be used to conditionally deny users access to a flow,

This stage can be used for email verification. authentik's background worker will send an email using the specified connection details. When an email can't be delivered, delivery is automatically retried periodically.

📄️ Identification stage

This stage provides a ready-to-go form for users to identify themselves.

📄️ Invitation stage

This stage can be used to invite users. You can use this to enroll users with preset values.

📄️ Password stage

This is a generic password prompt which authenticates the current pending_user. This stage allows the selection of the source the user is authenticated against.