
ALT authentik Release 2026.8 • Privileged access management: Users can request access to applications or specific application entitlements. Designated approvers can approve or deny requests and set when access expires • Agent accounts: Service accounts that act on behalf of a parent user, enabling automation and integrations while preserving delegated access and auditability • User switching: Users can keep multiple accounts signed in within the same browser and switch between them from the User interface. • User offboarding:Schedule users for deactivation or deletion, with optional session and token revocation. • Object attributes: Define custom fields for users, groups, application entitlements, and other objects, with validation built into the Admin interface and API • Self-hosted event maps: Use the new bundled event map without external requests, or configure a self-hosted map for each brand. • OAuth 2.0 and OpenlD Connect improvements: added support for on-behalf-of OBO & DCR







