Your video was informative but can you elaborate more on the email setup or create a short video covering that part? I have email configured globally and i test that its working using the step provided from authentik email troubleshooting docs. However, after following your guide i still can't get notification of login events. Not sure what i am missing. Do i need to create an email stage outside the default one?
I generally make specific stages and try not to mess with the default ones when possible...that said, your default settings should work if email is working. The default email stage utilize the templates (recovery/invite), the notification setup uses its own so long as emails are working.
Anyway to customize the discord notification? The docs are confusing and I would like to see more detail in the notifications like IP address and location.
...I just tested my setup and my notification have stopped working as of November (last discord notification I received). I will need to see if I can re-configure and get it working again...
Amazing video series. You helped me fully setup my authentik! Is there a way to bypass auth altogether with apps behind authentik if on a local network?
Thank you! That was my intention for the videos...to simply get set up, and from there depends on the users' needs. See my other video here regarding bypass of auth on LAN: th-cam.com/video/c2_C9VOgGZI/w-d-xo.html
That is a tough one...I think you still, at minimum, need a user login to load proper groups/permissions... Maybe, just maybe a policy can be applied that check if the user exists AND is being access from the LAN, if so, bypass the password stage.
That's a great video. In fact all of your Authentik tutorials are extreamly helpful! Could you consider creating a video explaining how to ban an IP from trying to authenticate if their reputation gets too low? Or Crowdsec integration?
Glad to hear that! When I was a beginner there weren't any videos...maybe the 1 by ibracorp but that was it. So, I wish I had these videos when I was starting...I'd be much further along; LOL. And the early documentation was not easy to understand especially having no knowledge coming into it... I think the documentation has improved, but the more examples, scenarios, screenshots, and videos there are the better someone can jump right into it.
...not sure what you mean...however, if you mean will you get notified if any users or admins login, logout, fail...yes, you will because it is by event (policies will help you customize it more if needed)
Nice video. I can't for the life of me get a generic notification to trigger though. The configuration is so poorly explained and arcane :( Even with your ak_client_ip note in there. It says it passed, but the rule keeps failing.
...most issues when it comes to using gmail as a relay is trying to use the main account password. So be sure you are creating an application password and using that. Also that you have an alias that can be used as your "send as". If all that fails, manually enter the settings in your email flow to see if that works. (also be sure the email environment variables are in both your server and worker)
Great! I really wanted you to make a video on this topic and you finally satisfied me. Thank you very much.
You're very welcome!
Hello, is it possible to use telegram instead?
Thank you so much
Your video was informative but can you elaborate more on the email setup or create a short video covering that part? I have email configured globally and i test that its working using the step provided from authentik email troubleshooting docs. However, after following your guide i still can't get notification of login events. Not sure what i am missing. Do i need to create an email stage outside the default one?
I generally make specific stages and try not to mess with the default ones when possible...that said, your default settings should work if email is working. The default email stage utilize the templates (recovery/invite), the notification setup uses its own so long as emails are working.
Anyway to customize the discord notification? The docs are confusing and I would like to see more detail in the notifications like IP address and location.
Hey!
I've followed your video, and the notifications doesn"t work 😢 do you have an idea?
Maybe because the updates have changed something?
...I just tested my setup and my notification have stopped working as of November (last discord notification I received). I will need to see if I can re-configure and get it working again...
Amazing video series. You helped me fully setup my authentik!
Is there a way to bypass auth altogether with apps behind authentik if on a local network?
Thank you! That was my intention for the videos...to simply get set up, and from there depends on the users' needs.
See my other video here regarding bypass of auth on LAN: th-cam.com/video/c2_C9VOgGZI/w-d-xo.html
@@cooptonian So that bypasses MFA but still requires a login. I'm wondering if you can bypass auth altogether on lan
That is a tough one...I think you still, at minimum, need a user login to load proper groups/permissions... Maybe, just maybe a policy can be applied that check if the user exists AND is being access from the LAN, if so, bypass the password stage.
...maybe this is what you're after?
th-cam.com/video/QS7gs3TbzsQ/w-d-xo.html
That's a great video. In fact all of your Authentik tutorials are extreamly helpful!
Could you consider creating a video explaining how to ban an IP from trying to authenticate if their reputation gets too low? Or Crowdsec integration?
I'm glad you find them helpful! I'll consider that as a video idea...
here you go: th-cam.com/video/WZDFdDT_DWo/w-d-xo.html
nice one again. Big help your videos for authentik-beginners like me ;)
Glad to hear that! When I was a beginner there weren't any videos...maybe the 1 by ibracorp but that was it. So, I wish I had these videos when I was starting...I'd be much further along; LOL. And the early documentation was not easy to understand especially having no knowledge coming into it... I think the documentation has improved, but the more examples, scenarios, screenshots, and videos there are the better someone can jump right into it.
great content as usual cooptopian! Im curious to know if this method works for all users added or just my main admin user?
...not sure what you mean...however, if you mean will you get notified if any users or admins login, logout, fail...yes, you will because it is by event (policies will help you customize it more if needed)
Does the free account allow creation of webhook & send email notifications to gmail?
Yes it does!
Nice video. I can't for the life of me get a generic notification to trigger though. The configuration is so poorly explained and arcane :(
Even with your ak_client_ip note in there. It says it passed, but the rule keeps failing.
A tutorial on how to get email working at all would be great. I tried to set up my gmail mailbox, but I failed.
...most issues when it comes to using gmail as a relay is trying to use the main account password. So be sure you are creating an application password and using that. Also that you have an alias that can be used as your "send as". If all that fails, manually enter the settings in your email flow to see if that works. (also be sure the email environment variables are in both your server and worker)
how can send an email to a user that has been created through an api endpoint ?!
...probably through an event matcher policy, for details you may want to ask in the discord.
i managed to send a notification when a user is created, is there a way to customize that notification ?@@cooptonian
...I haven't done it but my guess would be with custom email templates (goauthentik.io/docs/flow/stages/email/#custom-templates)