diff --git a/authentik/flows/tests/test_inspector.py b/authentik/flows/tests/test_inspector.py
index 2a01ea370c..81a04a797b 100644
--- a/authentik/flows/tests/test_inspector.py
+++ b/authentik/flows/tests/test_inspector.py
@@ -46,6 +46,7 @@ class TestFlowInspector(APITestCase):
             res.content,
             {
                 "allow_show_password": False,
+                "captcha_stage": None,
                 "component": "ak-stage-identification",
                 "flow_info": {
                     "background": flow.background_url,
diff --git a/authentik/providers/scim/clients/groups.py b/authentik/providers/scim/clients/groups.py
index 44b3405dff..8221d7d131 100644
--- a/authentik/providers/scim/clients/groups.py
+++ b/authentik/providers/scim/clients/groups.py
@@ -197,6 +197,8 @@ class SCIMGroupClient(SCIMClient[Group, SCIMProviderGroup, SCIMGroupSchema]):
         chunk_size = self._config.bulk.maxOperations
         if chunk_size < 1:
             chunk_size = len(ops)
+        if len(ops) < 1:
+            return
         for chunk in batched(ops, chunk_size):
             req = PatchRequest(Operations=list(chunk))
             self._request(
@@ -237,13 +239,16 @@ class SCIMGroupClient(SCIMClient[Group, SCIMProviderGroup, SCIMGroupSchema]):
         users_to_add = []
         users_to_remove = []
         # Check users currently in group and if they shouldn't be in the group and remove them
-        for user in current_group.members:
+        for user in current_group.members or []:
             if user.value not in users_should:
                 users_to_remove.append(user.value)
         # Check users that should be in the group and add them
         for user in users_should:
             if len([x for x in current_group.members if x.value == user]) < 1:
                 users_to_add.append(user)
+        # Only send request if we need to make changes
+        if len(users_to_add) < 1 and len(users_to_remove) < 1:
+            return
         return self._patch_chunked(
             scim_group.scim_id,
             *[
diff --git a/authentik/stages/authenticator_validate/challenge.py b/authentik/stages/authenticator_validate/challenge.py
index c11439684f..1f9a656a38 100644
--- a/authentik/stages/authenticator_validate/challenge.py
+++ b/authentik/stages/authenticator_validate/challenge.py
@@ -8,7 +8,7 @@ from django.http.response import Http404
 from django.shortcuts import get_object_or_404
 from django.utils.translation import gettext as __
 from django.utils.translation import gettext_lazy as _
-from rest_framework.fields import CharField
+from rest_framework.fields import CharField, DateTimeField
 from rest_framework.serializers import ValidationError
 from structlog.stdlib import get_logger
 from webauthn import options_to_json
@@ -45,6 +45,7 @@ class DeviceChallenge(PassiveSerializer):
     device_class = CharField()
     device_uid = CharField()
     challenge = JSONDictField()
+    last_used = DateTimeField(allow_null=True)
 
 
 def get_challenge_for_device(
diff --git a/authentik/stages/authenticator_validate/stage.py b/authentik/stages/authenticator_validate/stage.py
index 96ae7e6215..bde76d37db 100644
--- a/authentik/stages/authenticator_validate/stage.py
+++ b/authentik/stages/authenticator_validate/stage.py
@@ -217,6 +217,7 @@ class AuthenticatorValidateStageView(ChallengeStageView):
                     "device_class": device_class,
                     "device_uid": device.pk,
                     "challenge": get_challenge_for_device(self.request, stage, device),
+                    "last_used": device.last_used,
                 }
             )
             challenge.is_valid()
@@ -237,6 +238,7 @@ class AuthenticatorValidateStageView(ChallengeStageView):
                     self.request,
                     self.executor.current_stage,
                 ),
+                "last_used": None,
             }
         )
         challenge.is_valid()
diff --git a/authentik/stages/authenticator_validate/tests/test_sms.py b/authentik/stages/authenticator_validate/tests/test_sms.py
index 5cce796207..850854a892 100644
--- a/authentik/stages/authenticator_validate/tests/test_sms.py
+++ b/authentik/stages/authenticator_validate/tests/test_sms.py
@@ -107,6 +107,7 @@ class AuthenticatorValidateStageSMSTests(FlowTestCase):
                         "device_class": "sms",
                         "device_uid": str(device.pk),
                         "challenge": {},
+                        "last_used": None,
                     },
                 },
             )
diff --git a/authentik/stages/authenticator_validate/tests/test_stage.py b/authentik/stages/authenticator_validate/tests/test_stage.py
index 98fe5d2fe4..82a2f51322 100644
--- a/authentik/stages/authenticator_validate/tests/test_stage.py
+++ b/authentik/stages/authenticator_validate/tests/test_stage.py
@@ -169,6 +169,7 @@ class AuthenticatorValidateStageTests(FlowTestCase):
                     "device_class": "baz",
                     "device_uid": "quox",
                     "challenge": {},
+                    "last_used": None,
                 }
             },
         )
@@ -188,6 +189,7 @@ class AuthenticatorValidateStageTests(FlowTestCase):
                     "device_class": "static",
                     "device_uid": "1",
                     "challenge": {},
+                    "last_used": None,
                 },
             },
         )
diff --git a/authentik/stages/authenticator_validate/tests/test_webauthn.py b/authentik/stages/authenticator_validate/tests/test_webauthn.py
index e4247b221a..05fe216081 100644
--- a/authentik/stages/authenticator_validate/tests/test_webauthn.py
+++ b/authentik/stages/authenticator_validate/tests/test_webauthn.py
@@ -274,6 +274,7 @@ class AuthenticatorValidateStageWebAuthnTests(FlowTestCase):
                 "device_class": device.__class__.__name__.lower().replace("device", ""),
                 "device_uid": device.pk,
                 "challenge": {},
+                "last_used": None,
             }
         ]
         session[SESSION_KEY_PLAN] = plan
@@ -352,6 +353,7 @@ class AuthenticatorValidateStageWebAuthnTests(FlowTestCase):
                 "device_class": device.__class__.__name__.lower().replace("device", ""),
                 "device_uid": device.pk,
                 "challenge": {},
+                "last_used": None,
             }
         ]
         session[SESSION_KEY_PLAN] = plan
@@ -432,6 +434,7 @@ class AuthenticatorValidateStageWebAuthnTests(FlowTestCase):
                 "device_class": device.__class__.__name__.lower().replace("device", ""),
                 "device_uid": device.pk,
                 "challenge": {},
+                "last_used": None,
             }
         ]
         session[SESSION_KEY_PLAN] = plan
diff --git a/authentik/stages/captcha/stage.py b/authentik/stages/captcha/stage.py
index 3967e6d3d3..73bcff5dec 100644
--- a/authentik/stages/captcha/stage.py
+++ b/authentik/stages/captcha/stage.py
@@ -1,10 +1,11 @@
 """authentik captcha stage"""
 
 from django.http.response import HttpResponse
-from django.utils.translation import gettext_lazy as _
+from django.utils.translation import gettext as _
 from requests import RequestException
 from rest_framework.fields import CharField
 from rest_framework.serializers import ValidationError
+from structlog.stdlib import get_logger
 
 from authentik.flows.challenge import (
     Challenge,
@@ -16,6 +17,7 @@ from authentik.lib.utils.http import get_http_session
 from authentik.root.middleware import ClientIPMiddleware
 from authentik.stages.captcha.models import CaptchaStage
 
+LOGGER = get_logger()
 PLAN_CONTEXT_CAPTCHA = "captcha"
 
 
@@ -27,6 +29,56 @@ class CaptchaChallenge(WithUserInfoChallenge):
     component = CharField(default="ak-stage-captcha")
 
 
+def verify_captcha_token(stage: CaptchaStage, token: str, remote_ip: str):
+    """Validate captcha token"""
+    try:
+        response = get_http_session().post(
+            stage.api_url,
+            headers={
+                "Content-type": "application/x-www-form-urlencoded",
+            },
+            data={
+                "secret": stage.private_key,
+                "response": token,
+                "remoteip": remote_ip,
+            },
+        )
+        response.raise_for_status()
+        data = response.json()
+        if stage.error_on_invalid_score:
+            if not data.get("success", False):
+                error_codes = data.get("error-codes", ["unknown-error"])
+                LOGGER.warning("Failed to verify captcha token", error_codes=error_codes)
+
+                # These cases can usually be fixed by simply requesting a new token and retrying.
+                # [reCAPTCHA](https://developers.google.com/recaptcha/docs/verify#error_code_reference)
+                # [hCaptcha](https://docs.hcaptcha.com/#siteverify-error-codes-table)
+                # [Turnstile](https://developers.cloudflare.com/turnstile/get-started/server-side-validation/#error-codes)
+                retriable_error_codes = [
+                    "missing-input-response",
+                    "invalid-input-response",
+                    "timeout-or-duplicate",
+                    "expired-input-response",
+                    "already-seen-response",
+                ]
+
+                if set(error_codes).issubset(set(retriable_error_codes)):
+                    error_message = _("Invalid captcha response. Retrying may solve this issue.")
+                else:
+                    error_message = _("Invalid captcha response")
+                raise ValidationError(error_message)
+            if "score" in data:
+                score = float(data.get("score"))
+                if stage.score_max_threshold > -1 and score > stage.score_max_threshold:
+                    raise ValidationError(_("Invalid captcha response"))
+                if stage.score_min_threshold > -1 and score < stage.score_min_threshold:
+                    raise ValidationError(_("Invalid captcha response"))
+    except (RequestException, TypeError) as exc:
+        raise ValidationError(_("Failed to validate token")) from exc
+
+    return data
+
+
 class CaptchaChallengeResponse(ChallengeResponse):
     """Validate captcha token"""
 
@@ -36,38 +88,9 @@ class CaptchaChallengeResponse(ChallengeResponse):
     def validate_token(self, token: str) -> str:
         """Validate captcha token"""
         stage: CaptchaStage = self.stage.executor.current_stage
-        try:
-            response = get_http_session().post(
-                stage.api_url,
-                headers={
-                    "Content-type": "application/x-www-form-urlencoded",
-                },
-                data={
-                    "secret": stage.private_key,
-                    "response": token,
-                    "remoteip": ClientIPMiddleware.get_client_ip(self.stage.request),
-                },
-            )
-            response.raise_for_status()
-            data = response.json()
-            if stage.error_on_invalid_score:
-                if not data.get("success", False):
-                    raise ValidationError(
-                        _(
-                            "Failed to validate token: {error}".format(
-                                error=data.get("error-codes", _("Unknown error"))
-                            )
-                        )
-                    )
-                if "score" in data:
-                    score = float(data.get("score"))
-                    if stage.score_max_threshold > -1 and score > stage.score_max_threshold:
-                        raise ValidationError(_("Invalid captcha response"))
-                    if stage.score_min_threshold > -1 and score < stage.score_min_threshold:
-                        raise ValidationError(_("Invalid captcha response"))
-        except (RequestException, TypeError) as exc:
-            raise ValidationError(_("Failed to validate token")) from exc
-        return data
+        client_ip = ClientIPMiddleware.get_client_ip(self.stage.request)
+
+        return verify_captcha_token(stage, token, client_ip)
 
 
 class CaptchaStageView(ChallengeStageView):
diff --git a/authentik/stages/identification/api.py b/authentik/stages/identification/api.py
index 9ad97320e8..c8de2d7436 100644
--- a/authentik/stages/identification/api.py
+++ b/authentik/stages/identification/api.py
@@ -27,6 +27,7 @@ class IdentificationStageSerializer(StageSerializer):
         fields = StageSerializer.Meta.fields + [
             "user_fields",
             "password_stage",
+            "captcha_stage",
             "case_insensitive_matching",
             "show_matched_user",
             "enrollment_flow",
@@ -46,6 +47,7 @@ class IdentificationStageViewSet(UsedByMixin, ModelViewSet):
     filterset_fields = [
         "name",
         "password_stage",
+        "captcha_stage",
         "case_insensitive_matching",
         "show_matched_user",
         "enrollment_flow",
diff --git a/authentik/stages/identification/migrations/0015_identificationstage_captcha_stage.py b/authentik/stages/identification/migrations/0015_identificationstage_captcha_stage.py
new file mode 100644
index 0000000000..734dc7631c
--- /dev/null
+++ b/authentik/stages/identification/migrations/0015_identificationstage_captcha_stage.py
@@ -0,0 +1,26 @@
+# Generated by Django 5.0.8 on 2024-08-29 11:31
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("authentik_stages_captcha", "0003_captchastage_error_on_invalid_score_and_more"),
+        ("authentik_stages_identification", "0014_identificationstage_pretend"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="identificationstage",
+            name="captcha_stage",
+            field=models.ForeignKey(
+                default=None,
+                help_text="When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.",
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                to="authentik_stages_captcha.captchastage",
+            ),
+        ),
+    ]
diff --git a/authentik/stages/identification/models.py b/authentik/stages/identification/models.py
index 27cfcb92f1..ed6728c932 100644
--- a/authentik/stages/identification/models.py
+++ b/authentik/stages/identification/models.py
@@ -8,6 +8,7 @@ from rest_framework.serializers import BaseSerializer
 
 from authentik.core.models import Source
 from authentik.flows.models import Flow, Stage
+from authentik.stages.captcha.models import CaptchaStage
 from authentik.stages.password.models import PasswordStage
 
 
@@ -43,6 +44,19 @@ class IdentificationStage(Stage):
         ),
     )
 
+    captcha_stage = models.ForeignKey(
+        CaptchaStage,
+        null=True,
+        default=None,
+        on_delete=models.SET_NULL,
+        help_text=_(
+            (
+                "When set, adds functionality exactly like a Captcha stage, but baked into the "
+                "Identification stage."
+            ),
+        ),
+    )
+
     case_insensitive_matching = models.BooleanField(
         default=True,
         help_text=_("When enabled, user fields are matched regardless of their casing."),
diff --git a/authentik/stages/identification/stage.py b/authentik/stages/identification/stage.py
index dffd119da9..1d2dfe8cab 100644
--- a/authentik/stages/identification/stage.py
+++ b/authentik/stages/identification/stage.py
@@ -29,6 +29,7 @@ from authentik.flows.views.executor import SESSION_KEY_APPLICATION_PRE, SESSION_
 from authentik.lib.utils.reflection import all_subclasses
 from authentik.lib.utils.urls import reverse_with_qs
 from authentik.root.middleware import ClientIPMiddleware
+from authentik.stages.captcha.stage import CaptchaChallenge, verify_captcha_token
 from authentik.stages.identification.models import IdentificationStage
 from authentik.stages.identification.signals import identification_failed
 from authentik.stages.password.stage import authenticate
@@ -75,6 +76,7 @@ class IdentificationChallenge(Challenge):
     allow_show_password = BooleanField(default=False)
     application_pre = CharField(required=False)
     flow_designation = ChoiceField(FlowDesignation.choices)
+    captcha_stage = CaptchaChallenge(required=False)
 
     enroll_url = CharField(required=False)
     recovery_url = CharField(required=False)
@@ -91,14 +93,16 @@ class IdentificationChallengeResponse(ChallengeResponse):
 
     uid_field = CharField()
     password = CharField(required=False, allow_blank=True, allow_null=True)
+    captcha_token = CharField(required=False, allow_blank=True, allow_null=True)
     component = CharField(default="ak-stage-identification")
 
     pre_user: User | None = None
 
     def validate(self, attrs: dict[str, Any]) -> dict[str, Any]:
-        """Validate that user exists, and optionally their password"""
+        """Validate that user exists, and optionally their password and captcha token"""
         uid_field = attrs["uid_field"]
         current_stage: IdentificationStage = self.stage.executor.current_stage
+        client_ip = ClientIPMiddleware.get_client_ip(self.stage.request)
 
         pre_user = self.stage.get_user(uid_field)
         if not pre_user:
@@ -113,7 +117,7 @@ class IdentificationChallengeResponse(ChallengeResponse):
             self.stage.logger.info(
                 "invalid_login",
                 identifier=uid_field,
-                client_ip=ClientIPMiddleware.get_client_ip(self.stage.request),
+                client_ip=client_ip,
                 action="invalid_identifier",
                 context={
                     "stage": sanitize_item(self.stage),
@@ -136,6 +140,15 @@ class IdentificationChallengeResponse(ChallengeResponse):
                 return attrs
             raise ValidationError("Failed to authenticate.")
         self.pre_user = pre_user
+
+        # Captcha check
+        if captcha_stage := current_stage.captcha_stage:
+            captcha_token = attrs.get("captcha_token", None)
+            if not captcha_token:
+                self.stage.logger.warning("Token not set for captcha attempt")
+            verify_captcha_token(captcha_stage, captcha_token, client_ip)
+
+        # Password check
         if not current_stage.password_stage:
             # No password stage select, don't validate the password
             return attrs
@@ -206,6 +219,14 @@ class IdentificationStageView(ChallengeStageView):
                 "primary_action": self.get_primary_action(),
                 "user_fields": current_stage.user_fields,
                 "password_fields": bool(current_stage.password_stage),
+                "captcha_stage": (
+                    {
+                        "js_url": current_stage.captcha_stage.js_url,
+                        "site_key": current_stage.captcha_stage.public_key,
+                    }
+                    if current_stage.captcha_stage
+                    else None
+                ),
                 "allow_show_password": bool(current_stage.password_stage)
                 and current_stage.password_stage.allow_show_password,
                 "show_source_labels": current_stage.show_source_labels,
diff --git a/authentik/stages/identification/tests.py b/authentik/stages/identification/tests.py
index 57ffed1283..c39434e24a 100644
--- a/authentik/stages/identification/tests.py
+++ b/authentik/stages/identification/tests.py
@@ -1,6 +1,7 @@
 """identification tests"""
 
 from django.urls import reverse
+from requests_mock import Mocker
 from rest_framework.exceptions import ValidationError
 
 from authentik.core.tests.utils import create_test_admin_user, create_test_flow
@@ -8,6 +9,8 @@ from authentik.flows.models import FlowDesignation, FlowStageBinding
 from authentik.flows.tests import FlowTestCase
 from authentik.lib.generators import generate_id
 from authentik.sources.oauth.models import OAuthSource
+from authentik.stages.captcha.models import CaptchaStage
+from authentik.stages.captcha.tests import RECAPTCHA_PRIVATE_KEY, RECAPTCHA_PUBLIC_KEY
 from authentik.stages.identification.api import IdentificationStageSerializer
 from authentik.stages.identification.models import IdentificationStage, UserFields
 from authentik.stages.password import BACKEND_INBUILT
@@ -133,6 +136,135 @@ class TestIdentificationStage(FlowTestCase):
             user_fields=["email"],
         )
 
+    @Mocker()
+    def test_valid_with_captcha(self, mock: Mocker):
+        """Test with valid email and captcha token in single step"""
+        mock.post(
+            "https://www.recaptcha.net/recaptcha/api/siteverify",
+            json={
+                "success": True,
+                "score": 0.5,
+            },
+        )
+
+        captcha_stage = CaptchaStage.objects.create(
+            name="captcha",
+            public_key=RECAPTCHA_PUBLIC_KEY,
+            private_key=RECAPTCHA_PRIVATE_KEY,
+        )
+        self.stage.captcha_stage = captcha_stage
+        self.stage.save()
+
+        form_data = {"uid_field": self.user.email, "captcha_token": "PASSED"}
+        url = reverse("authentik_api:flow-executor", kwargs={"flow_slug": self.flow.slug})
+        response = self.client.post(url, form_data)
+        self.assertEqual(response.status_code, 200)
+        self.assertStageRedirects(response, reverse("authentik_core:root-redirect"))
+
+    @Mocker()
+    def test_invalid_with_captcha(self, mock: Mocker):
+        """Test with valid email and invalid captcha token in single step"""
+        mock.post(
+            "https://www.recaptcha.net/recaptcha/api/siteverify",
+            json={
+                "success": False,
+                "score": 0.5,
+            },
+        )
+
+        captcha_stage = CaptchaStage.objects.create(
+            name="captcha",
+            public_key=RECAPTCHA_PUBLIC_KEY,
+            private_key=RECAPTCHA_PRIVATE_KEY,
+        )
+
+        self.stage.captcha_stage = captcha_stage
+        self.stage.save()
+
+        form_data = {
+            "uid_field": self.user.email,
+            "captcha_token": "FAILED",
+        }
+        url = reverse("authentik_api:flow-executor", kwargs={"flow_slug": self.flow.slug})
+        response = self.client.post(url, form_data)
+        self.assertStageResponse(
+            response,
+            self.flow,
+            component="ak-stage-identification",
+            password_fields=False,
+            primary_action="Log in",
+            response_errors={
+                "non_field_errors": [{"code": "invalid", "string": "Invalid captcha response"}]
+            },
+            sources=[
+                {
+                    "challenge": {
+                        "component": "xak-flow-redirect",
+                        "to": "/source/oauth/login/test/",
+                    },
+                    "icon_url": "/static/authentik/sources/default.svg",
+                    "name": "test",
+                }
+            ],
+            show_source_labels=False,
+            user_fields=["email"],
+        )
+
+    @Mocker()
+    def test_invalid_with_captcha_retriable(self, mock: Mocker):
+        """Test with valid email and invalid captcha token in single step"""
+        mock.post(
+            "https://www.recaptcha.net/recaptcha/api/siteverify",
+            json={
+                "success": False,
+                "score": 0.5,
+                "error-codes": ["timeout-or-duplicate"],
+            },
+        )
+
+        captcha_stage = CaptchaStage.objects.create(
+            name="captcha",
+            public_key=RECAPTCHA_PUBLIC_KEY,
+            private_key=RECAPTCHA_PRIVATE_KEY,
+        )
+
+        self.stage.captcha_stage = captcha_stage
+        self.stage.save()
+
+        form_data = {
+            "uid_field": self.user.email,
+            "captcha_token": "FAILED",
+        }
+        url = reverse("authentik_api:flow-executor", kwargs={"flow_slug": self.flow.slug})
+        response = self.client.post(url, form_data)
+        self.assertStageResponse(
+            response,
+            self.flow,
+            component="ak-stage-identification",
+            password_fields=False,
+            primary_action="Log in",
+            response_errors={
+                "non_field_errors": [
+                    {
+                        "code": "invalid",
+                        "string": "Invalid captcha response. Retrying may solve this issue.",
+                    }
+                ]
+            },
+            sources=[
+                {
+                    "challenge": {
+                        "component": "xak-flow-redirect",
+                        "to": "/source/oauth/login/test/",
+                    },
+                    "icon_url": "/static/authentik/sources/default.svg",
+                    "name": "test",
+                }
+            ],
+            show_source_labels=False,
+            user_fields=["email"],
+        )
+
     def test_invalid_with_username(self):
         """Test invalid with username (user exists but stage only allows email)"""
         form_data = {"uid_field": self.user.username}
diff --git a/blueprints/schema.json b/blueprints/schema.json
index 9b3b91eb74..0604c8d76d 100644
--- a/blueprints/schema.json
+++ b/blueprints/schema.json
@@ -10679,6 +10679,11 @@
                     "title": "Password stage",
                     "description": "When set, shows a password field, instead of showing the password field as separate step."
                 },
+                "captcha_stage": {
+                    "type": "integer",
+                    "title": "Captcha stage",
+                    "description": "When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage."
+                },
                 "case_insensitive_matching": {
                     "type": "boolean",
                     "title": "Case insensitive matching",
diff --git a/blueprints/system/sources-kerberos.yaml b/blueprints/system/sources-kerberos.yaml
index d97e8eda53..8664183b7e 100644
--- a/blueprints/system/sources-kerberos.yaml
+++ b/blueprints/system/sources-kerberos.yaml
@@ -38,7 +38,7 @@ entries:
       name: "authentik default Kerberos User Mapping: Ignore system principals"
       expression: |
         localpart, realm = principal.rsplit("@", 1)
-        denied_prefixes = ["kadmin/", "krbtgt/", "K/M", "WELLKNOWN/"]
+        denied_prefixes = ["kadmin/", "krbtgt/", "K/M", "WELLKNOWN/", "kiprop/", "changepw/"]
         for prefix in denied_prefixes:
             if localpart.lower().startswith(prefix.lower()):
                 raise SkipObject
diff --git a/go.mod b/go.mod
index 804d9d0dc5..3b36858dd0 100644
--- a/go.mod
+++ b/go.mod
@@ -29,7 +29,7 @@ require (
 	github.com/spf13/cobra v1.8.1
 	github.com/stretchr/testify v1.9.0
 	github.com/wwt/guac v1.3.2
-	goauthentik.io/api/v3 v3.2024083.11
+	goauthentik.io/api/v3 v3.2024083.14
 	golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab
 	golang.org/x/oauth2 v0.23.0
 	golang.org/x/sync v0.8.0
diff --git a/go.sum b/go.sum
index 7c008d78ad..fb4733c1dd 100644
--- a/go.sum
+++ b/go.sum
@@ -299,8 +299,8 @@ go.opentelemetry.io/otel/trace v1.24.0 h1:CsKnnL4dUAr/0llH9FKuc698G04IrpWV0MQA/Y
 go.opentelemetry.io/otel/trace v1.24.0/go.mod h1:HPc3Xr/cOApsBI154IU0OI0HJexz+aw5uPdbs3UCjNU=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
-goauthentik.io/api/v3 v3.2024083.11 h1:kF5WAnS0dB2cq9Uldqel8e8PDepJg/824JC3YFsQVHU=
-goauthentik.io/api/v3 v3.2024083.11/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw=
+goauthentik.io/api/v3 v3.2024083.14 h1:8iLXkNpVS275S4DLMBr6WIeaMkkaIJbzlNRLCFe+k3A=
+goauthentik.io/api/v3 v3.2024083.14/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
diff --git a/internal/outpost/proxyv2/application/endpoint.go b/internal/outpost/proxyv2/application/endpoint.go
index 9a91459182..c9cc50d40c 100644
--- a/internal/outpost/proxyv2/application/endpoint.go
+++ b/internal/outpost/proxyv2/application/endpoint.go
@@ -82,6 +82,9 @@ func GetOIDCEndpoint(p api.ProxyOutpostConfig, authentikHost string, embedded bo
 	if embedded {
 		ep.Issuer = updateURL(ep.Issuer, newHost.Scheme, newHost.Host)
 		ep.JwksUri = updateURL(jwksUri, newHost.Scheme, newHost.Host)
+	} else {
+		// Fixes: https://github.com/goauthentik/authentik/issues/9622 / ep.Issuer must be the HostBrowser URL
+		ep.Issuer = updateURL(ep.Issuer, newBrowserHost.Scheme, newBrowserHost.Host)
 	}
 	return ep
 }
diff --git a/internal/outpost/proxyv2/application/endpoint_test.go b/internal/outpost/proxyv2/application/endpoint_test.go
index d3d0f74262..bd2be424d6 100644
--- a/internal/outpost/proxyv2/application/endpoint_test.go
+++ b/internal/outpost/proxyv2/application/endpoint_test.go
@@ -55,7 +55,7 @@ func TestEndpointAuthentikHostBrowser(t *testing.T) {
 	assert.Equal(t, "https://browser.test.goauthentik.io/application/o/authorize/", ep.AuthURL)
 	assert.Equal(t, "https://browser.test.goauthentik.io/application/o/test-app/end-session/", ep.EndSessionEndpoint)
 	assert.Equal(t, "https://test.goauthentik.io/application/o/token/", ep.TokenURL)
-	assert.Equal(t, "https://test.goauthentik.io/application/o/test-app/", ep.Issuer)
+	assert.Equal(t, "https://browser.test.goauthentik.io/application/o/test-app/", ep.Issuer)
 	assert.Equal(t, "https://test.goauthentik.io/application/o/test-app/jwks/", ep.JwksUri)
 	assert.Equal(t, "https://test.goauthentik.io/application/o/introspect/", ep.TokenIntrospection)
 }
diff --git a/lifecycle/ak b/lifecycle/ak
index 2033951557..2d52023bb9 100755
--- a/lifecycle/ak
+++ b/lifecycle/ak
@@ -54,7 +54,9 @@ function cleanup {
 }
 
 function prepare_debug {
-    apt-get install -y --no-install-recommends krb5-kdc krb5-user krb5-admin-server
+    export DEBIAN_FRONTEND=noninteractive
+    apt-get update
+    apt-get install -y --no-install-recommends krb5-kdc krb5-user krb5-admin-server libkrb5-dev gcc
     VIRTUAL_ENV=/ak-root/venv poetry install --no-ansi --no-interaction
     touch /unittest.xml
     chown authentik:authentik /unittest.xml
diff --git a/locale/en/LC_MESSAGES/django.po b/locale/en/LC_MESSAGES/django.po
index 9477afafd1..9e941ce67e 100644
--- a/locale/en/LC_MESSAGES/django.po
+++ b/locale/en/LC_MESSAGES/django.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-10-23 16:39+0000\n"
+"POT-Creation-Date: 2024-10-28 00:09+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -2614,12 +2614,7 @@ msgid "Captcha Stages"
 msgstr ""
 
 #: authentik/stages/captcha/stage.py
-msgid "Unknown error"
-msgstr ""
-
-#: authentik/stages/captcha/stage.py
-#, python-brace-format
-msgid "Failed to validate token: {error}"
+msgid "Invalid captcha response. Retrying may solve this issue."
 msgstr ""
 
 #: authentik/stages/captcha/stage.py
diff --git a/locale/fr/LC_MESSAGES/django.po b/locale/fr/LC_MESSAGES/django.po
index 243070be90..7662522a26 100644
--- a/locale/fr/LC_MESSAGES/django.po
+++ b/locale/fr/LC_MESSAGES/django.po
@@ -19,7 +19,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-10-18 00:09+0000\n"
+"POT-Creation-Date: 2024-10-23 16:39+0000\n"
 "PO-Revision-Date: 2022-09-26 16:47+0000\n"
 "Last-Translator: Marc Schmitt, 2024\n"
 "Language-Team: French (https://app.transifex.com/authentik/teams/119923/fr/)\n"
@@ -587,6 +587,30 @@ msgstr "Limite maximum de connection atteinte."
 msgid "(You are already connected in another tab/window)"
 msgstr "(Vous êtes déjà connecté dans un autre onglet/une autre fenêtre)"
 
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stage"
+msgstr ""
+"Étape d'authentificateur d'appareil du connecteur de confiance des appareils"
+" Google"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stages"
+msgstr ""
+"Étapes d'authentificateur d'appareil du connecteur de confiance des "
+"appareils Google"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Device"
+msgstr "Appareil point de terminaison"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Devices"
+msgstr "Appareils point de terminaison"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/stage.py
+msgid "Verifying your browser..."
+msgstr "Vérification de votre navigateur..."
+
 #: authentik/enterprise/stages/source/models.py
 msgid ""
 "Amount of time a user can take to return from the source to continue the "
@@ -2029,6 +2053,125 @@ msgstr ""
 msgid "Used recovery-link to authenticate."
 msgstr "Utiliser un lien de récupération pour se connecter."
 
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos realm"
+msgstr "Realm Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Custom krb5.conf to use. Uses the system one by default"
+msgstr ""
+"krb5.conf personnalisé à utiliser. Utilise celui du système par défault"
+
+#: authentik/sources/kerberos/models.py
+msgid "Sync users from Kerberos into authentik"
+msgstr "Synchroniser les utilisateurs Kerberos dans authentik"
+
+#: authentik/sources/kerberos/models.py
+msgid "When a user changes their password, sync it back to Kerberos"
+msgstr ""
+"Lorsqu'un utilisateur change son mot de passe, le synchroniser à nouveau "
+"vers Kerberos."
+
+#: authentik/sources/kerberos/models.py
+msgid "Principal to authenticate to kadmin for sync."
+msgstr "Principal pour s'authentifier à kadmin pour la synchronisation."
+
+#: authentik/sources/kerberos/models.py
+msgid "Password to authenticate to kadmin for sync"
+msgstr "Mot de passe pour s'authentifier à kadmin pour la synchronisation."
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Keytab to authenticate to kadmin for sync. Must be base64-encoded or in the "
+"form TYPE:residual"
+msgstr ""
+"Keytab pour s'authentifier à kadmin pour la synchronisation. Doit être "
+"encodé en base64 ou de la forme TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Credentials cache to authenticate to kadmin for sync. Must be in the form "
+"TYPE:residual"
+msgstr ""
+"Credentials cache pour s'authentifier à kadmin pour la synchronisation. Doit"
+" être de la forme TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Force the use of a specific server name for SPNEGO. Must be in the form "
+"HTTP@hostname"
+msgstr ""
+"Force l'utilisation d'un nom de serveur spécifique pour SPNEGO. Doit être de"
+" la forme HTTP@hostname"
+
+#: authentik/sources/kerberos/models.py
+msgid "SPNEGO keytab base64-encoded or path to keytab in the form FILE:path"
+msgstr ""
+"Keytab SPNEGO encodée en base64 ou chemin vers la keytab de la forme "
+"FILE:path"
+
+#: authentik/sources/kerberos/models.py
+msgid "Credential cache to use for SPNEGO in form type:residual"
+msgstr "Credentials cache pour SPNEGO de la forme TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"If enabled, the authentik-stored password will be updated upon login with "
+"the Kerberos password backend"
+msgstr ""
+"Si activé, le mot de passe stocké par authentik sera mis à jour à la "
+"connexion avec le backend de mot de passe Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source"
+msgstr "Source Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Sources"
+msgstr "Sources Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mapping"
+msgstr "Mappage de propriété source Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mappings"
+msgstr "Mappages de propriété source Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connection"
+msgstr "Connexion de l'utilisateur à la source Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connections"
+msgstr "Connexions de l'utilisateur à la source Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connection"
+msgstr "Connexion du groupe à la source Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connections"
+msgstr "Connexions du groupe à la source Kerberos"
+
+#: authentik/sources/kerberos/views.py
+msgid "SPNEGO authentication required"
+msgstr "Authentification SPNEGO requise"
+
+#: authentik/sources/kerberos/views.py
+msgid ""
+"\n"
+"                    Make sure you have valid tickets (obtainable via kinit)\n"
+"                    and configured the browser correctly.\n"
+"                    Please contact your administrator.\n"
+"                "
+msgstr ""
+"\n"
+"                    Vérifiez que vous avez des tickets valides (qu'on peut obtenir via kinit)\n"
+"                    et que le navigateur est configuré correctement.\n"
+"                    Veuillez contacter votre administrateur.\n"
+"                "
+
 #: authentik/sources/ldap/api.py
 msgid "Only a single LDAP Source with password synchronization is allowed"
 msgstr ""
@@ -3121,6 +3264,10 @@ msgstr "Base de données utilisateurs + mots de passes applicatifs"
 msgid "User database + LDAP password"
 msgstr "Base de données utilisateurs + mot de passe LDAP"
 
+#: authentik/stages/password/models.py
+msgid "User database + Kerberos password"
+msgstr "Base de données utilisateurs + mot de passe Kerberos"
+
 #: authentik/stages/password/models.py
 msgid "Selection of backends to test the password against."
 msgstr "Sélection de backends pour tester le mot de passe."
diff --git a/locale/it/LC_MESSAGES/django.po b/locale/it/LC_MESSAGES/django.po
index 7d0ad0097d..000198dbae 100644
--- a/locale/it/LC_MESSAGES/django.po
+++ b/locale/it/LC_MESSAGES/django.po
@@ -11,15 +11,17 @@
 # Marco Vitale, 2024
 # Kowalski Dragon (kowalski7cc) <kowalski.7cc@gmail.com>, 2024
 # albanobattistella <albanobattistella@gmail.com>, 2024
+# Nicola Mersi, 2024
+# tom max, 2024
 # 
 #, fuzzy
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-10-18 00:09+0000\n"
+"POT-Creation-Date: 2024-10-28 00:09+0000\n"
 "PO-Revision-Date: 2022-09-26 16:47+0000\n"
-"Last-Translator: albanobattistella <albanobattistella@gmail.com>, 2024\n"
+"Last-Translator: tom max, 2024\n"
 "Language-Team: Italian (https://app.transifex.com/authentik/teams/119923/it/)\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -583,6 +585,28 @@ msgstr "Limite massimo di connessioni raggiunto."
 msgid "(You are already connected in another tab/window)"
 msgstr "(Sei già connesso in un'altra scheda/finestra)"
 
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stage"
+msgstr ""
+"Fase di autenticazione per la verifica dispositivo Google tramite endpoint"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stages"
+msgstr ""
+"Fasi di autenticazione per la verifica dispositivo Google tramite endpoint"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Device"
+msgstr "Dispositivo di Accesso"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Devices"
+msgstr "Dispositivi di Accesso"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/stage.py
+msgid "Verifying your browser..."
+msgstr "Verifica del tuo browser..."
+
 #: authentik/enterprise/stages/source/models.py
 msgid ""
 "Amount of time a user can take to return from the source to continue the "
@@ -2017,6 +2041,124 @@ msgstr ""
 msgid "Used recovery-link to authenticate."
 msgstr "Utilizzato il link di recupero per autenticarsi."
 
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos realm"
+msgstr "Dominio Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Custom krb5.conf to use. Uses the system one by default"
+msgstr ""
+"krb5.conf personalizzato da usare. Usa la configurazione di sistema per "
+"default"
+
+#: authentik/sources/kerberos/models.py
+msgid "Sync users from Kerberos into authentik"
+msgstr "Sincronizza utenti da Kerberos a authentik"
+
+#: authentik/sources/kerberos/models.py
+msgid "When a user changes their password, sync it back to Kerberos"
+msgstr "Quando un utente cambia la sua password, sincronizzala in Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Principal to authenticate to kadmin for sync."
+msgstr "Entità da autenticare su kadmin per la sincronizzazione."
+
+#: authentik/sources/kerberos/models.py
+msgid "Password to authenticate to kadmin for sync"
+msgstr "Password per autenticarsi in kadmin per sincronizzare"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Keytab to authenticate to kadmin for sync. Must be base64-encoded or in the "
+"form TYPE:residual"
+msgstr ""
+"Keytab per autenticarsi su kadmin per la sincronizzazione. Deve essere con "
+"codifica base64 o nel formato TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Credentials cache to authenticate to kadmin for sync. Must be in the form "
+"TYPE:residual"
+msgstr ""
+"Credenziali memorizzate nella cache per autenticarsi su kadmin per la "
+"sincronizzazione. Devono essere nel formato TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Force the use of a specific server name for SPNEGO. Must be in the form "
+"HTTP@hostname"
+msgstr ""
+"Forza l'uso di un nome server specifico per SPNEGO. Deve essere nel formato "
+"HTTP@nomehost"
+
+#: authentik/sources/kerberos/models.py
+msgid "SPNEGO keytab base64-encoded or path to keytab in the form FILE:path"
+msgstr ""
+"keytab SPNEGO con codifica base64 o percorso del keytab nel formato "
+"FILE:percorso"
+
+#: authentik/sources/kerberos/models.py
+msgid "Credential cache to use for SPNEGO in form type:residual"
+msgstr ""
+"Cache delle credenziali da utilizzare per SPNEGO nella forma  type:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"If enabled, the authentik-stored password will be updated upon login with "
+"the Kerberos password backend"
+msgstr ""
+"Se abilitato, la password memorizzata in authentik verrà aggiornata al login"
+" nel backend Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source"
+msgstr "Sorgente Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Sources"
+msgstr "Sorgenti Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mapping"
+msgstr "Mappa delle proprietà della sorgente kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mappings"
+msgstr "Mappe delle proprietà della sorgente kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connection"
+msgstr "Connessione sorgente dell'utente kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connections"
+msgstr " Connessioni alle sorgente dell'utente kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connection"
+msgstr " Connessione sorgente del gruppo kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connections"
+msgstr "Connessioni alle sorgenti del gruppo kerberos"
+
+#: authentik/sources/kerberos/views.py
+msgid "SPNEGO authentication required"
+msgstr "autenticazione  SPNEGO necessaria"
+
+#: authentik/sources/kerberos/views.py
+msgid ""
+"\n"
+"                    Make sure you have valid tickets (obtainable via kinit)\n"
+"                    and configured the browser correctly.\n"
+"                    Please contact your administrator.\n"
+"                "
+msgstr ""
+"\n"
+"Assicurati di avere un ticket valido (ottenibile tramite kinit)\n"
+" e di aver configurato correttamente il browser. \n"
+"Contatta il tuo amministratore."
+
 #: authentik/sources/ldap/api.py
 msgid "Only a single LDAP Source with password synchronization is allowed"
 msgstr ""
@@ -2735,13 +2877,10 @@ msgid "Captcha Stages"
 msgstr "Fasi Captcha"
 
 #: authentik/stages/captcha/stage.py
-msgid "Unknown error"
-msgstr "Errore sconosciuto"
-
-#: authentik/stages/captcha/stage.py
-#, python-brace-format
-msgid "Failed to validate token: {error}"
-msgstr "Impossibile convalidare il token: {error}"
+msgid "Invalid captcha response. Retrying may solve this issue."
+msgstr ""
+"Risposta captcha non valida. Un nuovo tentativo potrebbe risolvere il "
+"problema."
 
 #: authentik/stages/captcha/stage.py
 msgid "Invalid captcha response"
@@ -3114,6 +3253,10 @@ msgstr "Database utente + password app"
 msgid "User database + LDAP password"
 msgstr "Database utenti + password LDAP"
 
+#: authentik/stages/password/models.py
+msgid "User database + Kerberos password"
+msgstr "Database utenti + password Kerberos"
+
 #: authentik/stages/password/models.py
 msgid "Selection of backends to test the password against."
 msgstr "Selezione di backend su cui testare la password."
diff --git a/locale/zh-Hans/LC_MESSAGES/django.mo b/locale/zh-Hans/LC_MESSAGES/django.mo
index 3377f5d239..05a66744b3 100644
Binary files a/locale/zh-Hans/LC_MESSAGES/django.mo and b/locale/zh-Hans/LC_MESSAGES/django.mo differ
diff --git a/locale/zh-Hans/LC_MESSAGES/django.po b/locale/zh-Hans/LC_MESSAGES/django.po
index d2b79c466b..947dab8ebd 100644
--- a/locale/zh-Hans/LC_MESSAGES/django.po
+++ b/locale/zh-Hans/LC_MESSAGES/django.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-10-18 00:09+0000\n"
+"POT-Creation-Date: 2024-10-28 00:09+0000\n"
 "PO-Revision-Date: 2022-09-26 16:47+0000\n"
 "Last-Translator: deluxghost, 2024\n"
 "Language-Team: Chinese Simplified (https://app.transifex.com/authentik/teams/119923/zh-Hans/)\n"
@@ -540,6 +540,26 @@ msgstr "已达到最大连接数。"
 msgid "(You are already connected in another tab/window)"
 msgstr "（您已经在另一个标签页/窗口连接了）"
 
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stage"
+msgstr "端点身份验证器 Google 设备信任连接器阶段"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stages"
+msgstr "端点身份验证器 Google 设备信任连接器阶段"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Device"
+msgstr "端点设备"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Devices"
+msgstr "端点设备"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/stage.py
+msgid "Verifying your browser..."
+msgstr "正在验证您的浏览器…"
+
 #: authentik/enterprise/stages/source/models.py
 msgid ""
 "Amount of time a user can take to return from the source to continue the "
@@ -1848,6 +1868,112 @@ msgstr "创建一个密钥，可用于恢复对 authentik 的访问权限。"
 msgid "Used recovery-link to authenticate."
 msgstr "已使用恢复链接进行身份验证。"
 
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos realm"
+msgstr "Kerberos 领域"
+
+#: authentik/sources/kerberos/models.py
+msgid "Custom krb5.conf to use. Uses the system one by default"
+msgstr "要使用的自定义 krb5.conf。默认使用系统自带"
+
+#: authentik/sources/kerberos/models.py
+msgid "Sync users from Kerberos into authentik"
+msgstr "从 Kerberos 同步用户到 authentik"
+
+#: authentik/sources/kerberos/models.py
+msgid "When a user changes their password, sync it back to Kerberos"
+msgstr "当用户修改密码时，将其同步回 Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Principal to authenticate to kadmin for sync."
+msgstr "向 kadmin 进行身份验证以进行同步的主体。"
+
+#: authentik/sources/kerberos/models.py
+msgid "Password to authenticate to kadmin for sync"
+msgstr "向 kadmin 进行身份验证以进行同步的密码"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Keytab to authenticate to kadmin for sync. Must be base64-encoded or in the "
+"form TYPE:residual"
+msgstr "向 kadmin 进行身份验证以进行同步的 Keytab。必须以 Base64 编码，或者形式为 TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Credentials cache to authenticate to kadmin for sync. Must be in the form "
+"TYPE:residual"
+msgstr "向 kadmin 进行身份验证以进行同步的凭据缓存。形式必须为 TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Force the use of a specific server name for SPNEGO. Must be in the form "
+"HTTP@hostname"
+msgstr "强制为 SPNEGO 使用特定服务器名称。形式必须为 HTTP@主机名"
+
+#: authentik/sources/kerberos/models.py
+msgid "SPNEGO keytab base64-encoded or path to keytab in the form FILE:path"
+msgstr "以 Base64 编码的 SPNEGO Keytab 或 FILE:path 形式的 Keytab 路径"
+
+#: authentik/sources/kerberos/models.py
+msgid "Credential cache to use for SPNEGO in form type:residual"
+msgstr "SPNEGO 使用的凭据缓存，形式为 type:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"If enabled, the authentik-stored password will be updated upon login with "
+"the Kerberos password backend"
+msgstr "启用时，authentik 存储的密码将会在使用 Kerberos 密码后端登录时更新"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source"
+msgstr "Kerberos 源"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Sources"
+msgstr "Kerberos 源"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mapping"
+msgstr "Kerberos 源属性映射"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mappings"
+msgstr "Kerberos 源属性映射"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connection"
+msgstr "用户 Kerberos 源连接"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connections"
+msgstr "用户 Kerberos 源连接"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connection"
+msgstr "组 Kerberos 源连接"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connections"
+msgstr "组 Kerberos 源连接"
+
+#: authentik/sources/kerberos/views.py
+msgid "SPNEGO authentication required"
+msgstr "需要 SPNEGO 身份验证"
+
+#: authentik/sources/kerberos/views.py
+msgid ""
+"\n"
+"                    Make sure you have valid tickets (obtainable via kinit)\n"
+"                    and configured the browser correctly.\n"
+"                    Please contact your administrator.\n"
+"                "
+msgstr ""
+"\n"
+"                    请确认您拥有有效票据（通过 kinit 获得）\n"
+"                    并且已正确配置浏览器。\n"
+"                    请联系您的管理员。\n"
+"                "
+
 #: authentik/sources/ldap/api.py
 msgid "Only a single LDAP Source with password synchronization is allowed"
 msgstr "仅允许使用密码同步的单个 LDAP 源"
@@ -2523,13 +2649,8 @@ msgid "Captcha Stages"
 msgstr "验证码阶段"
 
 #: authentik/stages/captcha/stage.py
-msgid "Unknown error"
-msgstr "未知错误"
-
-#: authentik/stages/captcha/stage.py
-#, python-brace-format
-msgid "Failed to validate token: {error}"
-msgstr "验证令牌失败：{error}"
+msgid "Invalid captcha response. Retrying may solve this issue."
+msgstr "无效的验证码响应。重试可能会解决此问题。"
 
 #: authentik/stages/captcha/stage.py
 msgid "Invalid captcha response"
@@ -2876,6 +2997,10 @@ msgstr "用户数据库 + 应用程序密码"
 msgid "User database + LDAP password"
 msgstr "用户数据库 + LDAP 密码"
 
+#: authentik/stages/password/models.py
+msgid "User database + Kerberos password"
+msgstr "用户数据库 + Kerberos 密码"
+
 #: authentik/stages/password/models.py
 msgid "Selection of backends to test the password against."
 msgstr "选择用于测试密码的后端。"
diff --git a/locale/zh_CN/LC_MESSAGES/django.po b/locale/zh_CN/LC_MESSAGES/django.po
index f3a6d452c4..edd40cbf85 100644
--- a/locale/zh_CN/LC_MESSAGES/django.po
+++ b/locale/zh_CN/LC_MESSAGES/django.po
@@ -14,7 +14,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-10-18 00:09+0000\n"
+"POT-Creation-Date: 2024-10-28 00:09+0000\n"
 "PO-Revision-Date: 2022-09-26 16:47+0000\n"
 "Last-Translator: deluxghost, 2024\n"
 "Language-Team: Chinese (China) (https://app.transifex.com/authentik/teams/119923/zh_CN/)\n"
@@ -539,6 +539,26 @@ msgstr "已达到最大连接数。"
 msgid "(You are already connected in another tab/window)"
 msgstr "（您已经在另一个标签页/窗口连接了）"
 
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stage"
+msgstr "端点身份验证器 Google 设备信任连接器阶段"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Authenticator Google Device Trust Connector Stages"
+msgstr "端点身份验证器 Google 设备信任连接器阶段"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Device"
+msgstr "端点设备"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
+msgid "Endpoint Devices"
+msgstr "端点设备"
+
+#: authentik/enterprise/stages/authenticator_endpoint_gdtc/stage.py
+msgid "Verifying your browser..."
+msgstr "正在验证您的浏览器…"
+
 #: authentik/enterprise/stages/source/models.py
 msgid ""
 "Amount of time a user can take to return from the source to continue the "
@@ -1847,6 +1867,112 @@ msgstr "创建一个密钥，可用于恢复对 authentik 的访问权限。"
 msgid "Used recovery-link to authenticate."
 msgstr "已使用恢复链接进行身份验证。"
 
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos realm"
+msgstr "Kerberos 领域"
+
+#: authentik/sources/kerberos/models.py
+msgid "Custom krb5.conf to use. Uses the system one by default"
+msgstr "要使用的自定义 krb5.conf。默认使用系统自带"
+
+#: authentik/sources/kerberos/models.py
+msgid "Sync users from Kerberos into authentik"
+msgstr "从 Kerberos 同步用户到 authentik"
+
+#: authentik/sources/kerberos/models.py
+msgid "When a user changes their password, sync it back to Kerberos"
+msgstr "当用户修改密码时，将其同步回 Kerberos"
+
+#: authentik/sources/kerberos/models.py
+msgid "Principal to authenticate to kadmin for sync."
+msgstr "向 kadmin 进行身份验证以进行同步的主体。"
+
+#: authentik/sources/kerberos/models.py
+msgid "Password to authenticate to kadmin for sync"
+msgstr "向 kadmin 进行身份验证以进行同步的密码"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Keytab to authenticate to kadmin for sync. Must be base64-encoded or in the "
+"form TYPE:residual"
+msgstr "向 kadmin 进行身份验证以进行同步的 Keytab。必须以 Base64 编码，或者形式为 TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Credentials cache to authenticate to kadmin for sync. Must be in the form "
+"TYPE:residual"
+msgstr "向 kadmin 进行身份验证以进行同步的凭据缓存。形式必须为 TYPE:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"Force the use of a specific server name for SPNEGO. Must be in the form "
+"HTTP@hostname"
+msgstr "强制为 SPNEGO 使用特定服务器名称。形式必须为 HTTP@主机名"
+
+#: authentik/sources/kerberos/models.py
+msgid "SPNEGO keytab base64-encoded or path to keytab in the form FILE:path"
+msgstr "以 Base64 编码的 SPNEGO Keytab 或 FILE:path 形式的 Keytab 路径"
+
+#: authentik/sources/kerberos/models.py
+msgid "Credential cache to use for SPNEGO in form type:residual"
+msgstr "SPNEGO 使用的凭据缓存，形式为 type:residual"
+
+#: authentik/sources/kerberos/models.py
+msgid ""
+"If enabled, the authentik-stored password will be updated upon login with "
+"the Kerberos password backend"
+msgstr "启用时，authentik 存储的密码将会在使用 Kerberos 密码后端登录时更新"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source"
+msgstr "Kerberos 源"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Sources"
+msgstr "Kerberos 源"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mapping"
+msgstr "Kerberos 源属性映射"
+
+#: authentik/sources/kerberos/models.py
+msgid "Kerberos Source Property Mappings"
+msgstr "Kerberos 源属性映射"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connection"
+msgstr "用户 Kerberos 源连接"
+
+#: authentik/sources/kerberos/models.py
+msgid "User Kerberos Source Connections"
+msgstr "用户 Kerberos 源连接"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connection"
+msgstr "组 Kerberos 源连接"
+
+#: authentik/sources/kerberos/models.py
+msgid "Group Kerberos Source Connections"
+msgstr "组 Kerberos 源连接"
+
+#: authentik/sources/kerberos/views.py
+msgid "SPNEGO authentication required"
+msgstr "需要 SPNEGO 身份验证"
+
+#: authentik/sources/kerberos/views.py
+msgid ""
+"\n"
+"                    Make sure you have valid tickets (obtainable via kinit)\n"
+"                    and configured the browser correctly.\n"
+"                    Please contact your administrator.\n"
+"                "
+msgstr ""
+"\n"
+"                    请确认您拥有有效票据（通过 kinit 获得）\n"
+"                    并且已正确配置浏览器。\n"
+"                    请联系您的管理员。\n"
+"                "
+
 #: authentik/sources/ldap/api.py
 msgid "Only a single LDAP Source with password synchronization is allowed"
 msgstr "仅允许使用密码同步的单个 LDAP 源"
@@ -2522,13 +2648,8 @@ msgid "Captcha Stages"
 msgstr "验证码阶段"
 
 #: authentik/stages/captcha/stage.py
-msgid "Unknown error"
-msgstr "未知错误"
-
-#: authentik/stages/captcha/stage.py
-#, python-brace-format
-msgid "Failed to validate token: {error}"
-msgstr "验证令牌失败：{error}"
+msgid "Invalid captcha response. Retrying may solve this issue."
+msgstr "无效的验证码响应。重试可能会解决此问题。"
 
 #: authentik/stages/captcha/stage.py
 msgid "Invalid captcha response"
@@ -2875,6 +2996,10 @@ msgstr "用户数据库 + 应用程序密码"
 msgid "User database + LDAP password"
 msgstr "用户数据库 + LDAP 密码"
 
+#: authentik/stages/password/models.py
+msgid "User database + Kerberos password"
+msgstr "用户数据库 + Kerberos 密码"
+
 #: authentik/stages/password/models.py
 msgid "Selection of backends to test the password against."
 msgstr "选择用于测试密码的后端。"
diff --git a/poetry.lock b/poetry.lock
index 477f4034d8..9fde46832f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1849,35 +1849,36 @@ grpc = ["grpcio (>=1.44.0,<2.0.0.dev0)"]
 
 [[package]]
 name = "gssapi"
-version = "1.8.3"
+version = "1.9.0"
 description = "Python GSSAPI Wrapper"
 optional = false
-python-versions = ">=3.7"
+python-versions = ">=3.8"
 files = [
-    {file = "gssapi-1.8.3-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:4e4a83e9b275fe69b5d40be6d5479889866b80333a12c51a9243f2712d4f0554"},
-    {file = "gssapi-1.8.3-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:8d57d67547e18f4e44a688bfb20abbf176d1b8df547da2b31c3f2df03cfdc269"},
-    {file = "gssapi-1.8.3-cp310-cp310-win32.whl", hash = "sha256:3a3f63105f39c4af29ffc8f7b6542053d87fe9d63010c689dd9a9f5571facb8e"},
-    {file = "gssapi-1.8.3-cp310-cp310-win_amd64.whl", hash = "sha256:b031c0f186ab4275186da385b2c7470dd47c9b27522cb3b753757c9ac4bebf11"},
-    {file = "gssapi-1.8.3-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:b03d6b30f1fcd66d9a688b45a97e302e4dd3f1386d5c333442731aec73cdb409"},
-    {file = "gssapi-1.8.3-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:ca6ceb17fc15eda2a69f2e8c6cf10d11e2edb32832255e5d4c65b21b6db4680a"},
-    {file = "gssapi-1.8.3-cp311-cp311-win32.whl", hash = "sha256:edc8ef3a9e397dbe18bb6016f8e2209969677b534316d20bb139da2865a38efe"},
-    {file = "gssapi-1.8.3-cp311-cp311-win_amd64.whl", hash = "sha256:8fdb1ff130cee49bc865ec1624dee8cf445cd6c6e93b04bffef2c6f363a60cb9"},
-    {file = "gssapi-1.8.3-cp312-cp312-macosx_10_9_x86_64.whl", hash = "sha256:19c373b3ba63ce19cd3163aa1495635e3d01b0de6cc4ff1126095eded1df6e01"},
-    {file = "gssapi-1.8.3-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:37f1a8046d695f2c9b8d640a6e385780d3945c0741571ed6fee6f94c31e431dc"},
-    {file = "gssapi-1.8.3-cp312-cp312-win32.whl", hash = "sha256:338db18612e3e6ed64e92b6d849242a535fdc98b365f21122992fb8cae737617"},
-    {file = "gssapi-1.8.3-cp312-cp312-win_amd64.whl", hash = "sha256:5731c5b40ecc3116cfe7fb7e1d1e128583ec8b3df1e68bf8cd12073160793acd"},
-    {file = "gssapi-1.8.3-cp37-cp37m-macosx_10_9_x86_64.whl", hash = "sha256:e556878da197ad115a566d36e46a8082d0079731d9c24d1ace795132d725ff2a"},
-    {file = "gssapi-1.8.3-cp37-cp37m-win32.whl", hash = "sha256:e2bb081f2db2111377effe7d40ba23f9a87359b9d2f4881552b731e9da88b36b"},
-    {file = "gssapi-1.8.3-cp37-cp37m-win_amd64.whl", hash = "sha256:4d9ed83f2064cda60aad90e6840ae282096801b2c814b8cbd390bf0df4635aab"},
-    {file = "gssapi-1.8.3-cp38-cp38-macosx_10_9_x86_64.whl", hash = "sha256:7d91fe6e2a5c89b32102ea8e374b8ae13b9031d43d7b55f3abc1f194ddce820d"},
-    {file = "gssapi-1.8.3-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:d5b28237afc0668046934792756dd4b6b7e957b0d95a608d02f296734a2819ad"},
-    {file = "gssapi-1.8.3-cp38-cp38-win32.whl", hash = "sha256:791e44f7bea602b8e3da1ec56fbdb383b8ee3326fdeb736f904c2aa9af13a67d"},
-    {file = "gssapi-1.8.3-cp38-cp38-win_amd64.whl", hash = "sha256:5b4bf84d0a6d7779a4bf11dacfd3db57ae02dd53562e2aeadac4219a68eaee07"},
-    {file = "gssapi-1.8.3-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:e40efc88ccefefd6142f8c47b8af498731938958b808bad49990442a91f45160"},
-    {file = "gssapi-1.8.3-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:ee74b9211c977b9181ff4652d886d7712c9a221560752a35393b58e5ea07887a"},
-    {file = "gssapi-1.8.3-cp39-cp39-win32.whl", hash = "sha256:465c6788f2ac6ef7c738394ba8fde1ede6004e5721766f386add63891d8c90af"},
-    {file = "gssapi-1.8.3-cp39-cp39-win_amd64.whl", hash = "sha256:8fb8ee70458f47b51ed881a6881f30b187c987c02af16cc0fff0079255d4d465"},
-    {file = "gssapi-1.8.3.tar.gz", hash = "sha256:aa3c8d0b1526f52559552bb2c9d2d6be013d76a8e5db00b39a1db5727e93b0b0"},
+    {file = "gssapi-1.9.0-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:261e00ac426d840055ddb2199f4989db7e3ce70fa18b1538f53e392b4823e8f1"},
+    {file = "gssapi-1.9.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:14a1ae12fdf1e4c8889206195ba1843de09fe82587fa113112887cd5894587c6"},
+    {file = "gssapi-1.9.0-cp310-cp310-win32.whl", hash = "sha256:2a9c745255e3a810c3e8072e267b7b302de0705f8e9a0f2c5abc92fe12b9475e"},
+    {file = "gssapi-1.9.0-cp310-cp310-win_amd64.whl", hash = "sha256:dfc1b4c0bfe9f539537601c9f187edc320daf488f694e50d02d0c1eb37416962"},
+    {file = "gssapi-1.9.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:67d9be5e34403e47fb5749d5a1ad4e5a85b568e6a9add1695edb4a5b879f7560"},
+    {file = "gssapi-1.9.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:11e9b92cef11da547fc8c210fa720528fd854038504103c1b15ae2a89dce5fcd"},
+    {file = "gssapi-1.9.0-cp311-cp311-win32.whl", hash = "sha256:6c5f8a549abd187687440ec0b72e5b679d043d620442b3637d31aa2766b27cbe"},
+    {file = "gssapi-1.9.0-cp311-cp311-win_amd64.whl", hash = "sha256:59e1a1a9a6c5dc430dc6edfcf497f5ca00cf417015f781c9fac2e85652cd738f"},
+    {file = "gssapi-1.9.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:b66a98827fbd2864bf8993677a039d7ba4a127ca0d2d9ed73e0ef4f1baa7fd7f"},
+    {file = "gssapi-1.9.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:2bddd1cc0c9859c5e0fd96d4d88eb67bd498fdbba45b14cdccfe10bfd329479f"},
+    {file = "gssapi-1.9.0-cp312-cp312-win32.whl", hash = "sha256:10134db0cf01bd7d162acb445762dbcc58b5c772a613e17c46cf8ad956c4dfec"},
+    {file = "gssapi-1.9.0-cp312-cp312-win_amd64.whl", hash = "sha256:e28c7d45da68b7e36ed3fb3326744bfe39649f16e8eecd7b003b082206039c76"},
+    {file = "gssapi-1.9.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:cea344246935b5337e6f8a69bb6cc45619ab3a8d74a29fcb0a39fd1e5843c89c"},
+    {file = "gssapi-1.9.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:1a5786bd9fcf435bd0c87dc95ae99ad68cefcc2bcc80c71fef4cb0ccdfb40f1e"},
+    {file = "gssapi-1.9.0-cp313-cp313-win32.whl", hash = "sha256:c99959a9dd62358e370482f1691e936cb09adf9a69e3e10d4f6a097240e9fd28"},
+    {file = "gssapi-1.9.0-cp313-cp313-win_amd64.whl", hash = "sha256:a2e43f50450e81fe855888c53df70cdd385ada979db79463b38031710a12acd9"},
+    {file = "gssapi-1.9.0-cp38-cp38-macosx_10_9_x86_64.whl", hash = "sha256:c0e378d62b2fc352ca0046030cda5911d808a965200f612fdd1d74501b83e98f"},
+    {file = "gssapi-1.9.0-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:b74031c70864d04864b7406c818f41be0c1637906fb9654b06823bcc79f151dc"},
+    {file = "gssapi-1.9.0-cp38-cp38-win32.whl", hash = "sha256:f2f3a46784d8127cc7ef10d3367dedcbe82899ea296710378ccc9b7cefe96f4c"},
+    {file = "gssapi-1.9.0-cp38-cp38-win_amd64.whl", hash = "sha256:a81f30cde21031e7b1f8194a3eea7285e39e551265e7744edafd06eadc1c95bc"},
+    {file = "gssapi-1.9.0-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:cbc93fdadd5aab9bae594538b2128044b8c5cdd1424fe015a465d8a8a587411a"},
+    {file = "gssapi-1.9.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:5b2a3c0a9beb895942d4b8e31f515e52c17026e55aeaa81ee0df9bbfdac76098"},
+    {file = "gssapi-1.9.0-cp39-cp39-win32.whl", hash = "sha256:060b58b455d29ab8aca74770e667dca746264bee660ac5b6a7a17476edc2c0b8"},
+    {file = "gssapi-1.9.0-cp39-cp39-win_amd64.whl", hash = "sha256:11c9fe066edb0fa0785697eb0cecf2719c7ad1d9f2bf27be57b647a617bcfaa5"},
+    {file = "gssapi-1.9.0.tar.gz", hash = "sha256:f468fac8f3f5fca8f4d1ca19e3cd4d2e10bd91074e7285464b22715d13548afe"},
 ]
 
 [package.dependencies]
@@ -3895,13 +3896,13 @@ pytest = ">=4.0.0"
 
 [[package]]
 name = "pytest-randomly"
-version = "3.15.0"
+version = "3.16.0"
 description = "Pytest plugin to randomly order tests and control random.seed."
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.9"
 files = [
-    {file = "pytest_randomly-3.15.0-py3-none-any.whl", hash = "sha256:0516f4344b29f4e9cdae8bce31c4aeebf59d0b9ef05927c33354ff3859eeeca6"},
-    {file = "pytest_randomly-3.15.0.tar.gz", hash = "sha256:b908529648667ba5e54723088edd6f82252f540cc340d748d1fa985539687047"},
+    {file = "pytest_randomly-3.16.0-py3-none-any.whl", hash = "sha256:8633d332635a1a0983d3bba19342196807f6afb17c3eef78e02c2f85dade45d6"},
+    {file = "pytest_randomly-3.16.0.tar.gz", hash = "sha256:11bf4d23a26484de7860d82f726c0629837cf4064b79157bd18ec9d41d7feb26"},
 ]
 
 [package.dependencies]
@@ -4292,29 +4293,29 @@ pyasn1 = ">=0.1.3"
 
 [[package]]
 name = "ruff"
-version = "0.7.0"
+version = "0.7.1"
 description = "An extremely fast Python linter and code formatter, written in Rust."
 optional = false
 python-versions = ">=3.7"
 files = [
-    {file = "ruff-0.7.0-py3-none-linux_armv6l.whl", hash = "sha256:0cdf20c2b6ff98e37df47b2b0bd3a34aaa155f59a11182c1303cce79be715628"},
-    {file = "ruff-0.7.0-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:496494d350c7fdeb36ca4ef1c9f21d80d182423718782222c29b3e72b3512737"},
-    {file = "ruff-0.7.0-py3-none-macosx_11_0_arm64.whl", hash = "sha256:214b88498684e20b6b2b8852c01d50f0651f3cc6118dfa113b4def9f14faaf06"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:630fce3fefe9844e91ea5bbf7ceadab4f9981f42b704fae011bb8efcaf5d84be"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:211d877674e9373d4bb0f1c80f97a0201c61bcd1e9d045b6e9726adc42c156aa"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:194d6c46c98c73949a106425ed40a576f52291c12bc21399eb8f13a0f7073495"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:82c2579b82b9973a110fab281860403b397c08c403de92de19568f32f7178598"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:9af971fe85dcd5eaed8f585ddbc6bdbe8c217fb8fcf510ea6bca5bdfff56040e"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:b641c7f16939b7d24b7bfc0be4102c56562a18281f84f635604e8a6989948914"},
-    {file = "ruff-0.7.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d71672336e46b34e0c90a790afeac8a31954fd42872c1f6adaea1dff76fd44f9"},
-    {file = "ruff-0.7.0-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:ab7d98c7eed355166f367597e513a6c82408df4181a937628dbec79abb2a1fe4"},
-    {file = "ruff-0.7.0-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:1eb54986f770f49edb14f71d33312d79e00e629a57387382200b1ef12d6a4ef9"},
-    {file = "ruff-0.7.0-py3-none-musllinux_1_2_i686.whl", hash = "sha256:dc452ba6f2bb9cf8726a84aa877061a2462afe9ae0ea1d411c53d226661c601d"},
-    {file = "ruff-0.7.0-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:4b406c2dce5be9bad59f2de26139a86017a517e6bcd2688da515481c05a2cb11"},
-    {file = "ruff-0.7.0-py3-none-win32.whl", hash = "sha256:f6c968509f767776f524a8430426539587d5ec5c662f6addb6aa25bc2e8195ec"},
-    {file = "ruff-0.7.0-py3-none-win_amd64.whl", hash = "sha256:ff4aabfbaaba880e85d394603b9e75d32b0693152e16fa659a3064a85df7fce2"},
-    {file = "ruff-0.7.0-py3-none-win_arm64.whl", hash = "sha256:10842f69c245e78d6adec7e1db0a7d9ddc2fff0621d730e61657b64fa36f207e"},
-    {file = "ruff-0.7.0.tar.gz", hash = "sha256:47a86360cf62d9cd53ebfb0b5eb0e882193fc191c6d717e8bef4462bc3b9ea2b"},
+    {file = "ruff-0.7.1-py3-none-linux_armv6l.whl", hash = "sha256:cb1bc5ed9403daa7da05475d615739cc0212e861b7306f314379d958592aaa89"},
+    {file = "ruff-0.7.1-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:27c1c52a8d199a257ff1e5582d078eab7145129aa02721815ca8fa4f9612dc35"},
+    {file = "ruff-0.7.1-py3-none-macosx_11_0_arm64.whl", hash = "sha256:588a34e1ef2ea55b4ddfec26bbe76bc866e92523d8c6cdec5e8aceefeff02d99"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:94fc32f9cdf72dc75c451e5f072758b118ab8100727168a3df58502b43a599ca"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:985818742b833bffa543a84d1cc11b5e6871de1b4e0ac3060a59a2bae3969250"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:32f1e8a192e261366c702c5fb2ece9f68d26625f198a25c408861c16dc2dea9c"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:699085bf05819588551b11751eff33e9ca58b1b86a6843e1b082a7de40da1565"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:344cc2b0814047dc8c3a8ff2cd1f3d808bb23c6658db830d25147339d9bf9ea7"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:4316bbf69d5a859cc937890c7ac7a6551252b6a01b1d2c97e8fc96e45a7c8b4a"},
+    {file = "ruff-0.7.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:79d3af9dca4c56043e738a4d6dd1e9444b6d6c10598ac52d146e331eb155a8ad"},
+    {file = "ruff-0.7.1-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:c5c121b46abde94a505175524e51891f829414e093cd8326d6e741ecfc0a9112"},
+    {file = "ruff-0.7.1-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:8422104078324ea250886954e48f1373a8fe7de59283d747c3a7eca050b4e378"},
+    {file = "ruff-0.7.1-py3-none-musllinux_1_2_i686.whl", hash = "sha256:56aad830af8a9db644e80098fe4984a948e2b6fc2e73891538f43bbe478461b8"},
+    {file = "ruff-0.7.1-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:658304f02f68d3a83c998ad8bf91f9b4f53e93e5412b8f2388359d55869727fd"},
+    {file = "ruff-0.7.1-py3-none-win32.whl", hash = "sha256:b517a2011333eb7ce2d402652ecaa0ac1a30c114fbbd55c6b8ee466a7f600ee9"},
+    {file = "ruff-0.7.1-py3-none-win_amd64.whl", hash = "sha256:f38c41fcde1728736b4eb2b18850f6d1e3eedd9678c914dede554a70d5241307"},
+    {file = "ruff-0.7.1-py3-none-win_arm64.whl", hash = "sha256:19aa200ec824c0f36d0c9114c8ec0087082021732979a359d6f3c390a6ff2a37"},
+    {file = "ruff-0.7.1.tar.gz", hash = "sha256:9d8a41d4aa2dad1575adb98a82870cf5db5f76b2938cf2206c22c940034a36f4"},
 ]
 
 [[package]]
@@ -4424,13 +4425,13 @@ tornado = ["tornado (>=6)"]
 
 [[package]]
 name = "service-identity"
-version = "24.1.0"
+version = "24.2.0"
 description = "Service identity verification for pyOpenSSL & cryptography."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "service_identity-24.1.0-py3-none-any.whl", hash = "sha256:a28caf8130c8a5c1c7a6f5293faaf239bbfb7751e4862436920ee6f2616f568a"},
-    {file = "service_identity-24.1.0.tar.gz", hash = "sha256:6829c9d62fb832c2e1c435629b0a8c476e1929881f28bee4d20bc24161009221"},
+    {file = "service_identity-24.2.0-py3-none-any.whl", hash = "sha256:6b047fbd8a84fd0bb0d55ebce4031e400562b9196e1e0d3e0fe2b8a59f6d4a85"},
+    {file = "service_identity-24.2.0.tar.gz", hash = "sha256:b8683ba13f0d39c6cd5d625d2c5f65421d6d707b013b375c355751557cbe8e09"},
 ]
 
 [package.dependencies]
@@ -4440,7 +4441,7 @@ pyasn1 = "*"
 pyasn1-modules = "*"
 
 [package.extras]
-dev = ["pyopenssl", "service-identity[idna,mypy,tests]"]
+dev = ["coverage[toml] (>=5.0.2)", "idna", "mypy", "pyopenssl", "pytest", "types-pyopenssl"]
 docs = ["furo", "myst-parser", "pyopenssl", "sphinx", "sphinx-notfound-page"]
 idna = ["idna"]
 mypy = ["idna", "mypy", "types-pyopenssl"]
@@ -4750,13 +4751,13 @@ wsproto = ">=0.14"
 
 [[package]]
 name = "twilio"
-version = "9.3.4"
+version = "9.3.6"
 description = "Twilio API client and TwiML generator"
 optional = false
 python-versions = ">=3.7.0"
 files = [
-    {file = "twilio-9.3.4-py2.py3-none-any.whl", hash = "sha256:2cae99f0f7aecbd9da02fa59ad8f11b360db4a9281fc3fb3237ad50be21d8a9b"},
-    {file = "twilio-9.3.4.tar.gz", hash = "sha256:38a6ab04752f44313dcf736eae45236a901528d3f53dfc21d3afd33539243c7f"},
+    {file = "twilio-9.3.6-py2.py3-none-any.whl", hash = "sha256:c5d7f4cfeb50a7928397b8f819c8f7fb2bb956a1a2cabbda1df1d7a40f9ce1d7"},
+    {file = "twilio-9.3.6.tar.gz", hash = "sha256:d42691f7fe1faaa5ba82942f169bfea4d7f01a0a542a456d82018fb49bd1f5b2"},
 ]
 
 [package.dependencies]
diff --git a/schema.yml b/schema.yml
index d4f3eb78ac..c920d1ab11 100644
--- a/schema.yml
+++ b/schema.yml
@@ -33862,6 +33862,11 @@ paths:
       operationId: stages_identification_list
       description: IdentificationStage Viewset
       parameters:
+      - in: query
+        name: captcha_stage
+        schema:
+          type: string
+          format: uuid
       - in: query
         name: case_insensitive_matching
         schema:
@@ -40204,10 +40209,15 @@ components:
         challenge:
           type: object
           additionalProperties: {}
+        last_used:
+          type: string
+          format: date-time
+          nullable: true
       required:
       - challenge
       - device_class
       - device_uid
+      - last_used
     DeviceChallengeRequest:
       type: object
       description: Single device challenge
@@ -40221,10 +40231,15 @@ components:
         challenge:
           type: object
           additionalProperties: {}
+        last_used:
+          type: string
+          format: date-time
+          nullable: true
       required:
       - challenge
       - device_class
       - device_uid
+      - last_used
     DeviceClassesEnum:
       enum:
       - static
@@ -42494,6 +42509,8 @@ components:
           type: string
         flow_designation:
           $ref: '#/components/schemas/FlowDesignationEnum'
+        captcha_stage:
+          $ref: '#/components/schemas/CaptchaChallenge'
         enroll_url:
           type: string
         recovery_url:
@@ -42528,6 +42545,9 @@ components:
         password:
           type: string
           nullable: true
+        captcha_token:
+          type: string
+          nullable: true
       required:
       - uid_field
     IdentificationStage:
@@ -42573,6 +42593,12 @@ components:
           nullable: true
           description: When set, shows a password field, instead of showing the password
             field as separate step.
+        captcha_stage:
+          type: string
+          format: uuid
+          nullable: true
+          description: When set, adds functionality exactly like a Captcha stage,
+            but baked into the Identification stage.
         case_insensitive_matching:
           type: boolean
           description: When enabled, user fields are matched regardless of their casing.
@@ -42641,6 +42667,12 @@ components:
           nullable: true
           description: When set, shows a password field, instead of showing the password
             field as separate step.
+        captcha_stage:
+          type: string
+          format: uuid
+          nullable: true
+          description: When set, adds functionality exactly like a Captcha stage,
+            but baked into the Identification stage.
         case_insensitive_matching:
           type: boolean
           description: When enabled, user fields are matched regardless of their casing.
@@ -48231,6 +48263,12 @@ components:
           nullable: true
           description: When set, shows a password field, instead of showing the password
             field as separate step.
+        captcha_stage:
+          type: string
+          format: uuid
+          nullable: true
+          description: When set, adds functionality exactly like a Captcha stage,
+            but baked into the Identification stage.
         case_insensitive_matching:
           type: boolean
           description: When enabled, user fields are matched regardless of their casing.
diff --git a/web/package-lock.json b/web/package-lock.json
index cd7081bf4b..7e3799333c 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -23,7 +23,7 @@
                 "@floating-ui/dom": "^1.6.11",
                 "@formatjs/intl-listformat": "^7.5.7",
                 "@fortawesome/fontawesome-free": "^6.6.0",
-                "@goauthentik/api": "^2024.8.3-1729699127",
+                "@goauthentik/api": "^2024.8.3-1729836831",
                 "@lit-labs/ssr": "^3.2.2",
                 "@lit/context": "^1.1.2",
                 "@lit/localize": "^0.12.2",
@@ -1775,9 +1775,9 @@
             }
         },
         "node_modules/@goauthentik/api": {
-            "version": "2024.8.3-1729699127",
-            "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2024.8.3-1729699127.tgz",
-            "integrity": "sha512-luo0SAASR6BTTtLszDgfdwofBejv4F3hCHgPxeSoTSFgE8/A2+zJD8EtWPZaa1udDkwPa9lbIeJSSmbgFke3jA=="
+            "version": "2024.8.3-1729836831",
+            "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2024.8.3-1729836831.tgz",
+            "integrity": "sha512-nOgvjYQiK+HhWuiZ635h/aSsq7Mfj5cDrIyBJt+IJRQuJFtnnHx8nscRXKK/8sBl9obH2zMCoZgeqytK8145bg=="
         },
         "node_modules/@goauthentik/web": {
             "resolved": "",
diff --git a/web/package.json b/web/package.json
index 26a2b15b2b..1929e4fdb7 100644
--- a/web/package.json
+++ b/web/package.json
@@ -11,7 +11,7 @@
         "@floating-ui/dom": "^1.6.11",
         "@formatjs/intl-listformat": "^7.5.7",
         "@fortawesome/fontawesome-free": "^6.6.0",
-        "@goauthentik/api": "^2024.8.3-1729699127",
+        "@goauthentik/api": "^2024.8.3-1729836831",
         "@lit-labs/ssr": "^3.2.2",
         "@lit/context": "^1.1.2",
         "@lit/localize": "^0.12.2",
diff --git a/web/src/admin/applications/wizard/methods/ldap/ak-application-wizard-authentication-by-ldap.ts b/web/src/admin/applications/wizard/methods/ldap/ak-application-wizard-authentication-by-ldap.ts
index 75b392f714..aa1bbfbf5a 100644
--- a/web/src/admin/applications/wizard/methods/ldap/ak-application-wizard-authentication-by-ldap.ts
+++ b/web/src/admin/applications/wizard/methods/ldap/ak-application-wizard-authentication-by-ldap.ts
@@ -97,7 +97,7 @@ export class ApplicationWizardApplicationDetails extends WithBrandConfig(BasePro
                 </ak-radio-input>
 
                 <ak-switch-input
-                    name="openInNewTab"
+                    name="mfaSupport"
                     label=${msg("Code-based MFA Support")}
                     ?checked=${provider?.mfaSupport ?? true}
                     help=${mfaSupportHelp}
diff --git a/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts b/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts
index 8880d30061..db1d6517f8 100644
--- a/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts
+++ b/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts
@@ -113,9 +113,8 @@ export class ApplicationWizardAuthenticationByOauth extends BaseProviderPanel {
                         <ak-text-input
                             name="clientSecret"
                             label=${msg("Client Secret")}
-                            value=${
-                                provider?.clientSecret ?? randomString(128, ascii_letters + digits)
-                            }
+                            value=${provider?.clientSecret ??
+                            randomString(128, ascii_letters + digits)}
                             .errorMessages=${errors?.clientSecret ?? []}
                             ?hidden=${!this.showClientSecret}
                         >
@@ -150,35 +149,36 @@ export class ApplicationWizardAuthenticationByOauth extends BaseProviderPanel {
 
                 <ak-form-group>
                     <span slot="header"> ${msg("Advanced flow settings")} </span>
-                    <ak-form-element-horizontal
-                        name="authenticationFlow"
-                        label=${msg("Authentication flow")}
-                    >
-                        <ak-flow-search
-                            flowType=${FlowsInstancesListDesignationEnum.Authentication}
-                            .currentFlow=${provider?.authenticationFlow}
-                        ></ak-flow-search>
-                        <p class="pf-c-form__helper-text">
-                            ${msg(
-                                "Flow used when a user access this provider and is not authenticated.",
-                            )}
-                        </p>
-                    </ak-form-element-horizontal>
-                    <ak-form-element-horizontal
-                        label=${msg("Invalidation flow")}
-                        name="invalidationFlow"
-                        required
-                    >
-                        <ak-flow-search
-                            flowType=${FlowsInstancesListDesignationEnum.Invalidation}
-                            .currentFlow=${provider?.invalidationFlow}
-                            defaultFlowSlug="default-provider-invalidation-flow"
+                    <div slot="body" class="pf-c-form">
+                        <ak-form-element-horizontal
+                            name="authenticationFlow"
+                            label=${msg("Authentication flow")}
+                        >
+                            <ak-flow-search
+                                flowType=${FlowsInstancesListDesignationEnum.Authentication}
+                                .currentFlow=${provider?.authenticationFlow}
+                            ></ak-flow-search>
+                            <p class="pf-c-form__helper-text">
+                                ${msg(
+                                    "Flow used when a user access this provider and is not authenticated.",
+                                )}
+                            </p>
+                        </ak-form-element-horizontal>
+                        <ak-form-element-horizontal
+                            label=${msg("Invalidation flow")}
+                            name="invalidationFlow"
                             required
-                        ></ak-flow-search>
-                        <p class="pf-c-form__helper-text">
-                            ${msg("Flow used when logging out of this provider.")}
-                        </p>
-                    </ak-form-element-horizontal>
+                        >
+                            <ak-flow-search
+                                flowType=${FlowsInstancesListDesignationEnum.Invalidation}
+                                .currentFlow=${provider?.invalidationFlow}
+                                defaultFlowSlug="default-provider-invalidation-flow"
+                                required
+                            ></ak-flow-search>
+                            <p class="pf-c-form__helper-text">
+                                ${msg("Flow used when logging out of this provider.")}
+                            </p>
+                        </ak-form-element-horizontal>
                     </div>
                 </ak-form-group>
                 <ak-form-group>
diff --git a/web/src/admin/applications/wizard/methods/proxy/AuthenticationByProxyPage.ts b/web/src/admin/applications/wizard/methods/proxy/AuthenticationByProxyPage.ts
index e6d66aea6f..867efbd0b3 100644
--- a/web/src/admin/applications/wizard/methods/proxy/AuthenticationByProxyPage.ts
+++ b/web/src/admin/applications/wizard/methods/proxy/AuthenticationByProxyPage.ts
@@ -161,11 +161,9 @@ export class AkTypeProxyApplicationWizardPage extends BaseProviderPanel {
 
                         <ak-textarea-input
                             name="skipPathRegex"
-                            label=${
-                                this.mode === ProxyMode.ForwardDomain
-                                    ? msg("Unauthenticated URLs")
-                                    : msg("Unauthenticated Paths")
-                            }
+                            label=${this.mode === ProxyMode.ForwardDomain
+                                ? msg("Unauthenticated URLs")
+                                : msg("Unauthenticated Paths")}
                             value=${ifDefined(this.instance?.skipPathRegex)}
                             .errorMessages=${errors?.skipPathRegex ?? []}
                             .bighelp=${html` <p class="pf-c-form__helper-text">
@@ -184,35 +182,36 @@ export class AkTypeProxyApplicationWizardPage extends BaseProviderPanel {
                 </ak-form-group>
                 <ak-form-group>
                     <span slot="header"> ${msg("Advanced flow settings")} </span>
-                    <ak-form-element-horizontal
-                        name="authenticationFlow"
-                        label=${msg("Authentication flow")}
-                    >
-                        <ak-flow-search
-                            flowType=${FlowsInstancesListDesignationEnum.Authentication}
-                            .currentFlow=${this.instance?.authenticationFlow}
-                        ></ak-flow-search>
-                        <p class="pf-c-form__helper-text">
-                            ${msg(
-                                "Flow used when a user access this provider and is not authenticated.",
-                            )}
-                        </p>
-                    </ak-form-element-horizontal>
-                    <ak-form-element-horizontal
-                        label=${msg("Invalidation flow")}
-                        name="invalidationFlow"
-                        required
-                    >
-                        <ak-flow-search
-                            flowType=${FlowsInstancesListDesignationEnum.Invalidation}
-                            .currentFlow=${this.instance?.invalidationFlow}
-                            defaultFlowSlug="default-provider-invalidation-flow"
+                    <div slot="body" class="pf-c-form">
+                        <ak-form-element-horizontal
+                            name="authenticationFlow"
+                            label=${msg("Authentication flow")}
+                        >
+                            <ak-flow-search
+                                flowType=${FlowsInstancesListDesignationEnum.Authentication}
+                                .currentFlow=${this.instance?.authenticationFlow}
+                            ></ak-flow-search>
+                            <p class="pf-c-form__helper-text">
+                                ${msg(
+                                    "Flow used when a user access this provider and is not authenticated.",
+                                )}
+                            </p>
+                        </ak-form-element-horizontal>
+                        <ak-form-element-horizontal
+                            label=${msg("Invalidation flow")}
+                            name="invalidationFlow"
                             required
-                        ></ak-flow-search>
-                        <p class="pf-c-form__helper-text">
-                            ${msg("Flow used when logging out of this provider.")}
-                        </p>
-                    </ak-form-element-horizontal>
+                        >
+                            <ak-flow-search
+                                flowType=${FlowsInstancesListDesignationEnum.Invalidation}
+                                .currentFlow=${this.instance?.invalidationFlow}
+                                defaultFlowSlug="default-provider-invalidation-flow"
+                                required
+                            ></ak-flow-search>
+                            <p class="pf-c-form__helper-text">
+                                ${msg("Flow used when logging out of this provider.")}
+                            </p>
+                        </ak-form-element-horizontal>
                     </div>
                 </ak-form-group>
                 <ak-form-group>
diff --git a/web/src/admin/applications/wizard/methods/saml/ak-application-wizard-authentication-by-saml-configuration.ts b/web/src/admin/applications/wizard/methods/saml/ak-application-wizard-authentication-by-saml-configuration.ts
index 61c1f6403d..54cbe258ca 100644
--- a/web/src/admin/applications/wizard/methods/saml/ak-application-wizard-authentication-by-saml-configuration.ts
+++ b/web/src/admin/applications/wizard/methods/saml/ak-application-wizard-authentication-by-saml-configuration.ts
@@ -146,36 +146,37 @@ export class ApplicationWizardProviderSamlConfiguration extends BaseProviderPane
                 </ak-form-group>
 
                 <ak-form-group>
-                    <span slot="header"> ${msg("Advanced flow settings")} </span>
-                    <ak-form-element-horizontal
-                        name="authenticationFlow"
-                        label=${msg("Authentication flow")}
-                    >
-                        <ak-flow-search
-                            flowType=${FlowsInstancesListDesignationEnum.Authentication}
-                            .currentFlow=${provider?.authenticationFlow}
-                        ></ak-flow-search>
-                        <p class="pf-c-form__helper-text">
-                            ${msg(
-                                "Flow used when a user access this provider and is not authenticated.",
-                            )}
-                        </p>
-                    </ak-form-element-horizontal>
-                    <ak-form-element-horizontal
-                        label=${msg("Invalidation flow")}
-                        name="invalidationFlow"
-                        required
-                    >
-                        <ak-flow-search
-                            flowType=${FlowsInstancesListDesignationEnum.Invalidation}
-                            .currentFlow=${provider?.invalidationFlow}
-                            defaultFlowSlug="default-provider-invalidation-flow"
+                    <span slot="header"> ${msg("Advanced flow settings")}</span>
+                    <div slot="body" class="pf-c-form">
+                        <ak-form-element-horizontal
+                            name="authenticationFlow"
+                            label=${msg("Authentication flow")}
+                        >
+                            <ak-flow-search
+                                flowType=${FlowsInstancesListDesignationEnum.Authentication}
+                                .currentFlow=${provider?.authenticationFlow}
+                            ></ak-flow-search>
+                            <p class="pf-c-form__helper-text">
+                                ${msg(
+                                    "Flow used when a user access this provider and is not authenticated.",
+                                )}
+                            </p>
+                        </ak-form-element-horizontal>
+                        <ak-form-element-horizontal
+                            label=${msg("Invalidation flow")}
+                            name="invalidationFlow"
                             required
-                        ></ak-flow-search>
-                        <p class="pf-c-form__helper-text">
-                            ${msg("Flow used when logging out of this provider.")}
-                        </p>
-                    </ak-form-element-horizontal>
+                        >
+                            <ak-flow-search
+                                flowType=${FlowsInstancesListDesignationEnum.Invalidation}
+                                .currentFlow=${provider?.invalidationFlow}
+                                defaultFlowSlug="default-provider-invalidation-flow"
+                                required
+                            ></ak-flow-search>
+                            <p class="pf-c-form__helper-text">
+                                ${msg("Flow used when logging out of this provider.")}
+                            </p>
+                        </ak-form-element-horizontal>
                     </div>
                 </ak-form-group>
                 <ak-form-group>
@@ -199,60 +200,52 @@ export class ApplicationWizardProviderSamlConfiguration extends BaseProviderPane
                                 )}
                             </p>
                         </ak-form-element-horizontal>
-                        ${
-                            this.hasSigningKp
-                                ? html` <ak-form-element-horizontal name="signAssertion">
-                                          <label class="pf-c-switch">
-                                              <input
-                                                  class="pf-c-switch__input"
-                                                  type="checkbox"
-                                                  ?checked=${first(provider?.signAssertion, true)}
-                                              />
-                                              <span class="pf-c-switch__toggle">
-                                                  <span class="pf-c-switch__toggle-icon">
-                                                      <i
-                                                          class="fas fa-check"
-                                                          aria-hidden="true"
-                                                      ></i>
-                                                  </span>
+                        ${this.hasSigningKp
+                            ? html` <ak-form-element-horizontal name="signAssertion">
+                                      <label class="pf-c-switch">
+                                          <input
+                                              class="pf-c-switch__input"
+                                              type="checkbox"
+                                              ?checked=${first(provider?.signAssertion, true)}
+                                          />
+                                          <span class="pf-c-switch__toggle">
+                                              <span class="pf-c-switch__toggle-icon">
+                                                  <i class="fas fa-check" aria-hidden="true"></i>
                                               </span>
-                                              <span class="pf-c-switch__label"
-                                                  >${msg("Sign assertions")}</span
-                                              >
-                                          </label>
-                                          <p class="pf-c-form__helper-text">
-                                              ${msg(
-                                                  "When enabled, the assertion element of the SAML response will be signed.",
-                                              )}
-                                          </p>
-                                      </ak-form-element-horizontal>
-                                      <ak-form-element-horizontal name="signResponse">
-                                          <label class="pf-c-switch">
-                                              <input
-                                                  class="pf-c-switch__input"
-                                                  type="checkbox"
-                                                  ?checked=${first(provider?.signResponse, false)}
-                                              />
-                                              <span class="pf-c-switch__toggle">
-                                                  <span class="pf-c-switch__toggle-icon">
-                                                      <i
-                                                          class="fas fa-check"
-                                                          aria-hidden="true"
-                                                      ></i>
-                                                  </span>
+                                          </span>
+                                          <span class="pf-c-switch__label"
+                                              >${msg("Sign assertions")}</span
+                                          >
+                                      </label>
+                                      <p class="pf-c-form__helper-text">
+                                          ${msg(
+                                              "When enabled, the assertion element of the SAML response will be signed.",
+                                          )}
+                                      </p>
+                                  </ak-form-element-horizontal>
+                                  <ak-form-element-horizontal name="signResponse">
+                                      <label class="pf-c-switch">
+                                          <input
+                                              class="pf-c-switch__input"
+                                              type="checkbox"
+                                              ?checked=${first(provider?.signResponse, false)}
+                                          />
+                                          <span class="pf-c-switch__toggle">
+                                              <span class="pf-c-switch__toggle-icon">
+                                                  <i class="fas fa-check" aria-hidden="true"></i>
                                               </span>
-                                              <span class="pf-c-switch__label"
-                                                  >${msg("Sign responses")}</span
-                                              >
-                                          </label>
-                                          <p class="pf-c-form__helper-text">
-                                              ${msg(
-                                                  "When enabled, the assertion element of the SAML response will be signed.",
-                                              )}
-                                          </p>
-                                      </ak-form-element-horizontal>`
-                                : nothing
-                        }
+                                          </span>
+                                          <span class="pf-c-switch__label"
+                                              >${msg("Sign responses")}</span
+                                          >
+                                      </label>
+                                      <p class="pf-c-form__helper-text">
+                                          ${msg(
+                                              "When enabled, the assertion element of the SAML response will be signed.",
+                                          )}
+                                      </p>
+                                  </ak-form-element-horizontal>`
+                            : nothing}
 
                         <ak-form-element-horizontal
                             label=${msg("Verification Certificate")}
diff --git a/web/src/admin/providers/rac/RACProviderViewPage.ts b/web/src/admin/providers/rac/RACProviderViewPage.ts
index 34b4807fb9..5669f475e0 100644
--- a/web/src/admin/providers/rac/RACProviderViewPage.ts
+++ b/web/src/admin/providers/rac/RACProviderViewPage.ts
@@ -129,11 +129,7 @@ export class RACProviderViewPage extends AKElement {
         if (!this.provider) {
             return html``;
         }
-        return html`<div slot="header" class="pf-c-banner pf-m-info">
-                ${msg("RAC is in preview.")}
-                <a href="mailto:hello+feature/rac@goauthentik.io">${msg("Send us feedback!")}</a>
-            </div>
-            ${this.provider?.assignedApplicationName
+        return html`${this.provider?.assignedApplicationName
                 ? html``
                 : html`<div slot="header" class="pf-c-banner pf-m-warning">
                       ${msg("Warning: Provider is not used by an Application.")}
diff --git a/web/src/admin/rbac/ObjectPermissionModal.ts b/web/src/admin/rbac/ObjectPermissionModal.ts
index 87892befe7..745596e038 100644
--- a/web/src/admin/rbac/ObjectPermissionModal.ts
+++ b/web/src/admin/rbac/ObjectPermissionModal.ts
@@ -7,7 +7,6 @@ import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, html } from "lit";
 import { customElement, property } from "lit/decorators.js";
 
-import PFBanner from "@patternfly/patternfly/components/Banner/banner.css";
 import PFButton from "@patternfly/patternfly/components/Button/button.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";
 
@@ -53,17 +52,13 @@ export class ObjectPermissionModal extends AKElement {
     objectPk?: string | number;
 
     static get styles(): CSSResult[] {
-        return [PFBase, PFButton, PFBanner];
+        return [PFBase, PFButton];
     }
 
     render(): TemplateResult {
         return html`
             <ak-forms-modal .showSubmitButton=${false} cancelText=${msg("Close")}>
                 <span slot="header"> ${msg("Update Permissions")} </span>
-                <div class="pf-c-banner pf-m-info" slot="above-form">
-                    ${msg("RBAC is in preview.")}
-                    <a href="mailto:hello@goauthentik.io">${msg("Send us feedback!")}</a>
-                </div>
                 <ak-rbac-object-permission-modal-form
                     slot="form"
                     .model=${this.model}
diff --git a/web/src/admin/rbac/ObjectPermissionsPage.ts b/web/src/admin/rbac/ObjectPermissionsPage.ts
index 963f906c93..f5ae15e9ec 100644
--- a/web/src/admin/rbac/ObjectPermissionsPage.ts
+++ b/web/src/admin/rbac/ObjectPermissionsPage.ts
@@ -11,7 +11,6 @@ import { msg } from "@lit/localize";
 import { html, nothing } from "lit";
 import { customElement, property } from "lit/decorators.js";
 
-import PFBanner from "@patternfly/patternfly/components/Banner/banner.css";
 import PFCard from "@patternfly/patternfly/components/Card/card.css";
 import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";
@@ -31,66 +30,60 @@ export class ObjectPermissionPage extends AKElement {
     embedded = false;
 
     static get styles() {
-        return [PFBase, PFGrid, PFPage, PFCard, PFBanner];
+        return [PFBase, PFGrid, PFPage, PFCard];
     }
 
     render() {
-        return html`${!this.embedded
-                ? html`<div class="pf-c-banner pf-m-info">
-                      ${msg("RBAC is in preview.")}
-                      <a href="mailto:hello@goauthentik.io">${msg("Send us feedback!")}</a>
-                  </div>`
+        return html` <ak-tabs pageIdentifier="permissionPage" ?vertical=${!this.embedded}>
+            ${this.model === RbacPermissionsAssignedByUsersListModelEnum.CoreUser
+                ? this.renderCoreUser()
                 : nothing}
-            <ak-tabs pageIdentifier="permissionPage" ?vertical=${!this.embedded}>
-                ${this.model === RbacPermissionsAssignedByUsersListModelEnum.CoreUser
-                    ? this.renderCoreUser()
-                    : nothing}
-                ${this.model === RbacPermissionsAssignedByUsersListModelEnum.RbacRole
-                    ? this.renderRbacRole()
-                    : nothing}
-                <section
-                    slot="page-object-user"
-                    data-tab-title="${msg("User Object Permissions")}"
-                    class="pf-c-page__main-section pf-m-no-padding-mobile"
-                >
-                    <div class="pf-l-grid pf-m-gutter">
-                        <div class="pf-c-card pf-l-grid__item pf-m-12-col">
-                            <div class="pf-c-card__title">${msg("User Object Permissions")}</div>
-                            <div class="pf-c-card__body">
-                                ${msg("Permissions set on users which affect this object.")}
-                            </div>
-                            <div class="pf-c-card__body">
-                                <ak-rbac-user-object-permission-table
-                                    .model=${this.model}
-                                    .objectPk=${this.objectPk}
-                                >
-                                </ak-rbac-user-object-permission-table>
-                            </div>
+            ${this.model === RbacPermissionsAssignedByUsersListModelEnum.RbacRole
+                ? this.renderRbacRole()
+                : nothing}
+            <section
+                slot="page-object-user"
+                data-tab-title="${msg("User Object Permissions")}"
+                class="pf-c-page__main-section pf-m-no-padding-mobile"
+            >
+                <div class="pf-l-grid pf-m-gutter">
+                    <div class="pf-c-card pf-l-grid__item pf-m-12-col">
+                        <div class="pf-c-card__title">${msg("User Object Permissions")}</div>
+                        <div class="pf-c-card__body">
+                            ${msg("Permissions set on users which affect this object.")}
+                        </div>
+                        <div class="pf-c-card__body">
+                            <ak-rbac-user-object-permission-table
+                                .model=${this.model}
+                                .objectPk=${this.objectPk}
+                            >
+                            </ak-rbac-user-object-permission-table>
                         </div>
                     </div>
-                </section>
-                <section
-                    slot="page-object-role"
-                    data-tab-title="${msg("Role Object Permissions")}"
-                    class="pf-c-page__main-section pf-m-no-padding-mobile"
-                >
-                    <div class="pf-l-grid pf-m-gutter">
-                        <div class="pf-c-card pf-l-grid__item pf-m-12-col">
-                            <div class="pf-c-card__title">${msg("Role Object Permissions")}</div>
-                            <div class="pf-c-card__body">
-                                ${msg("Permissions set on roles which affect this object.")}
-                            </div>
-                            <div class="pf-c-card__body">
-                                <ak-rbac-role-object-permission-table
-                                    .model=${this.model}
-                                    .objectPk=${this.objectPk}
-                                >
-                                </ak-rbac-role-object-permission-table>
-                            </div>
+                </div>
+            </section>
+            <section
+                slot="page-object-role"
+                data-tab-title="${msg("Role Object Permissions")}"
+                class="pf-c-page__main-section pf-m-no-padding-mobile"
+            >
+                <div class="pf-l-grid pf-m-gutter">
+                    <div class="pf-c-card pf-l-grid__item pf-m-12-col">
+                        <div class="pf-c-card__title">${msg("Role Object Permissions")}</div>
+                        <div class="pf-c-card__body">
+                            ${msg("Permissions set on roles which affect this object.")}
+                        </div>
+                        <div class="pf-c-card__body">
+                            <ak-rbac-role-object-permission-table
+                                .model=${this.model}
+                                .objectPk=${this.objectPk}
+                            >
+                            </ak-rbac-role-object-permission-table>
                         </div>
                     </div>
-                </section>
-            </ak-tabs>`;
+                </div>
+            </section>
+        </ak-tabs>`;
     }
 
     renderCoreUser() {
diff --git a/web/src/admin/roles/RoleListPage.ts b/web/src/admin/roles/RoleListPage.ts
index 98f156cb93..fd68f93c0d 100644
--- a/web/src/admin/roles/RoleListPage.ts
+++ b/web/src/admin/roles/RoleListPage.ts
@@ -9,12 +9,10 @@ import { TablePage } from "@goauthentik/elements/table/TablePage";
 import "@patternfly/elements/pf-tooltip/pf-tooltip.js";
 
 import { msg } from "@lit/localize";
-import { CSSResult, TemplateResult, html } from "lit";
+import { TemplateResult, html } from "lit";
 import { customElement, property } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";
 
-import PFBanner from "@patternfly/patternfly/components/Banner/banner.css";
-
 import { RbacApi, Role } from "@goauthentik/api";
 
 @customElement("ak-role-list")
@@ -37,10 +35,6 @@ export class RoleListPage extends TablePage<Role> {
     @property()
     order = "name";
 
-    static get styles(): CSSResult[] {
-        return [...super.styles, PFBanner];
-    }
-
     async apiEndpoint(): Promise<PaginatedResponse<Role>> {
         return new RbacApi(DEFAULT_CONFIG).rbacRolesList(await this.defaultEndpointConfig());
     }
@@ -78,10 +72,6 @@ export class RoleListPage extends TablePage<Role> {
                 description=${ifDefined(this.pageDescription())}
             >
             </ak-page-header>
-            <div class="pf-c-banner pf-m-info">
-                ${msg("RBAC is in preview.")}
-                <a href="mailto:hello@goauthentik.io">${msg("Send us feedback!")}</a>
-            </div>
             <section class="pf-c-page__main-section pf-m-no-padding-mobile">
                 <div class="pf-c-card">${this.renderTable()}</div>
             </section>`;
diff --git a/web/src/admin/sources/kerberos/KerberosSourceViewPage.ts b/web/src/admin/sources/kerberos/KerberosSourceViewPage.ts
index 94a7cebd41..a095764535 100644
--- a/web/src/admin/sources/kerberos/KerberosSourceViewPage.ts
+++ b/web/src/admin/sources/kerberos/KerberosSourceViewPage.ts
@@ -18,6 +18,7 @@ import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, html } from "lit";
 import { customElement, property, state } from "lit/decorators.js";
 
+import PFBanner from "@patternfly/patternfly/components/Banner/banner.css";
 import PFButton from "@patternfly/patternfly/components/Button/button.css";
 import PFCard from "@patternfly/patternfly/components/Card/card.css";
 import PFContent from "@patternfly/patternfly/components/Content/content.css";
@@ -54,7 +55,17 @@ export class KerberosSourceViewPage extends AKElement {
     syncState?: SyncStatus;
 
     static get styles(): CSSResult[] {
-        return [PFBase, PFPage, PFButton, PFGrid, PFContent, PFCard, PFDescriptionList, PFList];
+        return [
+            PFBase,
+            PFPage,
+            PFButton,
+            PFGrid,
+            PFContent,
+            PFCard,
+            PFDescriptionList,
+            PFBanner,
+            PFList,
+        ];
     }
 
     constructor() {
@@ -121,6 +132,12 @@ export class KerberosSourceViewPage extends AKElement {
                     this.load();
                 }}
             >
+                <div slot="header" class="pf-c-banner pf-m-info">
+                    ${msg("Kerberos Source is in preview.")}
+                    <a href="mailto:hello+feature/kerberos-source@goauthentik.io"
+                        >${msg("Send us feedback!")}</a
+                    >
+                </div>
                 <div class="pf-l-grid pf-m-gutter">
                     <div class="pf-c-card pf-l-grid__item pf-m-12-col">
                         <div class="pf-c-card__body">
diff --git a/web/src/admin/stages/authenticator_endpoint_gdtc/AuthenticatorEndpointGDTCStageForm.ts b/web/src/admin/stages/authenticator_endpoint_gdtc/AuthenticatorEndpointGDTCStageForm.ts
index 414e42d147..fbe8a9a852 100644
--- a/web/src/admin/stages/authenticator_endpoint_gdtc/AuthenticatorEndpointGDTCStageForm.ts
+++ b/web/src/admin/stages/authenticator_endpoint_gdtc/AuthenticatorEndpointGDTCStageForm.ts
@@ -10,6 +10,8 @@ import { msg } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement } from "lit/decorators.js";
 
+import PFBanner from "@patternfly/patternfly/components/Banner/banner.css";
+
 import { AuthenticatorEndpointGDTCStage, StagesApi } from "@goauthentik/api";
 
 @customElement("ak-stage-authenticator-endpoint-gdtc-form")
@@ -33,8 +35,16 @@ export class AuthenticatorEndpointGDTCStageForm extends BaseStageForm<Authentica
         }
     }
 
+    static get styles() {
+        return super.styles.concat(PFBanner);
+    }
+
     renderForm(): TemplateResult {
-        return html` <span>
+        return html`<div class="pf-c-banner pf-m-info">
+                ${msg("Endpoint Google Chrome Device Trust is in preview.")}
+                <a href="mailto:hello+feature/gdtc@goauthentik.io">${msg("Send us feedback!")}</a>
+            </div>
+            <span>
                 ${msg(
                     "Stage used to verify users' browsers using Google Chrome Device Trust. This stage can be used in authentication/authorization flows.",
                 )}
diff --git a/web/src/admin/stages/identification/IdentificationStageForm.ts b/web/src/admin/stages/identification/IdentificationStageForm.ts
index 6a9c65de08..7a20af84d6 100644
--- a/web/src/admin/stages/identification/IdentificationStageForm.ts
+++ b/web/src/admin/stages/identification/IdentificationStageForm.ts
@@ -21,6 +21,7 @@ import {
     SourcesApi,
     Stage,
     StagesApi,
+    StagesCaptchaListRequest,
     StagesPasswordListRequest,
     UserFieldsEnum,
 } from "@goauthentik/api";
@@ -140,19 +141,13 @@ export class IdentificationStageForm extends BaseStageForm<IdentificationStage>
                                 ).stagesPasswordList(args);
                                 return stages.results;
                             }}
-                            .groupBy=${(items: Stage[]) => {
-                                return groupBy(items, (stage) => stage.verboseNamePlural);
-                            }}
-                            .renderElement=${(stage: Stage): string => {
-                                return stage.name;
-                            }}
-                            .value=${(stage: Stage | undefined): string | undefined => {
-                                return stage?.pk;
-                            }}
-                            .selected=${(stage: Stage): boolean => {
-                                return stage.pk === this.instance?.passwordStage;
-                            }}
-                            ?blankable=${true}
+                            .groupBy=${(items: Stage[]) =>
+                                groupBy(items, (stage) => stage.verboseNamePlural)}
+                            .renderElement=${(stage: Stage): string => stage.name}
+                            .value=${(stage: Stage | undefined): string | undefined => stage?.pk}
+                            .selected=${(stage: Stage): boolean =>
+                                stage.pk === this.instance?.passwordStage}
+                            blankable
                         >
                         </ak-search-select>
                         <p class="pf-c-form__helper-text">
@@ -161,6 +156,35 @@ export class IdentificationStageForm extends BaseStageForm<IdentificationStage>
                             )}
                         </p>
                     </ak-form-element-horizontal>
+                    <ak-form-element-horizontal label=${msg("Captcha stage")} name="captchaStage">
+                        <ak-search-select
+                            .fetchObjects=${async (query?: string): Promise<Stage[]> => {
+                                const args: StagesCaptchaListRequest = {
+                                    ordering: "name",
+                                };
+                                if (query !== undefined) {
+                                    args.search = query;
+                                }
+                                const stages = await new StagesApi(
+                                    DEFAULT_CONFIG,
+                                ).stagesCaptchaList(args);
+                                return stages.results;
+                            }}
+                            .groupBy=${(items: Stage[]) =>
+                                groupBy(items, (stage) => stage.verboseNamePlural)}
+                            .renderElement=${(stage: Stage): string => stage.name}
+                            .value=${(stage: Stage | undefined): string | undefined => stage?.pk}
+                            .selected=${(stage: Stage): boolean =>
+                                stage.pk === this.instance?.captchaStage}
+                            blankable
+                        >
+                        </ak-search-select>
+                        <p class="pf-c-form__helper-text">
+                            ${msg(
+                                "When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.",
+                            )}
+                        </p>
+                    </ak-form-element-horizontal>
                     <ak-form-element-horizontal name="caseInsensitiveMatching">
                         <label class="pf-c-switch">
                             <input
diff --git a/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStage.ts b/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStage.ts
index a80ec94022..3bfad7def0 100644
--- a/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStage.ts
+++ b/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStage.ts
@@ -6,7 +6,7 @@ import { BaseStage, StageHost, SubmitOptions } from "@goauthentik/flow/stages/ba
 import { PasswordManagerPrefill } from "@goauthentik/flow/stages/identification/IdentificationStage";
 
 import { msg } from "@lit/localize";
-import { CSSResult, TemplateResult, css, html, nothing } from "lit";
+import { CSSResult, PropertyValues, TemplateResult, css, html, nothing } from "lit";
 import { customElement, state } from "lit/decorators.js";
 
 import PFButton from "@patternfly/patternfly/components/Button/button.css";
@@ -25,6 +25,37 @@ import {
     FlowsApi,
 } from "@goauthentik/api";
 
+const customCSS = css`
+    ul {
+        padding-top: 1rem;
+    }
+    ul > li:not(:last-child) {
+        padding-bottom: 1rem;
+    }
+    .authenticator-button {
+        display: flex;
+        align-items: center;
+    }
+    :host([theme="dark"]) .authenticator-button {
+        color: var(--ak-dark-foreground) !important;
+    }
+    i {
+        font-size: 1.5rem;
+        padding: 1rem 0;
+        width: 3rem;
+    }
+    .right {
+        display: flex;
+        flex-direction: column;
+        justify-content: space-between;
+        height: 100%;
+        text-align: left;
+    }
+    .right > * {
+        height: 50%;
+    }
+`;
+
 @customElement("ak-stage-authenticator-validate")
 export class AuthenticatorValidateStage
     extends BaseStage<
@@ -33,6 +64,10 @@ export class AuthenticatorValidateStage
     >
     implements StageHost
 {
+    static get styles(): CSSResult[] {
+        return [PFBase, PFLogin, PFForm, PFFormControl, PFTitle, PFButton, customCSS];
+    }
+
     flowSlug = "";
 
     set loading(value: boolean) {
@@ -47,14 +82,18 @@ export class AuthenticatorValidateStage
         return this.host.brand;
     }
 
+    @state()
+    _firstInitialized: boolean = false;
+
     @state()
     _selectedDeviceChallenge?: DeviceChallenge;
 
     set selectedDeviceChallenge(value: DeviceChallenge | undefined) {
         const previousChallenge = this._selectedDeviceChallenge;
         this._selectedDeviceChallenge = value;
-        if (!value) return;
-        if (value === previousChallenge) return;
+        if (value === undefined || value === previousChallenge) {
+            return;
+        }
         // We don't use this.submit here, as we don't want to advance the flow.
         // We just want to notify the backend which challenge has been selected.
         new FlowsApi(DEFAULT_CONFIG).flowsExecutorSolve({
@@ -79,37 +118,39 @@ export class AuthenticatorValidateStage
         return this.host?.submit(payload, options) || Promise.resolve();
     }
 
-    static get styles(): CSSResult[] {
-        return [PFBase, PFLogin, PFForm, PFFormControl, PFTitle, PFButton].concat(css`
-            ul {
-                padding-top: 1rem;
-            }
-            ul > li:not(:last-child) {
-                padding-bottom: 1rem;
-            }
-            .authenticator-button {
-                display: flex;
-                align-items: center;
-            }
-            :host([theme="dark"]) .authenticator-button {
-                color: var(--ak-dark-foreground) !important;
-            }
-            i {
-                font-size: 1.5rem;
-                padding: 1rem 0;
-                width: 3rem;
-            }
-            .right {
-                display: flex;
-                flex-direction: column;
-                justify-content: space-between;
-                height: 100%;
-                text-align: left;
-            }
-            .right > * {
-                height: 50%;
-            }
-        `);
+    willUpdate(_changed: PropertyValues<this>) {
+        if (this._firstInitialized || !this.challenge) {
+            return;
+        }
+
+        this._firstInitialized = true;
+
+        // If user only has a single device, autoselect that device.
+        if (this.challenge.deviceChallenges.length === 1) {
+            this.selectedDeviceChallenge = this.challenge.deviceChallenges[0];
+            return;
+        }
+
+        // If TOTP is allowed from the backend and we have a pre-filled value
+        // from the password manager, autoselect TOTP.
+        const totpChallenge = this.challenge.deviceChallenges.find(
+            (challenge) => challenge.deviceClass === DeviceClassesEnum.Totp,
+        );
+        if (PasswordManagerPrefill.totp && totpChallenge) {
+            console.debug(
+                "authentik/stages/authenticator_validate: found prefill totp code, selecting totp challenge",
+            );
+            this.selectedDeviceChallenge = totpChallenge;
+            return;
+        }
+
+        // If the last used device is not Static, autoselect that device.
+        const lastUsedChallenge = this.challenge.deviceChallenges
+            .filter((deviceChallenge) => deviceChallenge.lastUsed)
+            .sort((a, b) => b.lastUsed!.valueOf() - a.lastUsed!.valueOf())[0];
+        if (lastUsedChallenge && lastUsedChallenge.deviceClass !== DeviceClassesEnum.Static) {
+            this.selectedDeviceChallenge = lastUsedChallenge;
+        }
     }
 
     renderDevicePickerSingle(deviceChallenge: DeviceChallenge) {
@@ -228,45 +269,28 @@ export class AuthenticatorValidateStage
     }
 
     render(): TemplateResult {
-        if (!this.challenge) {
-            return html`<ak-empty-state loading> </ak-empty-state>`;
-        }
-        // User only has a single device class, so we don't show a picker
-        if (this.challenge?.deviceChallenges.length === 1) {
-            this.selectedDeviceChallenge = this.challenge.deviceChallenges[0];
-        }
-        // TOTP is a bit special, assuming that TOTP is allowed from the backend,
-        // and we have a pre-filled value from the password manager,
-        // directly set the the TOTP device Challenge as active.
-        const totpChallenge = this.challenge.deviceChallenges.find(
-            (challenge) => challenge.deviceClass === DeviceClassesEnum.Totp,
-        );
-        if (PasswordManagerPrefill.totp && totpChallenge) {
-            console.debug(
-                "authentik/stages/authenticator_validate: found prefill totp code, selecting totp challenge",
-            );
-            this.selectedDeviceChallenge = totpChallenge;
-        }
-        return html`<header class="pf-c-login__main-header">
-                <h1 class="pf-c-title pf-m-3xl">${this.challenge.flowInfo?.title}</h1>
-            </header>
-            ${this.selectedDeviceChallenge
-                ? this.renderDeviceChallenge()
-                : html`<div class="pf-c-login__main-body">
-                          <form class="pf-c-form">
-                              ${this.renderUserInfo()}
-                              ${this.selectedDeviceChallenge
-                                  ? ""
-                                  : html`<p>${msg("Select an authentication method.")}</p>`}
-                              ${this.challenge.configurationStages.length > 0
-                                  ? this.renderStagePicker()
-                                  : html``}
-                          </form>
-                          ${this.renderDevicePicker()}
-                      </div>
-                      <footer class="pf-c-login__main-footer">
-                          <ul class="pf-c-login__main-footer-links"></ul>
-                      </footer>`}`;
+        return this.challenge
+            ? html`<header class="pf-c-login__main-header">
+                      <h1 class="pf-c-title pf-m-3xl">${this.challenge.flowInfo?.title}</h1>
+                  </header>
+                  ${this.selectedDeviceChallenge
+                      ? this.renderDeviceChallenge()
+                      : html`<div class="pf-c-login__main-body">
+                                <form class="pf-c-form">
+                                    ${this.renderUserInfo()}
+                                    ${this.selectedDeviceChallenge
+                                        ? ""
+                                        : html`<p>${msg("Select an authentication method.")}</p>`}
+                                    ${this.challenge.configurationStages.length > 0
+                                        ? this.renderStagePicker()
+                                        : html``}
+                                </form>
+                                ${this.renderDevicePicker()}
+                            </div>
+                            <footer class="pf-c-login__main-footer">
+                                <ul class="pf-c-login__main-footer-links"></ul>
+                            </footer>`}`
+            : html`<ak-empty-state loading> </ak-empty-state>`;
     }
 }
 
diff --git a/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts b/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
index 9065f2e4d8..01fcd4ef68 100644
--- a/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
+++ b/web/src/flow/stages/authenticator_validate/AuthenticatorValidateStageCode.ts
@@ -31,6 +31,34 @@ export class AuthenticatorValidateStageWebCode extends BaseDeviceStage<
         `);
     }
 
+    deviceMessage(): string {
+        switch (this.deviceChallenge?.deviceClass) {
+            case DeviceClassesEnum.Sms:
+                return msg("A code has been sent to you via SMS.");
+            case DeviceClassesEnum.Totp:
+                return msg(
+                    "Open your two-factor authenticator app to view your authentication code.",
+                );
+            case DeviceClassesEnum.Static:
+                return msg("Enter a one-time recovery code for this user.");
+        }
+
+        return msg("Enter the code from your authenticator device.");
+    }
+
+    deviceIcon(): string {
+        switch (this.deviceChallenge?.deviceClass) {
+            case DeviceClassesEnum.Sms:
+                return "fa-key";
+            case DeviceClassesEnum.Totp:
+                return "fa-mobile-alt";
+            case DeviceClassesEnum.Static:
+                return "fa-sticky-note";
+        }
+
+        return "fa-mobile-alt";
+    }
+
     render(): TemplateResult {
         if (!this.challenge) {
             return html`<ak-empty-state loading> </ak-empty-state>`;
@@ -44,19 +72,8 @@ export class AuthenticatorValidateStageWebCode extends BaseDeviceStage<
             >
                 ${this.renderUserInfo()}
                 <div class="icon-description">
-                    <i
-                        class="fa ${this.deviceChallenge?.deviceClass == DeviceClassesEnum.Sms
-                            ? "fa-key"
-                            : "fa-mobile-alt"}"
-                        aria-hidden="true"
-                    ></i>
-                    ${this.deviceChallenge?.deviceClass == DeviceClassesEnum.Sms
-                        ? html`<p>${msg("A code has been sent to you via SMS.")}</p>`
-                        : html`<p>
-                              ${msg(
-                                  "Open your two-factor authenticator app to view your authentication code.",
-                              )}
-                          </p>`}
+                    <i class="fa ${this.deviceIcon()}" aria-hidden="true"></i>
+                    <p>${this.deviceMessage()}</p>
                 </div>
                 <ak-form-element
                     label="${this.deviceChallenge?.deviceClass === DeviceClassesEnum.Static
diff --git a/web/src/flow/stages/authenticator_validate/base.ts b/web/src/flow/stages/authenticator_validate/base.ts
index 51d52ba6c1..4335af54cd 100644
--- a/web/src/flow/stages/authenticator_validate/base.ts
+++ b/web/src/flow/stages/authenticator_validate/base.ts
@@ -59,7 +59,7 @@ export class BaseDeviceStage<
                 (this.host as AuthenticatorValidateStage).selectedDeviceChallenge = undefined;
             }}
         >
-            ${msg("Return to device picker")}
+            ${msg("Select another authentication method")}
         </button>`;
     }
 }
diff --git a/web/src/flow/stages/captcha/CaptchaStage.ts b/web/src/flow/stages/captcha/CaptchaStage.ts
index 55e5538d59..af37ab383c 100644
--- a/web/src/flow/stages/captcha/CaptchaStage.ts
+++ b/web/src/flow/stages/captcha/CaptchaStage.ts
@@ -6,8 +6,8 @@ import { BaseStage } from "@goauthentik/flow/stages/base";
 import type { TurnstileObject } from "turnstile-types";
 
 import { msg } from "@lit/localize";
-import { CSSResult, PropertyValues, TemplateResult, html } from "lit";
-import { customElement, state } from "lit/decorators.js";
+import { CSSResult, PropertyValues, html } from "lit";
+import { customElement, property, state } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";
 
 import PFButton from "@patternfly/patternfly/components/Button/button.css";
@@ -22,6 +22,7 @@ import { CaptchaChallenge, CaptchaChallengeResponseRequest } from "@goauthentik/
 interface TurnstileWindow extends Window {
     turnstile: TurnstileObject;
 }
+type TokenHandler = (token: string) => void;
 
 const captchaContainerID = "captcha-container";
 
@@ -45,6 +46,11 @@ export class CaptchaStage extends BaseStage<CaptchaChallenge, CaptchaChallengeRe
     @state()
     scriptElement?: HTMLScriptElement;
 
+    @property()
+    onTokenChange: TokenHandler = (token: string) => {
+        this.host.submit({ component: "ak-stage-captcha", token });
+    };
+
     constructor() {
         super();
         this.captchaContainer = document.createElement("div");
@@ -102,11 +108,7 @@ export class CaptchaStage extends BaseStage<CaptchaChallenge, CaptchaChallengeRe
         grecaptcha.ready(() => {
             const captchaId = grecaptcha.render(this.captchaContainer, {
                 sitekey: this.challenge.siteKey,
-                callback: (token) => {
-                    this.host?.submit({
-                        token: token,
-                    });
-                },
+                callback: this.onTokenChange,
                 size: "invisible",
             });
             grecaptcha.execute(captchaId);
@@ -122,12 +124,8 @@ export class CaptchaStage extends BaseStage<CaptchaChallenge, CaptchaChallengeRe
         document.body.appendChild(this.captchaContainer);
         const captchaId = hcaptcha.render(this.captchaContainer, {
             sitekey: this.challenge.siteKey,
+            callback: this.onTokenChange,
             size: "invisible",
-            callback: (token) => {
-                this.host?.submit({
-                    token: token,
-                });
-            },
         });
         hcaptcha.execute(captchaId);
         return true;
@@ -141,16 +139,12 @@ export class CaptchaStage extends BaseStage<CaptchaChallenge, CaptchaChallengeRe
         document.body.appendChild(this.captchaContainer);
         (window as unknown as TurnstileWindow).turnstile.render(`#${captchaContainerID}`, {
             sitekey: this.challenge.siteKey,
-            callback: (token) => {
-                this.host?.submit({
-                    token: token,
-                });
-            },
+            callback: this.onTokenChange,
         });
         return true;
     }
 
-    renderBody(): TemplateResult {
+    renderBody() {
         if (this.error) {
             return html`<ak-empty-state icon="fa-times" header=${this.error}> </ak-empty-state>`;
         }
@@ -160,7 +154,7 @@ export class CaptchaStage extends BaseStage<CaptchaChallenge, CaptchaChallengeRe
         return html`<ak-empty-state loading header=${msg("Verifying...")}></ak-empty-state>`;
     }
 
-    render(): TemplateResult {
+    render() {
         if (!this.challenge) {
             return html`<ak-empty-state loading> </ak-empty-state>`;
         }
diff --git a/web/src/flow/stages/identification/IdentificationStage.ts b/web/src/flow/stages/identification/IdentificationStage.ts
index d0afed5a27..0983928eaa 100644
--- a/web/src/flow/stages/identification/IdentificationStage.ts
+++ b/web/src/flow/stages/identification/IdentificationStage.ts
@@ -4,10 +4,11 @@ import "@goauthentik/elements/EmptyState";
 import "@goauthentik/elements/forms/FormElement";
 import "@goauthentik/flow/components/ak-flow-password-input.js";
 import { BaseStage } from "@goauthentik/flow/stages/base";
+import "@goauthentik/flow/stages/captcha/CaptchaStage";
 
 import { msg, str } from "@lit/localize";
 import { CSSResult, PropertyValues, TemplateResult, css, html, nothing } from "lit";
-import { customElement } from "lit/decorators.js";
+import { customElement, state } from "lit/decorators.js";
 
 import PFAlert from "@patternfly/patternfly/components/Alert/alert.css";
 import PFButton from "@patternfly/patternfly/components/Button/button.css";
@@ -46,6 +47,9 @@ export class IdentificationStage extends BaseStage<
 > {
     form?: HTMLFormElement;
 
+    @state()
+    captchaToken = "";
+
     static get styles(): CSSResult[] {
         return [
             PFBase,
@@ -274,6 +278,18 @@ export class IdentificationStage extends BaseStage<
                   `
                 : nothing}
             ${this.renderNonFieldErrors()}
+            ${this.challenge.captchaStage
+                ? html`
+                      <input name="captchaToken" type="hidden" .value="${this.captchaToken}" />
+                      <ak-stage-captcha
+                          style="visibility: hidden; position:absolute;"
+                          .challenge=${this.challenge.captchaStage}
+                          .onTokenChange=${(token: string) => {
+                              this.captchaToken = token;
+                          }}
+                      ></ak-stage-captcha>
+                  `
+                : nothing}
             <div class="pf-c-form__group pf-m-action">
                 <button type="submit" class="pf-c-button pf-m-primary pf-m-block">
                     ${this.challenge.primaryAction}
diff --git a/web/xliff/de.xlf b/web/xliff/de.xlf
index 60c805f296..6f14b4b8cf 100644
--- a/web/xliff/de.xlf
+++ b/web/xliff/de.xlf
@@ -5036,10 +5036,6 @@ Bindings to groups/users are checked against the user of the event.</source>
       <trans-unit id="s3cd84e82e83e35ad">
         <source>Please enter your code</source>
       </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Zurück zur Geräteauswahl</target>
-      </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
         <target>Authentifizierung erneut versuchen</target>
@@ -5823,9 +5819,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="sfc31264ef7ff86ef">
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
 </trans-unit>
@@ -5970,9 +5963,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -7015,6 +7005,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/en.xlf b/web/xliff/en.xlf
index b14da6b8a7..4655f5b975 100644
--- a/web/xliff/en.xlf
+++ b/web/xliff/en.xlf
@@ -5294,10 +5294,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
         <target>Please enter your code</target>
       </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Return to device picker</target>
-      </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
         <target>Retry authentication</target>
@@ -6088,9 +6084,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="sfc31264ef7ff86ef">
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
 </trans-unit>
@@ -6235,9 +6228,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -7280,6 +7270,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/es.xlf b/web/xliff/es.xlf
index 9b0c6b889d..07babf6fbc 100644
--- a/web/xliff/es.xlf
+++ b/web/xliff/es.xlf
@@ -4962,10 +4962,6 @@ Bindings to groups/users are checked against the user of the event.</source>
       <trans-unit id="s3cd84e82e83e35ad">
         <source>Please enter your code</source>
       </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Regresar al selector de dispositivos</target>
-      </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
         <target>Reintentar la autenticación</target>
@@ -5740,9 +5736,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="sfc31264ef7ff86ef">
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
 </trans-unit>
@@ -5887,9 +5880,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -6932,6 +6922,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/fr.xlf b/web/xliff/fr.xlf
index 92015eaf59..9f0e2d6274 100644
--- a/web/xliff/fr.xlf
+++ b/web/xliff/fr.xlf
@@ -6616,11 +6616,6 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti
         <source>Please enter your code</source>
         <target>Veuillez saisir votre code</target>
         
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Retourner à la sélection d'appareil</target>
-        
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7651,10 +7646,6 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>Pour nginx auth_request ou traefik forwardAuth par domaine racine</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC est en aperçu.</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>Type d'utilisateur pour les utilisateurs nouvellement créés.</target>
@@ -7847,10 +7838,6 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti
   <source>Create Endpoint</source>
   <target>Créer un point de terminaison</target>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-  <target>RAC est en aperçu.</target>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
   <target>Mettre à jour le fournisseur RAC</target>
@@ -9131,90 +9118,140 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti
 </trans-unit>
 <trans-unit id="sbfee780fa0a2c83e">
   <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be deleted</source>
+  <target>Le type d'appareil <x id="0" equiv-text="${device.verboseName}"/> ne peut pas être supprimé</target>
 </trans-unit>
 <trans-unit id="s336936629cdeb3e5">
   <source>Stage used to verify users' browsers using Google Chrome Device Trust. This stage can be used in authentication/authorization flows.</source>
+  <target>Étape utilisée pour vérifier le navigateur des utilisateurs avec le connecteur de confiance des appareils Google Chrome Enterprise. Cette étape peut être utilisée dans les flux d'authentification et d'autorisation.</target>
 </trans-unit>
 <trans-unit id="s85fe794c71b4ace8">
   <source>Google Verified Access API</source>
+  <target>API Google Verified Access</target>
 </trans-unit>
 <trans-unit id="s013620384af7c8b4">
   <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be edited</source>
+  <target>Le type d'appareil <x id="0" equiv-text="${device.verboseName}"/> ne peut pas être édité</target>
 </trans-unit>
 <trans-unit id="s4347135696fc7cde">
   <source>Advanced flow settings</source>
+  <target>Paramètres avancés des flux</target>
 </trans-unit>
 <trans-unit id="sf52ff57fd136cc2f">
   <source>Enable this option to write password changes made in authentik back to Kerberos. Ignored if sync is disabled.</source>
+  <target>Activer cette option pour écrire les changements de mot de passe fait dans authentik dans Kerberos. Ignoré si la synchronisation est désactivée.</target>
 </trans-unit>
 <trans-unit id="s14a16542f956e11d">
   <source>Realm settings</source>
+  <target>Paramètres du realm</target>
 </trans-unit>
 <trans-unit id="s9c2eae548d3c1c30">
   <source>Realm</source>
+  <target>Realm</target>
 </trans-unit>
 <trans-unit id="s6b032212997e2491">
   <source>Kerberos 5 configuration</source>
+  <target>Configuration Kerberos 5</target>
 </trans-unit>
 <trans-unit id="sbf50181022f47de3">
   <source>Kerberos 5 configuration. See man krb5.conf(5) for configuration format. If left empty, a default krb5.conf will be used.</source>
+  <target>Configuration Kerbers 5. Cf. man krb5.conf(5) pour le format de configuration. Si laissé vide, un krb5.conf par défaut sera utilisé.</target>
 </trans-unit>
 <trans-unit id="s2386539a0bd62fab">
   <source>Sync connection settings</source>
+  <target>Paramètres de synchronisation</target>
 </trans-unit>
 <trans-unit id="s0d1a6f3fe81351f8">
   <source>Sync principal</source>
+  <target>Principal de synchronisation</target>
 </trans-unit>
 <trans-unit id="sa691d6e1974295fa">
   <source>Principal used to authenticate to the KDC for syncing.</source>
+  <target>Principal utilisé pour s'authentifier au KDC pour synchroniser.</target>
 </trans-unit>
 <trans-unit id="s977b9c629eed3d33">
   <source>Sync password</source>
+  <target>Mot de passe de synchronisation</target>
 </trans-unit>
 <trans-unit id="s77772860385de948">
   <source>Password used to authenticate to the KDC for syncing. Optional if Sync keytab or Sync credentials cache is provided.</source>
+  <target>Mot de passe utilisé pour s'authentifier au KDC pour synchroniser. Optional si une keytab de synchronisation ou un credentials cache de synchronisation est fourni.</target>
 </trans-unit>
 <trans-unit id="sc59ec59c3d5e74dc">
   <source>Sync keytab</source>
+  <target>Keytab de synchronisation</target>
 </trans-unit>
 <trans-unit id="scd42997958453f05">
   <source>Keytab used to authenticate to the KDC for syncing. Optional if Sync password or Sync credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>Keytab utilisée pour s'authentifier au KDC pour synchroniser. Optional si un mot de passe de synchronisation ou un credentials cache de synchronisation est fourni. Doit être encodé en base64 ou de la forme TYPE:residual.</target>
 </trans-unit>
 <trans-unit id="s60eaf439ccdca1f2">
   <source>Sync credentials cache</source>
+  <target>Credentials cache de synchronisation</target>
 </trans-unit>
 <trans-unit id="s95722900b0c9026f">
   <source>Credentials cache used to authenticate to the KDC for syncing. Optional if Sync password or Sync keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>Credentials cache utilisé pour s'authentifier au KDC pour synchroniser. Optional si un mot de passe de synchronisation ou une keytab de synchronisation est fourni. Doit être de la forme TYPE:residual.</target>
 </trans-unit>
 <trans-unit id="sf9c055db98d7994a">
   <source>SPNEGO settings</source>
+  <target>Paramètres SPNEGO</target>
 </trans-unit>
 <trans-unit id="sab580a45dc46937f">
   <source>SPNEGO server name</source>
+  <target>Nom de serveur SPNEGO</target>
 </trans-unit>
 <trans-unit id="s7a79d6174d17ab2d">
   <source>Force the use of a specific server name for SPNEGO. Must be in the form HTTP@domain</source>
+  <target>Force l'utilisation d'un nom de serveur spécifique pour SPNEGO. Doit être de la forme HTTP@hostname</target>
 </trans-unit>
 <trans-unit id="sa4ba2b2081472ccd">
   <source>SPNEGO keytab</source>
+  <target>Keytab SPNEGO</target>
 </trans-unit>
 <trans-unit id="s64adda975c1106c0">
   <source>Keytab used for SPNEGO. Optional if SPNEGO credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>Keytab utilisée pour SPNEGO. Optional si un credentials cache SPNEGO est fourni. Doit être encodé en base64 ou de la forme TYPE:residual.</target>
 </trans-unit>
 <trans-unit id="s92247825b92587b5">
   <source>SPNEGO credentials cache</source>
+  <target>Credentials cache SPNEGO</target>
 </trans-unit>
 <trans-unit id="sd9757c345e4062f8">
   <source>Credentials cache used for SPNEGO. Optional if SPNEGO keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>Credentials cache utilisé pour SPNEGO. Optional si une keytab SPNEGO est fournie. Doit être de la forme TYPE:residual.</target>
 </trans-unit>
 <trans-unit id="s734ab8fbcae0b69e">
   <source>Kerberos Attribute mapping</source>
+  <target>Mappage d'attributs Kerberos</target>
 </trans-unit>
 <trans-unit id="s2c378e86e025fdb2">
   <source>Update Kerberos Source</source>
+  <target>Mettre à jour la source Kerberos</target>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+  <target>Base de données utilisateurs + mot de passe Kerberos</target>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/it.xlf b/web/xliff/it.xlf
new file mode 100644
index 0000000000..cc504278c2
--- /dev/null
+++ b/web/xliff/it.xlf
@@ -0,0 +1,9282 @@
+<?xml version="1.0" ?><xliff xmlns="urn:oasis:names:tc:xliff:document:1.2" version="1.2">
+  <file target-language="it" source-language="en" original="lit-localize-inputs" datatype="plaintext">
+    <body>
+      <trans-unit id="s4caed5b7a7e5d89b">
+        <source>English</source>
+        <target>Inglese</target>
+        
+      </trans-unit>
+      <trans-unit id="s75a27f43413e02c5">
+        <source>French</source>
+        <target>Francese</target>
+        
+      </trans-unit>
+      <trans-unit id="s9d2d00982edafabb">
+        <source>Turkish</source>
+        <target>Turco</target>
+        
+      </trans-unit>
+      <trans-unit id="sf1868dc19e3917bb">
+        <source>Spanish</source>
+        <target>Spagnolo</target>
+        
+      </trans-unit>
+      <trans-unit id="s03f49e598ffb11cc">
+        <source>Polish</source>
+        <target>Polacco</target>
+        
+      </trans-unit>
+      <trans-unit id="s4660da32fb311ac0">
+        <source>Taiwanese Mandarin</source>
+        <target>Mandarino Taiwanese</target>
+        
+      </trans-unit>
+      <trans-unit id="s354e0a9f146d2869">
+        <source>Chinese (simplified)</source>
+        <target>Cinese (semplificato)</target>
+        
+      </trans-unit>
+      <trans-unit id="se3e6af2ce24d80e8">
+        <source>Chinese (traditional)</source>
+        <target>Cinese (tradizionale)</target>
+        
+      </trans-unit>
+      <trans-unit id="s63e71d20d1eaca93">
+        <source>German</source>
+        <target>Tedesco</target>
+        
+      </trans-unit>
+      <trans-unit id="s49730f3d5751a433">
+        <source>Loading...</source>
+        <target>Caricamento...</target>
+        
+      </trans-unit>
+      <trans-unit id="sf1e9d421f35b51e5">
+        <source>Application</source>
+        <target>Applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s310d8757ce319673">
+        <source>Logins</source>
+        <target>Logins</target>
+        
+      </trans-unit>
+      <trans-unit id="sa50a6326530d8a0d">
+        <source>Show less</source>
+        <target>Mostra meno</target>
+        
+      </trans-unit>
+      <trans-unit id="sb2c57b2d347203dd">
+        <source>Show more</source>
+        <target>Mostra altro</target>
+        
+      </trans-unit>
+      <trans-unit id="s6238f519db67980d">
+        <source>UID</source>
+        <target>UID</target>
+        
+      </trans-unit>
+      <trans-unit id="sef49aec68fd1dc66">
+        <source>Name</source>
+        <target>Nome</target>
+        
+      </trans-unit>
+      <trans-unit id="sf9f2c719a04066ec">
+        <source>App</source>
+        <target>App</target>
+        
+      </trans-unit>
+      <trans-unit id="sda796c87fa97ed4d">
+        <source>Model Name</source>
+        <target>Nome del modello</target>
+        
+      </trans-unit>
+      <trans-unit id="s79e8cc71a5975b04">
+        <source>Message</source>
+        <target>Messaggio</target>
+        
+      </trans-unit>
+      <trans-unit id="sbbc53e0e54d7946f">
+        <source>Subject</source>
+        <target>Oggetto</target>
+        
+      </trans-unit>
+      <trans-unit id="sa6ab5184d6315895">
+        <source>From</source>
+        <target>Da</target>
+        
+      </trans-unit>
+      <trans-unit id="s09353907b5c79284">
+        <source>To</source>
+        <target>A</target>
+        
+      </trans-unit>
+      <trans-unit id="s63e03c70f67ebf9c">
+        <source>Context</source>
+        <target>Contesto</target>
+        
+      </trans-unit>
+      <trans-unit id="sa48f81f001b893d2">
+        <source>User</source>
+        <target>Utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s119498d4e4cf59a6">
+        <source>Affected model:</source>
+        <target>Modello interessato:</target>
+        
+      </trans-unit>
+      <trans-unit id="sa3660d505e7011e0">
+        <source>Authorized application:</source>
+        <target>Applicazione autorizzata:</target>
+        
+      </trans-unit>
+      <trans-unit id="s95a032ae86881bf5">
+        <source>Using flow</source>
+        <target>Utilizzando il flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="scb5c9a7cc4ccd68d">
+        <source>Email info:</source>
+        <target>Informazioni via e-mail:</target>
+        
+      </trans-unit>
+      <trans-unit id="s677f1b675fc21bb1">
+        <source>Secret:</source>
+        <target>Segreto:</target>
+        
+      </trans-unit>
+      <trans-unit id="sd947d57c9a9b7108">
+        <source>Open issue on GitHub...</source>
+        <target>Apri anomalia in Github...</target>
+        
+      </trans-unit>
+      <trans-unit id="sa6905be242387f36">
+        <source>Exception</source>
+        <target>Eccezione</target>
+        
+      </trans-unit>
+      <trans-unit id="s6ab73c998850c5ab">
+        <source>Expression</source>
+        <target>Espressione</target>
+        
+      </trans-unit>
+      <trans-unit id="s50ebe627b4bc7d02">
+        <source>Binding</source>
+        <target>Associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s3c6de3f257e0c912">
+        <source>Request</source>
+        <target>Richiesta</target>
+        
+      </trans-unit>
+      <trans-unit id="s730182ad28374cda">
+        <source>Object</source>
+        <target>Oggetto</target>
+        
+      </trans-unit>
+      <trans-unit id="s890e983a7be64da4">
+        <source>Result</source>
+        <target>Risultato</target>
+        
+      </trans-unit>
+      <trans-unit id="sd3a853f63f45dcb0">
+        <source>Passing</source>
+        <target>Passaggio</target>
+        
+      </trans-unit>
+      <trans-unit id="sbdeedc1c60306b35">
+        <source>Messages</source>
+        <target>Messaggi</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a5401d4419f9958">
+        <source>Using source</source>
+        <target>Usando la sorgente</target>
+        
+      </trans-unit>
+      <trans-unit id="s14622ee6de586485">
+        <source>Attempted to log in as <x id="0" equiv-text="${this.event.context.username}"/></source>
+        <target>Tentativo di accedere come
+        <x id="0" equiv-text="${this.event.context.username}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="sb07bf992e3d00664">
+        <source>No additional data available.</source>
+        <target>Nessun dato aggiuntivo disponibile.</target>
+        
+      </trans-unit>
+      <trans-unit id="s09810653c832e935">
+        <source>Click to change value</source>
+        <target>Clicca per cambiare valore</target>
+        
+      </trans-unit>
+      <trans-unit id="sfefce784ec55868f">
+        <source>Select an object.</source>
+        <target>Seleziona un oggetto.</target>
+        
+      </trans-unit>
+      <trans-unit id="s04ceadb276bbe149">
+        <source>Loading options...</source>
+        <target>Caricamento delle opzioni...</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe629863ba1338c2">
+        <source>Connection error, reconnecting...</source>
+        <target>Errore di connessione, riconnessione in corso...</target>
+        
+      </trans-unit>
+      <trans-unit id="sc8da3cc71de63832">
+        <source>Login</source>
+        <target>Login</target>
+        
+      </trans-unit>
+      <trans-unit id="sb4564c127ab8b921">
+        <source>Failed login</source>
+        <target>Accesso fallito</target>
+        
+      </trans-unit>
+      <trans-unit id="s67749057edb2586b">
+        <source>Logout</source>
+        <target>Logout</target>
+        
+      </trans-unit>
+      <trans-unit id="s7e537ad68d7c16e1">
+        <source>User was written to</source>
+        <target>L'utente è stato scritto in</target>
+        
+      </trans-unit>
+      <trans-unit id="sa0e0bdd7e244416b">
+        <source>Suspicious request</source>
+        <target>Richiesta sospetta</target>
+        
+      </trans-unit>
+      <trans-unit id="s7bda44013984fc48">
+        <source>Password set</source>
+        <target>Password impostata</target>
+        
+      </trans-unit>
+      <trans-unit id="sa1b41e334ad89d94">
+        <source>Secret was viewed</source>
+        <target>Segreto visualizzato</target>
+        
+      </trans-unit>
+      <trans-unit id="s92ca679592a36b35">
+        <source>Secret was rotated</source>
+        <target>Segreto ruotato</target>
+        
+      </trans-unit>
+      <trans-unit id="s8a1d9403ca90989b">
+        <source>Invitation used</source>
+        <target>Invito usato</target>
+        
+      </trans-unit>
+      <trans-unit id="s5f496533610103f2">
+        <source>Application authorized</source>
+        <target>Applicazione autorizzata</target>
+        
+      </trans-unit>
+      <trans-unit id="sdc9e222be9612939">
+        <source>Source linked</source>
+        <target>Sorgente collegata</target>
+        
+      </trans-unit>
+      <trans-unit id="sb1c91762ae3a9bee">
+        <source>Impersonation started</source>
+        <target>Impersonazione iniziata</target>
+        
+      </trans-unit>
+      <trans-unit id="s9c73bd29b279d26b">
+        <source>Impersonation ended</source>
+        <target>Impersonazione conclusa</target>
+        
+      </trans-unit>
+      <trans-unit id="s1cd264012278c047">
+        <source>Flow execution</source>
+        <target>Esecuzione flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s32f04d33924ce8ad">
+        <source>Policy execution</source>
+        <target>Esecuzione criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="sb6d7128df5978cee">
+        <source>Policy exception</source>
+        <target>Eccezione criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s77f572257f69a8db">
+        <source>Property Mapping exception</source>
+        <target>Eccezione mappatura proprietà</target>
+        
+      </trans-unit>
+      <trans-unit id="s2543cffd6ebb6803">
+        <source>System task execution</source>
+        <target>Esecuzione attività di sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="se2f258b996f7279c">
+        <source>System task exception</source>
+        <target>Eccezione attività di sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="s81eff3409d572a21">
+        <source>General system exception</source>
+        <target>Eccezione generale di sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="sf8f49cdbf0036343">
+        <source>Configuration error</source>
+        <target>Errore di configurazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s9c6f61dc47bc4f0a">
+        <source>Model created</source>
+        <target>Modello creato</target>
+        
+      </trans-unit>
+      <trans-unit id="s47a4983a2c6bb749">
+        <source>Model updated</source>
+        <target>Modello aggiornato</target>
+        
+      </trans-unit>
+      <trans-unit id="sc9f69360b58706c7">
+        <source>Model deleted</source>
+        <target>Modello cancellato</target>
+        
+      </trans-unit>
+      <trans-unit id="sa266303caf1bd27f">
+        <source>Email sent</source>
+        <target>Email cancellato</target>
+        
+      </trans-unit>
+      <trans-unit id="s6c410fedda2a575f">
+        <source>Update available</source>
+        <target>Aggiornamento disponibile</target>
+        
+      </trans-unit>
+      <trans-unit id="s02240309358f557c">
+        <source>Unknown severity</source>
+        <target>Gravità sconosciuta</target>
+        
+      </trans-unit>
+      <trans-unit id="sf1ec4acb8d744ed9">
+        <source>Alert</source>
+        <target>Allarme</target>
+        
+      </trans-unit>
+      <trans-unit id="s9117fb5195e75151">
+        <source>Notice</source>
+        <target>Nota</target>
+        
+      </trans-unit>
+      <trans-unit id="s34be76c6b1eadbef">
+        <source>Warning</source>
+        <target>Attenzione</target>
+        
+      </trans-unit>
+      <trans-unit id="sf45a0d2f00bcc6ff">
+        <source>no tabs defined</source>
+        <target>nessuna scheda definita</target>
+        
+      </trans-unit>
+      <trans-unit id="s04c5a637328c9b67">
+        <source><x id="0" equiv-text="${this.pages?.startIndex}"/> - <x id="1" equiv-text="${this.pages?.endIndex}"/> of <x id="2" equiv-text="${this.pages?.count}"/></source>
+        <target>
+        <x id="0" equiv-text="${this.pages?.startIndex}"/>-
+        <x id="1" equiv-text="${this.pages?.endIndex}"/>di
+        <x id="2" equiv-text="${this.pages?.count}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s6a89bb10338369b4">
+        <source>Go to previous page</source>
+        <target>Torna alla pagina precedente</target>
+        
+      </trans-unit>
+      <trans-unit id="s7edad99c6b7bfe88">
+        <source>Go to next page</source>
+        <target>Vai alla pagina successiva</target>
+        
+      </trans-unit>
+      <trans-unit id="sffa721bb6aa3128d">
+        <source>Search...</source>
+        <target>Cerca...</target>
+        
+      </trans-unit>
+      <trans-unit id="sb59d68ed12d46377">
+        <source>Loading</source>
+        <target>Caricamento</target>
+        
+      </trans-unit>
+      <trans-unit id="s7bc8c327f1f7c82c">
+        <source>No objects found.</source>
+        <target>Nessun oggetto trovato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfd44ce578f643145">
+        <source>Failed to fetch objects.</source>
+        <target>Impossibile recuperare gli oggetti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b7163270e57e8b4">
+        <source>Refresh</source>
+        <target>Ricarica</target>
+        
+      </trans-unit>
+      <trans-unit id="s909e876731a8febb">
+        <source>Select all rows</source>
+        <target>Seleziona tutte le righe</target>
+        
+      </trans-unit>
+      <trans-unit id="sa442044b586ec8bf">
+        <source>Action</source>
+        <target>Azione</target>
+        
+      </trans-unit>
+      <trans-unit id="s02839b01844d6ca8">
+        <source>Creation Date</source>
+        <target>Data di creazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s4d00f1de1c82281b">
+        <source>Client IP</source>
+        <target>Client IP</target>
+        
+      </trans-unit>
+      <trans-unit id="s2152f3482784705f">
+        <source>Recent events</source>
+        <target>Eventi recenti</target>
+        
+      </trans-unit>
+      <trans-unit id="sc35581d9c1cd67ff">
+        <source>On behalf of <x id="0" equiv-text="${event.user.on_behalf_of.username}"/></source>
+        <target>Per conto di
+        <x id="0" equiv-text="${event.user.on_behalf_of.username}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="saf63a04c86018698">
+        <source>-</source>
+        <target>-</target>
+        
+      </trans-unit>
+      <trans-unit id="s1b448a4ea79d4eef">
+        <source>No Events found.</source>
+        <target>Nessun Evento trovato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s50911ec1c8aee99a">
+        <source>No matching events could be found.</source>
+        <target>Nessun evento corrispondente è stato trovato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s113c05ef9996ca4b">
+        <source>Embedded outpost is not configured correctly.</source>
+        <target>Avamposto incorporato non è configurato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="seb5ba88f21937c98">
+        <source>Check outposts.</source>
+        <target>Controlla avamposto.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd0bc94e11935ee5a">
+        <source>HTTPS is not detected correctly</source>
+        <target>HTTPS non rilevato correttamente</target>
+        
+      </trans-unit>
+      <trans-unit id="s40bf151b56a64f51">
+        <source>Server and client are further than 5 seconds apart.</source>
+        <target>Il server e il client sono distanti più di 5 secondi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s091d3d07b5b3076f">
+        <source>OK</source>
+        <target>OK</target>
+        
+      </trans-unit>
+      <trans-unit id="sae486938be80729c">
+        <source>Everything is ok.</source>
+        <target>Tutto è ok.</target>
+        
+      </trans-unit>
+      <trans-unit id="sea91c57b3d3969fe">
+        <source>System status</source>
+        <target>Stato del sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="scefe482c547fb3f3">
+        <source>Based on <x id="0" equiv-text="${value.versionCurrent}"/></source>
+        <target>Basato su
+        <x id="0" equiv-text="${value.versionCurrent}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s68a50b1ee6efee7b">
+        <source><x id="0" equiv-text="${value.versionLatest}"/> is available!</source>
+        <target>
+        <x id="0" equiv-text="${value.versionLatest}"/>è disponibile!</target>
+        
+      </trans-unit>
+      <trans-unit id="s713d147e1761d0f0">
+        <source>Up-to-date!</source>
+        <target>Aggiornato!</target>
+        
+      </trans-unit>
+      <trans-unit id="sf4122b220926be97">
+        <source>Version</source>
+        <target>Versione</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a63a8be0b2b422c">
+        <source>Workers</source>
+        <target>Workers</target>
+        
+      </trans-unit>
+      <trans-unit id="s341ab68d4130de20">
+        <source>No workers connected. Background tasks will not run.</source>
+        <target>Nessun lavoratore connesso. Le attività in background non verranno eseguite.</target>
+        
+      </trans-unit>
+      <trans-unit id="s11bc220e8fa9d797">
+        <source>Authorizations</source>
+        <target>Autorizzazioni</target>
+        
+      </trans-unit>
+      <trans-unit id="s3ef3c252ada78076">
+        <source>Failed Logins</source>
+        <target>Accessi falliti</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2f1e5dd74c1b7df">
+        <source>Successful Logins</source>
+        <target>Accesso effettuato correttamente</target>
+        
+      </trans-unit>
+      <trans-unit id="s0382d73823585617">
+        <source><x id="0" equiv-text="${this.errorMessage}"/>: <x id="1" equiv-text="${e.toString()}"/></source>
+        <target>
+        <x id="0" equiv-text="${this.errorMessage}"/>:
+        <x id="1" equiv-text="${e.toString()}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s2ceb11be2290bb1b">
+        <source>Cancel</source>
+        <target>Cancella</target>
+        
+      </trans-unit>
+      <trans-unit id="se085f35c8a9203a1">
+        <source>LDAP Source</source>
+        <target>Sorgente LDAP</target>
+        
+      </trans-unit>
+      <trans-unit id="s477de089b505a6ea">
+        <source>SCIM Provider</source>
+        <target>Provider SCIM</target>
+        
+      </trans-unit>
+      <trans-unit id="s8a75e83497a183a2">
+        <source>Healthy</source>
+        <target>In salute</target>
+        
+      </trans-unit>
+      <trans-unit id="sfeb82261bcf99edd">
+        <source>Healthy outposts</source>
+        <target>Avamposti sani</target>
+        
+      </trans-unit>
+      <trans-unit id="saae1c70e168b45b4">
+        <source>Admin</source>
+        <target>Admin</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a11c2ffb8309d1a">
+        <source>Not found</source>
+        <target>Non trovato</target>
+        
+      </trans-unit>
+      <trans-unit id="saa0e2675da69651b">
+        <source>The URL &quot;<x id="0" equiv-text="${this.url}"/>&quot; was not found.</source>
+        <target>La URL &quot;
+        <x id="0" equiv-text="${this.url}"/>&quot; non è stata trovata.</target>
+        
+      </trans-unit>
+      <trans-unit id="s58cd9c2fe836d9c6">
+        <source>Return home</source>
+        <target>Ritorna all'inizio</target>
+        
+      </trans-unit>
+      <trans-unit id="s41e035c4bb8d15f2">
+        <source>General system status</source>
+        <target>Stato generale del sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="s6dfd15978586d05f">
+        <source>Welcome, <x id="0" equiv-text="${name || &quot;&quot;}"/>.</source>
+        <target>Benvenuto,
+        <x id="0" equiv-text="${name}"/>.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc381422c585b867f">
+        <source>Quick actions</source>
+        <target>Azioni rapide</target>
+        
+      </trans-unit>
+      <trans-unit id="sfd13ca8ebd857c2e">
+        <source>Create a new application</source>
+        <target>Creare una nuova applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s079d388d3cbfa54f">
+        <source>Check the logs</source>
+        <target>Controlla i log</target>
+        
+      </trans-unit>
+      <trans-unit id="sed8d4c3fd5f60e1f">
+        <source>Explore integrations</source>
+        <target>Esplora integrazioni</target>
+        
+      </trans-unit>
+      <trans-unit id="sfffb0d0958bfbc42">
+        <source>Manage users</source>
+        <target>Gestire gli utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="s8763a33c3d46aaf5">
+        <source>Outpost status</source>
+        <target>Stato avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="scc286303aa9c6cb0">
+        <source>Sync status</source>
+        <target>Stato di sincronizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sbdc4a833de9ca502">
+        <source>Logins and authorizations over the last week (per 8 hours)</source>
+        <target>Login e autorizzazioni nell'ultima settimana (per 8 ore)</target>
+        
+      </trans-unit>
+      <trans-unit id="s6e09a19aa3952509">
+        <source>Apps with most usage</source>
+        <target>App con maggior utilizzo</target>
+        
+      </trans-unit>
+      <trans-unit id="sda5e1499f93146ad">
+        <source><x id="0" equiv-text="${ago}"/> days ago</source>
+        <target>
+        <x id="0" equiv-text="${ago}"/>giorni fa</target>
+        
+      </trans-unit>
+      <trans-unit id="s51ea3a244c781b1f">
+        <source>Objects created</source>
+        <target>Oggetti creati</target>
+        
+      </trans-unit>
+      <trans-unit id="sfbadb77fbc61efb8">
+        <source>Users created per day in the last month</source>
+        <target>Utenti creati al giorno nell'ultimo mese</target>
+        
+      </trans-unit>
+      <trans-unit id="sb0669da3df95837c">
+        <source>Logins per day in the last month</source>
+        <target>Accessi giornalieri nell'ultimo mese</target>
+        
+      </trans-unit>
+      <trans-unit id="s835da49b4dc83a51">
+        <source>Failed Logins per day in the last month</source>
+        <target>Accessi non riusciti al giorno nell'ultimo mese</target>
+        
+      </trans-unit>
+      <trans-unit id="s5f4586bc1e2740e6">
+        <source>Clear search</source>
+        <target>Pulisci ricerca</target>
+        
+      </trans-unit>
+      <trans-unit id="s3b34d9930e33bd46">
+        <source>System Tasks</source>
+        <target>Attività di sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="saaa3abe03c7260f9">
+        <source>Long-running operations which authentik executes in the background.</source>
+        <target>Operazioni di lunga durata che authentik esegue in background.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7468e87263dfff7e">
+        <source>Identifier</source>
+        <target>Identificatore</target>
+        
+      </trans-unit>
+      <trans-unit id="s63d894b1ddb06289">
+        <source>Description</source>
+        <target>Descrizione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa9b2a245441557dc">
+        <source>Last run</source>
+        <target>Ultima esecuzione</target>
+        
+      </trans-unit>
+      <trans-unit id="sad3e3c8146fc920f">
+        <source>Status</source>
+        <target>Stato</target>
+        
+      </trans-unit>
+      <trans-unit id="s8af61807443f32a4">
+        <source>Actions</source>
+        <target>Azioni</target>
+        
+      </trans-unit>
+      <trans-unit id="sbe9a51f29a4a2c5b">
+        <source>Successful</source>
+        <target>Riuscito</target>
+        
+      </trans-unit>
+      <trans-unit id="s5f343a43e7ea9f91">
+        <source>Error</source>
+        <target>Errore</target>
+        
+      </trans-unit>
+      <trans-unit id="sc592307ea80f16b9">
+        <source>Unknown</source>
+        <target>Sconosciuto</target>
+        
+      </trans-unit>
+      <trans-unit id="s92921878e886e36d">
+        <source>Duration</source>
+        <target>Durata</target>
+        
+      </trans-unit>
+      <trans-unit id="se7e1ababbc4868b8">
+        <source><x id="0" equiv-text="${item.duration.toFixed(2)}"/> seconds</source>
+        <target>
+        <x id="0" equiv-text="${item.duration.toFixed(2)}"/>secondi</target>
+        
+      </trans-unit>
+      <trans-unit id="sc25edca57df81461">
+        <source>Authentication</source>
+        <target>Autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s6dfb7283452f78fe">
+        <source>Authorization</source>
+        <target>Autorizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sddcfc6ab24e3a6ed">
+        <source>Enrollment</source>
+        <target>Iscrizione</target>
+        
+      </trans-unit>
+      <trans-unit id="s1fc9c70610c4c67d">
+        <source>Invalidation</source>
+        <target>Invalidazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s6ac670086eb137c6">
+        <source>Recovery</source>
+        <target>Ripristino</target>
+        
+      </trans-unit>
+      <trans-unit id="sdf22dcf939c27cc7">
+        <source>Stage Configuration</source>
+        <target>Configurazione della fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s6d5bce4321f57cda">
+        <source>Unenrollment</source>
+        <target>Disiscrizione</target>
+        
+      </trans-unit>
+      <trans-unit id="sde2bb5418562c5b2">
+        <source>Unknown designation</source>
+        <target>Designazione sconosciuta</target>
+        
+      </trans-unit>
+      <trans-unit id="sb9834316ffd4ae3e">
+        <source>Stacked</source>
+        <target>Impilato</target>
+        
+      </trans-unit>
+      <trans-unit id="s12146091b2b539a3">
+        <source>Content left</source>
+        <target>Contenuto a sinistra</target>
+        
+      </trans-unit>
+      <trans-unit id="sa800871782eba1ac">
+        <source>Content right</source>
+        <target>Contenuto a destra</target>
+        
+      </trans-unit>
+      <trans-unit id="sb4e50ca3cffdbc10">
+        <source>Sidebar left</source>
+        <target>Sidebar a sinistra</target>
+        
+      </trans-unit>
+      <trans-unit id="s745a55f9abf9f2e5">
+        <source>Sidebar right</source>
+        <target>Sidebar a destra</target>
+        
+      </trans-unit>
+      <trans-unit id="sb3182a87ded1bc91">
+        <source>Unknown layout</source>
+        <target>Layout sconosciuto</target>
+        
+      </trans-unit>
+      <trans-unit id="sdfd22a21660f6002">
+        <source>Successfully updated provider.</source>
+        <target>Provider aggiornato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s457c639088c547c5">
+        <source>Successfully created provider.</source>
+        <target>Provider creato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sff69c1a637f899a6">
+        <source>Bind flow</source>
+        <target>Associazione fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s319040353f479853">
+        <source>Flow used for users to authenticate.</source>
+        <target>Flusso usato per autenticare gli utenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="se5973e7c8ba0fc71">
+        <source>Bind mode</source>
+        <target>Modalità associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s8915e64b8b999bfe">
+        <source>Cached binding</source>
+        <target>Asociazione in cache</target>
+        
+      </trans-unit>
+      <trans-unit id="s842d690eb3c11762">
+        <source>Flow is executed and session is cached in memory. Flow is executed when session expires</source>
+        <target>Il flusso viene eseguito e la sessione viene memorizzata nella cache. Il flusso viene eseguito alla scadenza della sessione</target>
+        
+      </trans-unit>
+      <trans-unit id="s6a66759749bf31ed">
+        <source>Direct binding</source>
+        <target>Associazione diretta</target>
+        
+      </trans-unit>
+      <trans-unit id="se0adaf83627104fb">
+        <source>Always execute the configured bind flow to authenticate the user</source>
+        <target>Esegui sempre il flusso di collegamento configurato per autenticare l'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="scef3f4ad80abbd22">
+        <source>Configure how the outpost authenticates requests.</source>
+        <target>Configura come l'avamposto autentica le richieste.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbcae51a6f06e53d4">
+        <source>Search mode</source>
+        <target>Modalità di ricerca</target>
+        
+      </trans-unit>
+      <trans-unit id="s9065fcccd837a679">
+        <source>Cached querying</source>
+        <target>Interrogazione cache</target>
+        
+      </trans-unit>
+      <trans-unit id="s30d0d0e6c626a234">
+        <source>The outpost holds all users and groups in-memory and will refresh every 5 Minutes</source>
+        <target>L'avamposto tiene tutti gli utenti e i gruppi in memoria e li aggiorna ogni 5 Minuti</target>
+        
+      </trans-unit>
+      <trans-unit id="sffc14b8200a9f938">
+        <source>Direct querying</source>
+        <target>Interrogazione diretta</target>
+        
+      </trans-unit>
+      <trans-unit id="sdce4680288083fe3">
+        <source>Always returns the latest data, but slower than cached querying</source>
+        <target>Ritorna sempre i dati più recenti, ma è più lento del cached querying</target>
+        
+      </trans-unit>
+      <trans-unit id="s8b87df5664de7eb8">
+        <source>Configure how the outpost queries the core authentik server's users.</source>
+        <target>Configura come l'avamposto interroga gli utenti del server core authentik.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe388f0313f52da2">
+        <source>Protocol settings</source>
+        <target>Impostazioni del protocollo</target>
+        
+      </trans-unit>
+      <trans-unit id="s55d731be1ef66efe">
+        <source>Base DN</source>
+        <target>Base DN</target>
+        
+      </trans-unit>
+      <trans-unit id="s0b15ff11a0049cfd">
+        <source>LDAP DN under which bind requests and search requests can be made.</source>
+        <target>LDAP DN sotto il quale possono essere effettuate le richieste di bind e di ricerca.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb157267c85fdff30">
+        <source>Certificate</source>
+        <target>Certificato</target>
+        
+      </trans-unit>
+      <trans-unit id="sac43cb9690260b86">
+        <source>UID start number</source>
+        <target>Numero di inizio UID</target>
+        
+      </trans-unit>
+      <trans-unit id="s60edbcfac8ed1f90">
+        <source>The start for uidNumbers, this number is added to the user.Pk to make sure that the numbers aren't too low for POSIX users. Default is 2000 to ensure that we don't collide with local users uidNumber</source>
+        <target>L'inizio di uidNumbers, questo numero viene aggiunto a user.Pk per assicurarsi che i numeri non siano troppo bassi per gli utenti POSIX. Il valore predefinito è 2000 per garantire che non ci si scontri con gli utenti locali.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5acb607b40356974">
+        <source>GID start number</source>
+        <target>Numero di inizio GID</target>
+        
+      </trans-unit>
+      <trans-unit id="s1c8e9816dcae6d9c">
+        <source>The start for gidNumbers, this number is added to a number generated from the group.Pk to make sure that the numbers aren't too low for POSIX groups. Default is 4000 to ensure that we don't collide with local groups or users primary groups gidNumber</source>
+        <target>Il punto di partenza per gidNumbers, questo numero viene aggiunto a un numero generato dal group.pk per assicurarsi che i numeri non siano troppo bassi per i gruppi POSIX. Il valore predefinito è 4000 per garantire che non ci siano collisioni con gruppi locali o gruppi primari di utenti gidNumber.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2236dc563c2dbf76">
+        <source>(Format: hours=-1;minutes=-2;seconds=-3).</source>
+        <target>(Formato: ore=-1;minuti=-2;secondi=-3).</target>
+        
+      </trans-unit>
+      <trans-unit id="sbec40ef4e6f139b7">
+        <source>(Format: hours=1;minutes=2;seconds=3).</source>
+        <target>(Formato: hours=1;minutes=2;seconds=3).</target>
+        
+      </trans-unit>
+      <trans-unit id="sbb8ad22c83d375b1">
+        <source>The following keywords are supported:</source>
+        <target>I seguenti parole chiave sono supportate:</target>
+        
+      </trans-unit>
+      <trans-unit id="sbb3243352661428f">
+        <source>Authentication flow</source>
+        <target>Flusso di autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa72a3bd1e7e89926">
+        <source>Flow used when a user access this provider and is not authenticated.</source>
+        <target>Flusso utilizzato quando un utente accede a questo provider e non è autenticato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s62f7c59b0606a8d6">
+        <source>Authorization flow</source>
+        <target>Flusso di autorizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sfbaeb0de54fbfdbb">
+        <source>Flow used when authorizing this provider.</source>
+        <target>Flusso utilizzato durante l'autorizzazione di questo provider.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc8de93a7dc0d78ba">
+        <source>Client type</source>
+        <target>Tipologia client</target>
+        
+      </trans-unit>
+      <trans-unit id="s399cc2d67d92e957">
+        <source>Confidential</source>
+        <target>Confidenziale</target>
+        
+      </trans-unit>
+      <trans-unit id="s95f09b229a0a0bb0">
+        <source>Confidential clients are capable of maintaining the confidentiality of their credentials such as client secrets</source>
+        <target>I client confidenziali sono in grado di mantenere la riservatezza delle proprie credenziali, ad esempio i segreti del client</target>
+        
+      </trans-unit>
+      <trans-unit id="sdd1ff479d04ac140">
+        <source>Public</source>
+        <target>Pubblico</target>
+        
+      </trans-unit>
+      <trans-unit id="s51c6b8403c2dc5d9">
+        <source>Public clients are incapable of maintaining the confidentiality and should use methods like PKCE. </source>
+        <target>I clienti pubblici non sono in grado di mantenere la confidenzialità e dovrebbero utilizzare metodi come PKCE.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4d00e5de1c8213b7">
+        <source>Client ID</source>
+        <target>Client ID</target>
+        
+      </trans-unit>
+      <trans-unit id="s03fb3fa232f0434a">
+        <source>Client Secret</source>
+        <target>Client Secret</target>
+        
+      </trans-unit>
+      <trans-unit id="sde0ad51b14f77cf6">
+        <source>Redirect URIs/Origins (RegEx)</source>
+        <target>Reindirizzamento URI/Origini (RegEx)</target>
+        
+      </trans-unit>
+      <trans-unit id="s7f9eb9c8bd26e8fd">
+        <source>Valid redirect URLs after a successful authorization flow. Also specify any origins here for Implicit flows.</source>
+        <target>URL di reindirizzamento validi dopo un flusso di autorizzazione riuscito. Specificare qui anche eventuali origini per i flussi impliciti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2a369bc2febb5d55">
+        <source>If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved.</source>
+        <target>Se non vengono specificati URI di reindirizzamento espliciti, verrà salvato il primo URI di reindirizzamento utilizzato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa8384c9c26731f83">
+        <source>To allow any redirect URI, set this value to &quot;.*&quot;. Be aware of the possible security implications this can have.</source>
+        <target>Per consentire qualsiasi URI di reindirizzamento, impostare questo valore su &quot;.*&quot;. Sii consapevole delle possibili implicazioni sulla sicurezza che ciò può avere.</target>
+        
+      </trans-unit>
+      <trans-unit id="s55787f4dfcdce52b">
+        <source>Signing Key</source>
+        <target>Chiave di firma</target>
+        
+      </trans-unit>
+      <trans-unit id="sc6c57419ad3a01a8">
+        <source>Key used to sign the tokens.</source>
+        <target>Chiave utilizzata per firmare i token.</target>
+        
+      </trans-unit>
+      <trans-unit id="s124f93a61ee772d6">
+        <source>Advanced protocol settings</source>
+        <target>Impostazioni avanzate del protocollo</target>
+        
+      </trans-unit>
+      <trans-unit id="s926e0ecf124fb01a">
+        <source>Access code validity</source>
+        <target>Codice di accesso valido</target>
+        
+      </trans-unit>
+      <trans-unit id="sa578033f134a83b6">
+        <source>Configure how long access codes are valid for.</source>
+        <target>Configura per quanto tempo sono validi i codici di accesso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbea3db12fd799210">
+        <source>Access Token validity</source>
+        <target>Validità del token di accesso</target>
+        
+      </trans-unit>
+      <trans-unit id="s72559845d38bf688">
+        <source>Configure how long access tokens are valid for.</source>
+        <target>Configura per quanto tempo sono validi i token di accesso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s821f6014c1a435b9">
+        <source>Refresh Token validity</source>
+        <target>Validità del token di aggiornamento</target>
+        
+      </trans-unit>
+      <trans-unit id="s00c2db16ea9bc263">
+        <source>Configure how long refresh tokens are valid for.</source>
+        <target>Configura per quanto tempo sono validi i token di aggiornamento.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2e3ef41a0edd8608">
+        <source>Scopes</source>
+        <target>Ambiti</target>
+        
+      </trans-unit>
+      <trans-unit id="s3a3fae99373ce56b">
+        <source>Select which scopes can be used by the client. The client still has to specify the scope to access the data.</source>
+        <target>Selezionare quali ambiti possono essere utilizzati dal client. Il client deve ancora specificare l'ambito per accedere ai dati.</target>
+        
+      </trans-unit>
+      <trans-unit id="s26bf2730430efbea">
+        <source>Subject mode</source>
+        <target>Modalità soggetto</target>
+        
+      </trans-unit>
+      <trans-unit id="sccc47f82044453f9">
+        <source>Based on the User's hashed ID</source>
+        <target>In base all'hashed ID dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sbd5be4fb7442a34c">
+        <source>Based on the User's ID</source>
+        <target>In base all'ID dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sc9cf9ecaf9e5d67e">
+        <source>Based on the User's UUID</source>
+        <target>Basato sull'UUID dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s4291727352c4f295">
+        <source>Based on the User's username</source>
+        <target>In base al nome utente dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sd62cfc27ad4aa33b">
+        <source>Based on the User's Email</source>
+        <target>In base all'e-mail dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s55eb75bedf96be0f">
+        <source>This is recommended over the UPN mode.</source>
+        <target>Questo è consigliato in modalità UPN.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf80e9547166117e6">
+        <source>Based on the User's UPN</source>
+        <target>In base all'UPN dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sde949d0ef44572eb">
+        <source>Requires the user to have a 'upn' attribute set, and falls back to hashed user ID. Use this mode only if you have different UPN and Mail domains.</source>
+        <target>Richiede che l'utente abbia un attributo &quot;upn&quot; impostato e ricorre all'ID utente con hash. Utilizza questa modalità solo se disponi di domini UPN e di posta diversi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9f23ed1799b4d49a">
+        <source>Configure what data should be used as unique User Identifier. For most cases, the default should be fine.</source>
+        <target>Configura quali dati devono essere utilizzati come identificatore utente univoco. Nella maggior parte dei casi, l'impostazione predefinita dovrebbe andare bene.</target>
+        
+      </trans-unit>
+      <trans-unit id="s17d1e337f6c11c1e">
+        <source>Include claims in id_token</source>
+        <target>Includi attestazioni in id_token</target>
+        
+      </trans-unit>
+      <trans-unit id="sbf41e0db12834133">
+        <source>Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint.</source>
+        <target>Includere le attestazioni utente dagli ambiti in id_token, per le applicazioni che non accedono all'endpoint userinfo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s850a58c683682809">
+        <source>Issuer mode</source>
+        <target>Modalità emittente</target>
+        
+      </trans-unit>
+      <trans-unit id="sde56783222b527d6">
+        <source>Each provider has a different issuer, based on the application slug</source>
+        <target>Ogni provider ha un emittente diverso, in base allo slug dell'applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s8d32d7b9e8ca60b1">
+        <source>Same identifier is used for all providers</source>
+        <target>Lo stesso identificatore viene utilizzato per tutti i fornitori</target>
+        
+      </trans-unit>
+      <trans-unit id="s37d9155b9f4cc7bd">
+        <source>Configure how the issuer field of the ID Token should be filled.</source>
+        <target>Configura come deve essere compilato il campo dell'emittente del token ID.</target>
+        
+      </trans-unit>
+      <trans-unit id="se2adaf0371ffcd65">
+        <source>Machine-to-Machine authentication settings</source>
+        <target>Impostazioni di autenticazione da macchina a macchina</target>
+        
+      </trans-unit>
+      <trans-unit id="s33318837e6c54a9b">
+        <source>Trusted OIDC Sources</source>
+        <target>Sorgenti OIDC affidabili</target>
+        
+      </trans-unit>
+      <trans-unit id="s22e566052f7bec81">
+        <source>JWTs signed by certificates configured in the selected sources can be used to authenticate to this provider.</source>
+        <target>I JWT firmati dai certificati configurati nelle origini selezionate possono essere utilizzati per autenticarsi presso questo provider.</target>
+        
+      </trans-unit>
+      <trans-unit id="s072c6d12d3d37501">
+        <source>HTTP-Basic Username Key</source>
+        <target>Chiave del nome utente HTTP-Basic</target>
+        
+      </trans-unit>
+      <trans-unit id="sb2bb6f93773a4594">
+        <source>User/Group Attribute used for the user part of the HTTP-Basic Header. If not set, the user's Email address is used.</source>
+        <target>Attributo utente/gruppo utilizzato per la parte utente dell'intestazione HTTP-Basic. Se non impostato, viene utilizzato l'indirizzo e-mail dell'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s70f6471de355b98c">
+        <source>HTTP-Basic Password Key</source>
+        <target>Chiave password HTTP-Basic</target>
+        
+      </trans-unit>
+      <trans-unit id="sf4de1644dcdb53d5">
+        <source>User/Group Attribute used for the password part of the HTTP-Basic Header.</source>
+        <target>Attributo utente/gruppo utilizzato per la parte password dell'intestazione HTTP-Basic.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb8dd788adf7b907b">
+        <source>Proxy</source>
+        <target>Proxy</target>
+        
+      </trans-unit>
+      <trans-unit id="s7489f76224f8120d">
+        <source>Forward auth (single application)</source>
+        <target>Autenticazione inoltrata (applicazione singola)</target>
+        
+      </trans-unit>
+      <trans-unit id="s25d0cd75377daf75">
+        <source>Forward auth (domain level)</source>
+        <target>Autenticazione inoltrata (a livello di dominio)</target>
+        
+      </trans-unit>
+      <trans-unit id="s93574c03953f25dd">
+        <source>This provider will behave like a transparent reverse-proxy, except requests must be authenticated. If your upstream application uses HTTPS, make sure to connect to the outpost using HTTPS as well.</source>
+        <target>Questo provider si comporterà come un proxy inverso trasparente, tranne per il fatto che le richieste devono essere autenticate. Se la tua applicazione upstream utilizza HTTPS, assicurati di connetterti all'avamposto utilizzando anche HTTPS.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa29b5680cfafacc8">
+        <source>External host</source>
+        <target>Host esterno</target>
+        
+      </trans-unit>
+      <trans-unit id="s764bccb30868bf62">
+        <source>The external URL you'll access the application at. Include any non-standard port.</source>
+        <target>L'URL esterno da cui accederai all'applicazione. Includere qualsiasi porta non standard.</target>
+        
+      </trans-unit>
+      <trans-unit id="scb317851cbcc6b12">
+        <source>Internal host</source>
+        <target>Host interno</target>
+        
+      </trans-unit>
+      <trans-unit id="sf05e384059a0a7c1">
+        <source>Upstream host that the requests are forwarded to.</source>
+        <target>Host upstream a cui vengono inoltrate le richieste.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3d34068a31cab30b">
+        <source>Internal host SSL Validation</source>
+        <target>Convalida SSL host interna</target>
+        
+      </trans-unit>
+      <trans-unit id="s4a26798e1c3c37dd">
+        <source>Validate SSL Certificates of upstream servers.</source>
+        <target>Convalida i certificati SSL dei server upstream.</target>
+        
+      </trans-unit>
+      <trans-unit id="s44c90273f08fb718">
+        <source>Use this provider with nginx's auth_request or traefik's forwardAuth. Only a single provider is required per root domain. You can't do per-application authorization, but you don't have to create a provider for each application.</source>
+        <target>Utilizza questo provider con auth_request di nginx o forwardAuth di traefik. È richiesto un solo provider per dominio root. Non è possibile eseguire l'autorizzazione per applicazione, ma non è necessario creare un provider per ogni applicazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf55d28d4dff0e41b">
+        <source>An example setup can look like this:</source>
+        <target>Una configurazione di esempio può assomigliare a questa:</target>
+        
+      </trans-unit>
+      <trans-unit id="sb4a1d1c19438e929">
+        <source>authentik running on auth.example.com</source>
+        <target>authentik in esecuzione su auth.example.com</target>
+        
+      </trans-unit>
+      <trans-unit id="s68f935c9ca792016">
+        <source>app1 running on app1.example.com</source>
+        <target>app1 in esecuzione su app1.example.com</target>
+        
+      </trans-unit>
+      <trans-unit id="sf813a72d8fadd765">
+        <source>In this case, you'd set the Authentication URL to auth.example.com and Cookie domain to example.com.</source>
+        <target>In questo caso, imposteresti l'URL di autenticazione su auth.example.com e il dominio dei cookie su example.com.</target>
+        
+      </trans-unit>
+      <trans-unit id="s31d15c6f16951464">
+        <source>Authentication URL</source>
+        <target>URL di autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa03fe48e892df2d8">
+        <source>The external URL you'll authenticate at. The authentik core server should be reachable under this URL.</source>
+        <target>L'URL esterno su cui ti autenticherai. Il server core authentik dovrebbe essere raggiungibile tramite questo URL.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7def067ed3ad3ad9">
+        <source>Cookie domain</source>
+        <target>Dominio dei cookie</target>
+        
+      </trans-unit>
+      <trans-unit id="s211b75e868072162">
+        <source>Set this to the domain you wish the authentication to be valid for. Must be a parent domain of the URL above. If you're running applications as app1.domain.tld, app2.domain.tld, set this to 'domain.tld'.</source>
+        <target>Impostalo sul dominio per il quale desideri che l'autenticazione sia valida. Deve essere un dominio principale dell'URL riportato sopra. Se esegui applicazioni come app1.domain.tld, app2.domain.tld, impostalo su &quot;domain.tld&quot;.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2345170f7e272668">
+        <source>Unknown proxy mode</source>
+        <target>Modalità proxy sconosciuta</target>
+        
+      </trans-unit>
+      <trans-unit id="s7c10976de6411844">
+        <source>Token validity</source>
+        <target>Validità del token</target>
+        
+      </trans-unit>
+      <trans-unit id="s3e87ce98ba3c4d80">
+        <source>Configure how long tokens are valid for.</source>
+        <target>Configura per quanto tempo sono validi i token.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd539548ca4c71619">
+        <source>Additional scopes</source>
+        <target>Ambiti aggiuntivi</target>
+        
+      </trans-unit>
+      <trans-unit id="s8f12575f694e85a2">
+        <source>Additional scope mappings, which are passed to the proxy.</source>
+        <target>Mapping di ambito aggiuntivi, che vengono passati al proxy.</target>
+        
+      </trans-unit>
+      <trans-unit id="s93cea6ca1f93349d">
+        <source>Unauthenticated URLs</source>
+        <target>URL non autenticati</target>
+        
+      </trans-unit>
+      <trans-unit id="sc4508175bf6b09dd">
+        <source>Unauthenticated Paths</source>
+        <target>Percorsi non autenticati</target>
+        
+      </trans-unit>
+      <trans-unit id="sc9fc206433f67588">
+        <source>Regular expressions for which authentication is not required. Each new line is interpreted as a new expression.</source>
+        <target>Espressioni regolari per le quali non è richiesta l'autenticazione. Ogni nuova riga viene interpretata come una nuova espressione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd503fabef9691134">
+        <source>When using proxy or forward auth (single application) mode, the requested URL Path is checked against the regular expressions. When using forward auth (domain mode), the full requested URL including scheme and host is matched against the regular expressions.</source>
+        <target>Quando si utilizza la modalità proxy o di autenticazione inoltrata (applicazione singola), il percorso URL richiesto viene confrontato con le espressioni regolari. Quando si utilizza l'autenticazione inoltrata (modalità dominio), l'URL completo richiesto, inclusi schema e host, viene confrontato con le espressioni regolari.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb488dee0be434f7e">
+        <source>Authentication settings</source>
+        <target>Impostazioni di autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s23cee624c735f266">
+        <source>Intercept header authentication</source>
+        <target>Intercetta l'authorization header</target>
+        
+      </trans-unit>
+      <trans-unit id="sc007cca5af67eae0">
+        <source>When enabled, authentik will intercept the Authorization header to authenticate the request.</source>
+        <target>Se abilitato, authentik intercetterà la authorization header per autenticare la richiesta.</target>
+        
+      </trans-unit>
+      <trans-unit id="s36e630ba56617556">
+        <source>Send HTTP-Basic Authentication</source>
+        <target>Invia HTTP-Basic Authentication</target>
+        
+      </trans-unit>
+      <trans-unit id="s9d5796a4b9b7560e">
+        <source>Send a custom HTTP-Basic Authentication header based on values from authentik.</source>
+        <target>Imposta un header personalizzato HTTP-Basic Authentication basato su parametri provenienti da authentik.</target>
+        
+      </trans-unit>
+      <trans-unit id="s11204eeb1e27ea8f">
+        <source>ACS URL</source>
+        <target>ACS URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sb7a30abc1dcf6c36">
+        <source>Issuer</source>
+        <target>Emittente</target>
+        
+      </trans-unit>
+      <trans-unit id="sf54c562d8a10ce77">
+        <source>Also known as EntityID.</source>
+        <target>Conosciuto anche come EntityID</target>
+        
+      </trans-unit>
+      <trans-unit id="s991b750e2d5c4234">
+        <source>Service Provider Binding</source>
+        <target>Associazione del fornitore di servizi</target>
+        
+      </trans-unit>
+      <trans-unit id="sd8f220c999726151">
+        <source>Redirect</source>
+        <target>Redirect</target>
+        
+      </trans-unit>
+      <trans-unit id="sb357ea19a722d827">
+        <source>Post</source>
+        <target>Post</target>
+        
+      </trans-unit>
+      <trans-unit id="s4e28e2899e08a5f8">
+        <source>Determines how authentik sends the response back to the Service Provider.</source>
+        <target>Determina il modo in cui authentik invia la risposta al fornitore di servizi.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd5a4b41c6c883b03">
+        <source>Audience</source>
+        <target>Audience</target>
+        
+      </trans-unit>
+      <trans-unit id="sc741d9ebe07ad103">
+        <source>Signing Certificate</source>
+        <target>Certificato di firma</target>
+        
+      </trans-unit>
+      <trans-unit id="sd6c3ddb62de0e8f7">
+        <source>Certificate used to sign outgoing Responses going to the Service Provider.</source>
+        <target>Certificato utilizzato per firmare le risposte in uscita destinate al fornitore di servizi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5be3b0567172e415">
+        <source>Verification Certificate</source>
+        <target>Certificato di verifica</target>
+        
+      </trans-unit>
+      <trans-unit id="s7c27e113f90a89e0">
+        <source>When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default.</source>
+        <target>Se selezionata, le firme dell'asserzione in entrata verranno convalidate rispetto a questo certificato. Per consentire richieste non firmate, lasciare l'impostazione predefinita.</target>
+        
+      </trans-unit>
+      <trans-unit id="se6d950402810c34f">
+        <source>Property mappings</source>
+        <target>Mapping delle proprietà</target>
+        
+      </trans-unit>
+      <trans-unit id="s1a2797874b7fe852">
+        <source>NameID Property Mapping</source>
+        <target>Mappatura proprietà NameID</target>
+        
+      </trans-unit>
+      <trans-unit id="s256b8452664ccae4">
+        <source>Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected.</source>
+        <target>Configura il modo in cui verrà creato il valore NameID. Se lasciato vuoto, verrà rispettato il NameIDPolicy della richiesta in arrivo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9f91cc8bcfabb40f">
+        <source>Assertion valid not before</source>
+        <target>Asserzione valida non prima</target>
+        
+      </trans-unit>
+      <trans-unit id="s733f83ff9d50da30">
+        <source>Configure the maximum allowed time drift for an assertion.</source>
+        <target>Configurare lo scostamento temporale massimo consentito per un'asserzione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2af5754090898640">
+        <source>Assertion valid not on or after</source>
+        <target>Affermazione valida non il o dopo</target>
+        
+      </trans-unit>
+      <trans-unit id="s43c1f927936f0a02">
+        <source>Assertion not valid on or after current time + this value.</source>
+        <target>Asserzione non valida a partire dall'ora corrente + questo valore.</target>
+        
+      </trans-unit>
+      <trans-unit id="sad8550b8731518d8">
+        <source>Session valid not on or after</source>
+        <target>Sessione valida non il o dopo</target>
+        
+      </trans-unit>
+      <trans-unit id="s0dd00fbaba08748a">
+        <source>Session not valid on or after current time + this value.</source>
+        <target>Sessione non valida a partire dall'ora corrente + questo valore.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2a0f60e74b478804">
+        <source>Digest algorithm</source>
+        <target>Algoritmo digest</target>
+        
+      </trans-unit>
+      <trans-unit id="s693d975d38ff0214">
+        <source>Signature algorithm</source>
+        <target>Algoritmo firma</target>
+        
+      </trans-unit>
+      <trans-unit id="sd1a5560fde6f2271">
+        <source>Successfully imported provider.</source>
+        <target>Fornitore importato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s252a52330d32b900">
+        <source>Metadata</source>
+        <target>Metadati</target>
+        
+      </trans-unit>
+      <trans-unit id="s7181a5504472e856">
+        <source>Apply changes</source>
+        <target>Applica modifiche</target>
+        
+      </trans-unit>
+      <trans-unit id="s5e8250fb85d64c23">
+        <source>Close</source>
+        <target>Chiudi</target>
+        
+      </trans-unit>
+      <trans-unit id="sad59707375956ad2">
+        <source>Finish</source>
+        <target>Concludi</target>
+        
+      </trans-unit>
+      <trans-unit id="sc16e00a7a8b2fde2">
+        <source>Back</source>
+        <target>Indietro</target>
+        
+      </trans-unit>
+      <trans-unit id="sd5903cc8de68b3fc">
+        <source>No form found</source>
+        <target>Nessun modulo trovato</target>
+        
+      </trans-unit>
+      <trans-unit id="s45935843b1b5b496">
+        <source>Form didn't return a promise for submitting</source>
+        <target>Il modulo non ha restituito una promise di invio</target>
+        
+      </trans-unit>
+      <trans-unit id="s74475586afc1fb0f">
+        <source>Select type</source>
+        <target>Seleziona il tipo</target>
+        
+      </trans-unit>
+      <trans-unit id="s382a2aa3984474dd">
+        <source>Create</source>
+        <target>Crea</target>
+        
+      </trans-unit>
+      <trans-unit id="s58d1eb482059da12">
+        <source>New provider</source>
+        <target>Nuovo provider</target>
+        
+      </trans-unit>
+      <trans-unit id="sa661ea7d7a50f2e9">
+        <source>Create a new provider.</source>
+        <target>Crea un nuovo provider.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5d6af4c100ad321b">
+        <source>Create <x id="0" equiv-text="${type.name}"/></source>
+        <target>Crea
+        <x id="0" equiv-text="${type.name}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="sb95baab425322600">
+        <source>Shared secret</source>
+        <target>Segreto condiviso</target>
+        
+      </trans-unit>
+      <trans-unit id="s9e9316a6b0c16231">
+        <source>Client Networks</source>
+        <target>Client Networks</target>
+        
+      </trans-unit>
+      <trans-unit id="s7f2dcf01f7a8c0b7">
+        <source>List of CIDRs (comma-seperated) that clients can connect from. A more specific
+                            CIDR will match before a looser one. Clients connecting from a non-specified CIDR
+                            will be dropped.</source>
+        <target>Elenco di CIDR (separati da virgola) da cui i client possono connettersi. 
+Un CIDR più specifico avrà la precedenza su uno meno restrittivo. 
+I client che tentano di connettersi da un CIDR non specificato saranno rifiutati.</target>
+      </trans-unit>
+      <trans-unit id="s61eacb19db252f5e">
+        <source>URL</source>
+        <target>URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sb21f33b039c86322">
+        <source>SCIM base url, usually ends in /v2.</source>
+        <target>URL di base SCIM, in genere termina con /v2.</target>
+        
+      </trans-unit>
+      <trans-unit id="se68398e3c2c760b2">
+        <source>Token</source>
+        <target>Token</target>
+        
+      </trans-unit>
+      <trans-unit id="s33ed903c210a6209">
+        <source>Token to authenticate with. Currently only bearer authentication is supported.</source>
+        <target>Token con cui autenticarsi. Attualmente è supportata solo l'autenticazione bearer.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfc8bb104e2c05af8">
+        <source>User filtering</source>
+        <target>Filtraggio utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="sc0d0890fbd46ef62">
+        <source>Exclude service accounts</source>
+        <target>Escludi account di servizio</target>
+        
+      </trans-unit>
+      <trans-unit id="s98b1cb8fb62909ec">
+        <source>Group</source>
+        <target>Gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s23ab136ad85f0ad2">
+        <source>Only sync users within the selected group.</source>
+        <target>Sincronizza solo gli utenti all'interno del gruppo selezionato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfdedc3b0b2b7ce3d">
+        <source>Attribute mapping</source>
+        <target>Mappatura attributi</target>
+        
+      </trans-unit>
+      <trans-unit id="saf794c74c9ea731e">
+        <source>User Property Mappings</source>
+        <target>Mappatura proprietà utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="s019555b5a442aa00">
+        <source>Property mappings used to user mapping.</source>
+        <target>Mappature delle proprietà utilizzate per la mappatura degli utenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7cb9aa9ee1783f00">
+        <source>Group Property Mappings</source>
+        <target>Mappatura proprietà gruppi</target>
+        
+      </trans-unit>
+      <trans-unit id="sa319e3bf44c85963">
+        <source>Property mappings used to group creation.</source>
+        <target>Mappature delle proprietà utilizzate per la creazione del gruppo.</target>
+        
+      </trans-unit>
+      <trans-unit id="se09ab93d69f7f45b">
+        <source>Not used by any other object.</source>
+        <target>Non utilizzato da altri oggetti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s10922bd0ac765562">
+        <source>object will be DELETED</source>
+        <target>l'oggetto sarà CANCELLATO</target>
+        
+      </trans-unit>
+      <trans-unit id="sf3981f36525b0dbd">
+        <source>connection will be deleted</source>
+        <target>la connessione sarà cancellata</target>
+        
+      </trans-unit>
+      <trans-unit id="s93cf77a59db53395">
+        <source>reference will be reset to default value</source>
+        <target>il riferimento verrà ripristinato al valore predefinito</target>
+        
+      </trans-unit>
+      <trans-unit id="s3e211d29fa10f843">
+        <source>reference will be set to an empty value</source>
+        <target>il riferimento verrà impostato su un valore vuoto</target>
+        
+      </trans-unit>
+      <trans-unit id="s55fa598b754cc3cc">
+        <source><x id="0" equiv-text="${ub.name}"/> (<x id="1" equiv-text="${consequence}"/>)</source>
+        <target>
+        <x id="0" equiv-text="${ub.name}"/>(
+        <x id="1" equiv-text="${consequence}"/>)</target>
+        
+      </trans-unit>
+      <trans-unit id="s09240e07b5b8d640">
+        <source>ID</source>
+        <target>ID</target>
+        
+      </trans-unit>
+      <trans-unit id="se33b158a1ec02a09">
+        <source>Successfully deleted <x id="0" equiv-text="${this.objects.length} ${this.objectLabel}"/></source>
+        <target> <x id="0" equiv-text="${this.objects.length} ${this.objectLabel}"/> è stato eliminato correttamente</target>
+      </trans-unit>
+      <trans-unit id="sf6eb148db23d19de">
+        <source>Failed to delete <x id="0" equiv-text="${this.objectLabel}"/>: <x id="1" equiv-text="${e.toString()}"/></source>
+        <target>Impossibile eliminare
+        <x id="0" equiv-text="${this.objectLabel}"/>:
+        <x id="1" equiv-text="${e.toString()}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s039b6434e8a75560">
+        <source>Delete <x id="0" equiv-text="${this.objectLabel}"/></source>
+        <target>Elimina 
+        <x id="0" equiv-text="${this.objectLabel}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s5819a49638f6d7cb">
+        <source>Are you sure you want to delete <x id="0" equiv-text="${this.objects.length} ${this.objectLabel}"/>?</source>
+        <target>Vuoi davvero eliminare <x id="0" equiv-text="${this.objects.length} ${this.objectLabel}"/>?</target>
+      </trans-unit>
+      <trans-unit id="sdc673e73b5c13aea">
+        <source>Delete</source>
+        <target>Elimina</target>
+        
+      </trans-unit>
+      <trans-unit id="sb0b86b8ca6ab13bd">
+        <source>Providers</source>
+        <target>Providers</target>
+        
+      </trans-unit>
+      <trans-unit id="s3ffa320128991a45">
+        <source>Provide support for protocols like SAML and OAuth to assigned applications.</source>
+        <target>Fornire supporto per protocolli come SAML e OAuth alle applicazioni assegnate.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd2223afb7d6b100d">
+        <source>Type</source>
+        <target>Tipo</target>
+        
+      </trans-unit>
+      <trans-unit id="s10929ca568ae10bc">
+        <source>Provider(s)</source>
+        <target>Provider(s)</target>
+        
+      </trans-unit>
+      <trans-unit id="sb2b3b281954752c4">
+        <source>Assigned to application </source>
+        <target>Assegnato all'applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa6c0ba4910c7ad7f">
+        <source>Assigned to application (backchannel) </source>
+        <target>Assegnato all'applicazione (backchannel)</target>
+        
+      </trans-unit>
+      <trans-unit id="s97f5e0c138eae172">
+        <source>Warning: Provider not assigned to any application.</source>
+        <target>Attenzione: Provider non assegnato ad alcuna applicazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8b0432eecbd8b034">
+        <source>Update</source>
+        <target>Aggiorna</target>
+        
+      </trans-unit>
+      <trans-unit id="sc9175cb129fdc306">
+        <source>Update <x id="0" equiv-text="${item.verboseName}"/></source>
+        <target>Aggiorna
+        <x id="0" equiv-text="${item.verboseName}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s398f6ba74ba8943a">
+        <source>Select providers to add to application</source>
+        <target>Seleziona i provider da aggiungere all'applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sf9aee319a006c9b4">
+        <source>Add</source>
+        <target>Aggiungi</target>
+        
+      </trans-unit>
+      <trans-unit id="sa90b7809586c35ce">
+        <source>Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon &quot;fa-test&quot;.</source>
+        <target>Inserisci un URL completo, un percorso relativo oppure utilizza &quot;fa://fa-test&quot; per utilizzare l'icona &quot;fa-test&quot; di Font Awesome.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0410779cb47de312">
+        <source>Path template for users created. Use placeholders like `%(slug)s` to insert the source slug.</source>
+        <target>Modello di percorso per gli utenti creato. Utilizza segnaposto come `%(slug)s` per inserire lo slug di origine.</target>
+        
+      </trans-unit>
+      <trans-unit id="s58fd2aafa4261c55">
+        <source>Successfully updated application.</source>
+        <target>Applicazione aggiornata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9222ca30ae7786e4">
+        <source>Successfully created application.</source>
+        <target>Applicazione creata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s03907d7a66c6164e">
+        <source>Application's display Name.</source>
+        <target>Nome visualizzato dell'applicazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s91f70424f5d5d23e">
+        <source>Slug</source>
+        <target>Slug</target>
+        
+      </trans-unit>
+      <trans-unit id="sdae55084f6cb2662">
+        <source>Optionally enter a group name. Applications with identical groups are shown grouped together.</source>
+        <target>Facoltativamente, inserisci il nome del gruppo. Le applicazioni con gruppi identici vengono visualizzate raggruppate insieme.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7f5869b3d14d7cbc">
+        <source>Provider</source>
+        <target>Provider</target>
+        
+      </trans-unit>
+      <trans-unit id="s350a616ff5e145ec">
+        <source>Select a provider that this application should use.</source>
+        <target>Seleziona provider per questa applicazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4c6534a118f52fdd">
+        <source>Select backchannel providers which augment the functionality of the main provider.</source>
+        <target>Seleziona fornitori di backchannel che aumentano la funzionalità del fornitore principale.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0639662111324466">
+        <source>Policy engine mode</source>
+        <target>Modalità motore criteri</target>
+        
+      </trans-unit>
+      <trans-unit id="s1a0e95458b44d7f8">
+        <source>Any policy must match to grant access</source>
+        <target>Qualsiasi criterio deve corrispondere per concedere l'accesso</target>
+        
+      </trans-unit>
+      <trans-unit id="s7fc1ace65486dc25">
+        <source>All policies must match to grant access</source>
+        <target>Tutte i criteri devono corrispondere per concedere l'accesso</target>
+        
+      </trans-unit>
+      <trans-unit id="s8be4abc7ca71da6c">
+        <source>UI settings</source>
+        <target>Impostazioni dell'interfaccia utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s427f788ff333f45b">
+        <source>Launch URL</source>
+        <target>URL di Avvio</target>
+        
+      </trans-unit>
+      <trans-unit id="s992f8d1a776e763c">
+        <source>If left empty, authentik will try to extract the launch URL based on the selected provider.</source>
+        <target>Se lasciato vuoto, authentik proverà ad estrarre l'URL di lancio in base al provider selezionato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2348f46ebf436671">
+        <source>Open in new tab</source>
+        <target>Apri in una nuova scheda</target>
+        
+      </trans-unit>
+      <trans-unit id="s8655c52824caac63">
+        <source>If checked, the launch URL will open in a new browser tab or window from the user's application library.</source>
+        <target>Se selezionato, l'URL di avvio si aprirà in una nuova scheda o finestra del browser dalla libreria dell'applicazione dell'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s068d4dd16d9106d0">
+        <source>Icon</source>
+        <target>Icona</target>
+        
+      </trans-unit>
+      <trans-unit id="s67e20cd8018d7e3c">
+        <source>Currently set to:</source>
+        <target>Attualmente impostato su:</target>
+        
+      </trans-unit>
+      <trans-unit id="s80e6d6fe5ad458d3">
+        <source>Clear icon</source>
+        <target>Cancella icona</target>
+        
+      </trans-unit>
+      <trans-unit id="s6d3b4d0561ba1cff">
+        <source>Publisher</source>
+        <target>Publisher</target>
+        
+      </trans-unit>
+      <trans-unit id="sa8c45b6b92a8ba1f">
+        <source>Create Application</source>
+        <target>Crea Applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s3d197283cb019b5a">
+        <source>Overview</source>
+        <target>Panoramica</target>
+        
+      </trans-unit>
+      <trans-unit id="s6c3daaac4eed12f9">
+        <source>Changelog</source>
+        <target>Changelog</target>
+        
+      </trans-unit>
+      <trans-unit id="s05e395ff60af047b">
+        <source>Warning: Provider is not used by any Outpost.</source>
+        <target>Attenzione: il fornitore non è utilizzato da nessun avamposto.</target>
+        
+      </trans-unit>
+      <trans-unit id="sccbfc4dec0c8d80c">
+        <source>Assigned to application</source>
+        <target>Assegnato all'applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s2d46e3a9ee8e0e7e">
+        <source>Update LDAP Provider</source>
+        <target>Aggiorna Provider LDAP</target>
+        
+      </trans-unit>
+      <trans-unit id="s64ef2a6c2dd1d3d1">
+        <source>Edit</source>
+        <target>Modifica</target>
+        
+      </trans-unit>
+      <trans-unit id="saf24e253b3b006d4">
+        <source>How to connect</source>
+        <target>Come connettersi</target>
+        
+      </trans-unit>
+      <trans-unit id="s02b3fade1795d03f">
+        <source>Connect to the LDAP Server on port 389:</source>
+        <target>Connettiti al server LDAP sulla porta 389:</target>
+        
+      </trans-unit>
+      <trans-unit id="sa00cf67b54c44c71">
+        <source>Check the IP of the Kubernetes service, or</source>
+        <target>Controlla l'IP del servizio Kubernetes, oppure</target>
+        
+      </trans-unit>
+      <trans-unit id="s28f270859c5f4d51">
+        <source>The Host IP of the docker host</source>
+        <target>L'IP host dell'host docker</target>
+        
+      </trans-unit>
+      <trans-unit id="sb7794c2910b1a9ec">
+        <source>Bind DN</source>
+        <target>Bind DN</target>
+        
+      </trans-unit>
+      <trans-unit id="s5694f9421c428227">
+        <source>Bind Password</source>
+        <target>Password di Associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s086e1bbe7c97ea16">
+        <source>Search base</source>
+        <target>Ricerca base</target>
+        
+      </trans-unit>
+      <trans-unit id="s417b90913e05bc17">
+        <source>Preview</source>
+        <target>Anteprima</target>
+        
+      </trans-unit>
+      <trans-unit id="s17f3eaf3b07ece26">
+        <source>Warning: Provider is not used by an Application.</source>
+        <target>Attenzione: il provider non è utilizzato da un'applicazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s56806e9f63efa298">
+        <source>Redirect URIs</source>
+        <target>URI di reindirizzamento</target>
+        
+      </trans-unit>
+      <trans-unit id="sdbc08adee233f180">
+        <source>Update OAuth2 Provider</source>
+        <target>Aggiorna fornitore OAuth2</target>
+        
+      </trans-unit>
+      <trans-unit id="s9d96eb5ca93e6473">
+        <source>OpenID Configuration URL</source>
+        <target>URL configurazione OpenID</target>
+        
+      </trans-unit>
+      <trans-unit id="s74f809a69e030351">
+        <source>OpenID Configuration Issuer</source>
+        <target>Emittente configurazione OpenID</target>
+        
+      </trans-unit>
+      <trans-unit id="s028be8989873f001">
+        <source>Authorize URL</source>
+        <target>Autorizzazione URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sebda1d54a3f9f967">
+        <source>Token URL</source>
+        <target>Token URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s2fc3eb68c7ced3af">
+        <source>Userinfo URL</source>
+        <target>Userinfo URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s145483489b87a622">
+        <source>Logout URL</source>
+        <target>Logout URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s59f5eda30a904b75">
+        <source>JWKS URL</source>
+        <target>JWKS URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sc6e8a34361c7c272">
+        <source>Forward auth (domain-level)</source>
+        <target>Forward auth (domain-level)</target>
+        
+      </trans-unit>
+      <trans-unit id="s6df42b3072a2d7e9">
+        <source>Nginx (Ingress)</source>
+        <target>Nginx (Ingress)</target>
+        
+      </trans-unit>
+      <trans-unit id="s8e01a852c1db8d29">
+        <source>Nginx (Proxy Manager)</source>
+        <target>Nginx (Proxy Manager)</target>
+        
+      </trans-unit>
+      <trans-unit id="sabebdc7fa6a5bddb">
+        <source>Nginx (standalone)</source>
+        <target>Nginx (standalone)</target>
+        
+      </trans-unit>
+      <trans-unit id="s5d9f93f1fe1c19d3">
+        <source>Traefik (Ingress)</source>
+        <target>Traefik (Ingress)</target>
+        
+      </trans-unit>
+      <trans-unit id="se2b62f7e9017965e">
+        <source>Traefik (Compose)</source>
+        <target>Traefik (Compose)</target>
+        
+      </trans-unit>
+      <trans-unit id="s4c4c504a48c3b7bd">
+        <source>Traefik (Standalone)</source>
+        <target>Traefik (Standalone)</target>
+        
+      </trans-unit>
+      <trans-unit id="s7ba9677d069e5f02">
+        <source>Caddy (Standalone)</source>
+        <target>Caddy (Standalone)</target>
+        
+      </trans-unit>
+      <trans-unit id="s4a1e774ab25aa232">
+        <source>Internal Host</source>
+        <target>Host Interno</target>
+        
+      </trans-unit>
+      <trans-unit id="sc9c3578cce3cf7a8">
+        <source>External Host</source>
+        <target>Host Esterno</target>
+        
+      </trans-unit>
+      <trans-unit id="s7a141f1b61074fbe">
+        <source>Basic-Auth</source>
+        <target>Basic-Auth</target>
+        
+      </trans-unit>
+      <trans-unit id="scb489a1a173ac3f0">
+        <source>Yes</source>
+        <target>Si</target>
+        
+      </trans-unit>
+      <trans-unit id="s37cbecaec58e2192">
+        <source>Mode</source>
+        <target>Modalità</target>
+        
+      </trans-unit>
+      <trans-unit id="s4e474b9e2e737dd1">
+        <source>Update Proxy Provider</source>
+        <target>Aggiorna Provider Proxy</target>
+        
+      </trans-unit>
+      <trans-unit id="s37eb2f1b6e3c19c2">
+        <source>Protocol Settings</source>
+        <target>Impostazioni Protocollo</target>
+        
+      </trans-unit>
+      <trans-unit id="s5116b89f7db1fbec">
+        <source>Allowed Redirect URIs</source>
+        <target>URI di reindirizzamento consentiti</target>
+        
+      </trans-unit>
+      <trans-unit id="saeff3596e1ac31b6">
+        <source>Setup</source>
+        <target>Impostazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s1b783856ab4aaaf3">
+        <source>No additional setup is required.</source>
+        <target>Non è richiesta configurazione aggiuntiva.</target>
+        
+      </trans-unit>
+      <trans-unit id="s09b671b120443043">
+        <source>Update Radius Provider</source>
+        <target>Aggiorna Provider Radius</target>
+        
+      </trans-unit>
+      <trans-unit id="sd3386a2ef42e80b9">
+        <source>Download</source>
+        <target>Scarica</target>
+        
+      </trans-unit>
+      <trans-unit id="sf417c13d7a0f7995">
+        <source>Copy download URL</source>
+        <target>Copiare URL di download</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1cfce89ebcf1bf9">
+        <source>Download signing certificate</source>
+        <target>Scarica il certificato di firma</target>
+        
+      </trans-unit>
+      <trans-unit id="s2c0de3d35a7bc784">
+        <source>Related objects</source>
+        <target>Oggetti correlati</target>
+        
+      </trans-unit>
+      <trans-unit id="s803b0621006085be">
+        <source>Update SAML Provider</source>
+        <target>Aggiorna il provider SAML</target>
+        
+      </trans-unit>
+      <trans-unit id="s44b1f042790cd1a2">
+        <source>SAML Configuration</source>
+        <target>Configurazione SAML</target>
+        
+      </trans-unit>
+      <trans-unit id="sba999428083abce3">
+        <source>EntityID/Issuer</source>
+        <target>EntityID/Issuer</target>
+        
+      </trans-unit>
+      <trans-unit id="scd2984ee5552643a">
+        <source>SSO URL (Post)</source>
+        <target>SSO URL (Post)</target>
+        
+      </trans-unit>
+      <trans-unit id="saa79b47f60c66458">
+        <source>SSO URL (Redirect)</source>
+        <target>SSO URL (Redirect)</target>
+        
+      </trans-unit>
+      <trans-unit id="s2da51a6287118ba8">
+        <source>SSO URL (IdP-initiated Login)</source>
+        <target>SSO URL (IdP-initiated Login)</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a57e911e457302b">
+        <source>SLO URL (Post)</source>
+        <target>SLO URL (Post)</target>
+        
+      </trans-unit>
+      <trans-unit id="s1e7308bb1ca323e1">
+        <source>SLO URL (Redirect)</source>
+        <target>SLO URL (Redirect)</target>
+        
+      </trans-unit>
+      <trans-unit id="sd2c58d7c6dddc515">
+        <source>SAML Metadata</source>
+        <target>Metadati SAML</target>
+        
+      </trans-unit>
+      <trans-unit id="s382b702673776873">
+        <source>Example SAML attributes</source>
+        <target>Esempio attributi SAML</target>
+        
+      </trans-unit>
+      <trans-unit id="sea3bfc143ced73db">
+        <source>NameID attribute</source>
+        <target>Attributo NameID</target>
+        
+      </trans-unit>
+      <trans-unit id="s2f0f6691de0b0388">
+        <source>Warning: Provider is not assigned to an application as backchannel provider.</source>
+        <target>Attenzione: Il provider non è assegnato a un'applicazione come provider di backchannel.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc6c575c5ff64cdb1">
+        <source>Update SCIM Provider</source>
+        <target>Aggiorna il provider SCIM</target>
+        
+      </trans-unit>
+      <trans-unit id="sbecf8dc03c978d15">
+        <source>Run sync again</source>
+        <target>Esegui di nuovo la sincronizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2cedfb22488ccb2">
+        <source>Modern applications, APIs and Single-page applications.</source>
+        <target>Applicazioni moderne, API e applicazioni a pagina singola.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc3259eb55cf91e8c">
+        <source>LDAP</source>
+        <target>LDAP</target>
+        
+      </trans-unit>
+      <trans-unit id="sffd5481034a1bd41">
+        <source>Provide an LDAP interface for applications and users to authenticate against.</source>
+        <target>Fornire un'interfaccia LDAP per l'autenticazione di applicazioni e utenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0c9670f429e74283">
+        <source>New application</source>
+        <target>Nuova applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s6ba50bb0842ba1e2">
+        <source>Applications</source>
+        <target>Applicazioni</target>
+        
+      </trans-unit>
+      <trans-unit id="s96b2fefc550e4b1c">
+        <source>Provider Type</source>
+        <target>Tipo Provider</target>
+        
+      </trans-unit>
+      <trans-unit id="sd20f6cd02c90867f">
+        <source>Application(s)</source>
+        <target>Applicazione(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="sb564f81eb057342e">
+        <source>Application Icon</source>
+        <target>Icona Applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa347e31efbb60be2">
+        <source>Update Application</source>
+        <target>Aggiorna Applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sd9b556a84ae25690">
+        <source>Successfully sent test-request.</source>
+        <target>Richiesta di prova inviata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5deac600e329de1b">
+        <source>Log messages</source>
+        <target>Messaggi di log</target>
+        
+      </trans-unit>
+      <trans-unit id="s3feea7b49673bef2">
+        <source>No log messages.</source>
+        <target>Nessun messaggio di log.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa45a194b58837e4f">
+        <source>Active</source>
+        <target>Attivo</target>
+        
+      </trans-unit>
+      <trans-unit id="s58c867aac77b9158">
+        <source>Last login</source>
+        <target>Ultimo accesso</target>
+        
+      </trans-unit>
+      <trans-unit id="s3e3bb9e7cb1de4fd">
+        <source>Select users to add</source>
+        <target>Seleziona utenti da aggiungere</target>
+        
+      </trans-unit>
+      <trans-unit id="s75d5ff5dd8d3c6d2">
+        <source>Successfully updated group.</source>
+        <target>Gruppo aggiornato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3079ca1184e77573">
+        <source>Successfully created group.</source>
+        <target>Gruppo creato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s63cb05541b294335">
+        <source>Is superuser</source>
+        <target>È superutente</target>
+        
+      </trans-unit>
+      <trans-unit id="s29315e374008d0c5">
+        <source>Users added to this group will be superusers.</source>
+        <target>Gli utenti aggiunti a questo gruppo diventeranno superutenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4eb514ebcb80553d">
+        <source>Parent</source>
+        <target>Genitore</target>
+        
+      </trans-unit>
+      <trans-unit id="s16b9446e3a70e1f4">
+        <source>Attributes</source>
+        <target>Attributi</target>
+        
+      </trans-unit>
+      <trans-unit id="sec97cdaf7af8648b">
+        <source>Set custom attributes using YAML or JSON.</source>
+        <target>Imposta attributi personalizzati utilizzando YAML o JSON.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1e36813d3504ed48">
+        <source>Successfully updated binding.</source>
+        <target>Aggiornato criterio con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1bf56ee106e9e711">
+        <source>Successfully created binding.</source>
+        <target>Creato criterio con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s042baf59902a711f">
+        <source>Policy</source>
+        <target>Criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s5f5bf4ef2bd93c04">
+        <source>Group mappings can only be checked if a user is already logged in when trying to access this source.</source>
+        <target>Le mappature dei gruppi possono essere controllate solo se un utente ha già effettuato l'accesso quando tenta di accedere a questa fonte.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6c607d74bdfe9f36">
+        <source>User mappings can only be checked if a user is already logged in when trying to access this source.</source>
+        <target>Le mappature utente possono essere controllate solo se un utente ha già effettuato l'accesso quando tenta di accedere a questa fonte.</target>
+        
+      </trans-unit>
+      <trans-unit id="s965c503c3e42fdfe">
+        <source>Enabled</source>
+        <target>Abilitato</target>
+        
+      </trans-unit>
+      <trans-unit id="s6b85380416964890">
+        <source>Negate result</source>
+        <target>Negare il risultato</target>
+        
+      </trans-unit>
+      <trans-unit id="s3bfa0258999fb629">
+        <source>Negates the outcome of the binding. Messages are unaffected.</source>
+        <target>Nega il risultato dell'associazione. I messaggi non vengono influenzati.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2ba5f4d8f3bd7c57">
+        <source>Order</source>
+        <target>Ordine</target>
+        
+      </trans-unit>
+      <trans-unit id="se1e040b55319a0e8">
+        <source>Timeout</source>
+        <target>Timeout</target>
+        
+      </trans-unit>
+      <trans-unit id="s29ec5e7889f4787f">
+        <source>Successfully updated policy.</source>
+        <target>Criterio aggiornato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfc400b2d71e49d28">
+        <source>Successfully created policy.</source>
+        <target>Criterio creato.</target>
+        
+      </trans-unit>
+      <trans-unit id="safc0e0656d572f4e">
+        <source>A policy used for testing. Always returns the same result as specified below after waiting a random duration.</source>
+        <target>Una policy utilizzata per i test. Restituisce sempre lo stesso risultato specificato di seguito dopo aver atteso una durata casuale.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ffa1ac03ce6fd20">
+        <source>Execution logging</source>
+        <target>Registrazione dell'esecuzione</target>
+        
+      </trans-unit>
+      <trans-unit id="saf31b3c610036ed6">
+        <source>When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged.</source>
+        <target>Quando questa opzione è abilitata, tutte le esecuzioni di questa policy verranno registrate. Per impostazione predefinita, vengono registrati solo gli errori di esecuzione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa879d5ce584875cf">
+        <source>Policy-specific settings</source>
+        <target>Impostazioni specifiche del criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s838418d1a0815157">
+        <source>Pass policy?</source>
+        <target>Criterio di passaggio?</target>
+        
+      </trans-unit>
+      <trans-unit id="sd8c5339b82b71507">
+        <source>Wait (min)</source>
+        <target>Attendi (min)</target>
+        
+      </trans-unit>
+      <trans-unit id="sda4e78c19f5b6f35">
+        <source>The policy takes a random time to execute. This controls the minimum time it will take.</source>
+        <target>L'esecuzione della policy richiede un tempo casuale. Questo controlla il tempo minimo necessario.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1d30ff9ba938e68d">
+        <source>Wait (max)</source>
+        <target>Attendi (max)</target>
+        
+      </trans-unit>
+      <trans-unit id="s303b5e552246e613">
+        <source>Matches an event against a set of criteria. If any of the configured values match, the policy passes.</source>
+        <target>Corrisponde a un evento rispetto a una serie di criteri. Se uno qualsiasi dei valori configurati corrisponde, il criterio passa.</target>
+        
+      </trans-unit>
+      <trans-unit id="s890810efbe103cbc">
+        <source>Match created events with this action type. When left empty, all action types will be matched.</source>
+        <target>Abbina gli eventi creati a questo tipo di azione. Se lasciato vuoto, verranno abbinati tutti i tipi di azione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5a15a8f39c699273">
+        <source>Match events created by selected application. When left empty, all applications are matched.</source>
+        <target>Abbina gli eventi creati dall'applicazione selezionata. Se lasciato vuoto, tutte le applicazioni vengono abbinate.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5a13f4bbe004503f">
+        <source>Checks if the request's user's password has been changed in the last x days, and denys based on settings.</source>
+        <target>Verifica se la password dell'utente è stata modificata negli ultimi X giorni e rifiuta in base alle impostazioni.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfad8af8ce38104a3">
+        <source>Maximum age (in days)</source>
+        <target>Età massima (in giorni)</target>
+        
+      </trans-unit>
+      <trans-unit id="s9307f3dbb07a73b5">
+        <source>Only fail the policy, don't invalidate user's password</source>
+        <target>Fallisci solo il criterio, non invalidare la password dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="scea1f16238093e35">
+        <source>Executes the python snippet to determine whether to allow or deny a request.</source>
+        <target>Esegue il frammento di codice Python per determinare se consentire o negare una richiesta.</target>
+        
+      </trans-unit>
+      <trans-unit id="sabd1bc9fb7da71e7">
+        <source>Expression using Python.</source>
+        <target>Espressione in Python.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8d08843f397d9e81">
+        <source>See documentation for a list of all variables.</source>
+        <target>Guarda la documentazione per la lista di tutte le variabili.</target>
+        
+      </trans-unit>
+      <trans-unit id="se2cc93bd2647baec">
+        <source>Static rules</source>
+        <target>Regole statiche</target>
+        
+      </trans-unit>
+      <trans-unit id="sc96dd9d2e7b05fc5">
+        <source>Minimum length</source>
+        <target>Lunghezza minima</target>
+        
+      </trans-unit>
+      <trans-unit id="s33d48fb745f4d4ae">
+        <source>Minimum amount of Uppercase Characters</source>
+        <target>Quantità minima di caratteri maiuscoli</target>
+        
+      </trans-unit>
+      <trans-unit id="s883b544e2b4aa3b5">
+        <source>Minimum amount of Lowercase Characters</source>
+        <target>Quantità minima di caratteri minuscoli</target>
+        
+      </trans-unit>
+      <trans-unit id="s43be3ce2439ffe9c">
+        <source>Minimum amount of Digits</source>
+        <target>Quantità minima di cifre</target>
+        
+      </trans-unit>
+      <trans-unit id="sb3651834cca86735">
+        <source>Minimum amount of Symbols Characters</source>
+        <target>Quantità minima di simboli caratteri</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2f116c0ea77d58a">
+        <source>Error message</source>
+        <target>Messaggio di errore</target>
+        
+      </trans-unit>
+      <trans-unit id="s21d0e290c51a8ef9">
+        <source>Symbol charset</source>
+        <target>Set di caratteri simboli</target>
+        
+      </trans-unit>
+      <trans-unit id="s545d99afa61e4095">
+        <source>Characters which are considered as symbols.</source>
+        <target>Caratteri considerati simboli.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1293ad87acc7a609">
+        <source>HaveIBeenPwned settings</source>
+        <target>Impostazioni HaveIBeenPwned</target>
+        
+      </trans-unit>
+      <trans-unit id="sdf4e1c6a2f072600">
+        <source>Allowed count</source>
+        <target>Conteggio consentito</target>
+        
+      </trans-unit>
+      <trans-unit id="scd8062ff5e1326d8">
+        <source>Allow up to N occurrences in the HIBP database.</source>
+        <target>Consenti fino a N occorrenze nel database HIBP.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3fd219b045193507">
+        <source>zxcvbn settings</source>
+        <target>Impostazioni zxcvbn</target>
+        
+      </trans-unit>
+      <trans-unit id="s28d84abfbaf555ea">
+        <source>Score threshold</source>
+        <target>Soglia punteggio</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b3148ffba9f4527">
+        <source>If the password's score is less than or equal this value, the policy will fail.</source>
+        <target>Se il punteggio della password è inferiore o uguale a questo valore, la policy fallirà.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd6cd7ce2310a73a4">
+        <source>Checks the value from the policy request against several rules, mostly used to ensure password strength.</source>
+        <target>Controlla il valore della richiesta di policy rispetto a diverse regole, utilizzate principalmente per garantire la sicurezza della password.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2a957e843960b604">
+        <source>Password field</source>
+        <target>Campo password</target>
+        
+      </trans-unit>
+      <trans-unit id="se8a81c75b6e30a33">
+        <source>Field key to check, field keys defined in Prompt stages are available.</source>
+        <target>Chiave di campo da verificare, sono disponibili le chiavi di campo definite nelle fasi Prompt.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2f8c4cf12350a36c">
+        <source>Check static rules</source>
+        <target>Controlla regole statiche</target>
+        
+      </trans-unit>
+      <trans-unit id="sd75a9a71309fb387">
+        <source>Check haveibeenpwned.com</source>
+        <target>Controlla haveibeenpwned.com</target>
+        
+      </trans-unit>
+      <trans-unit id="se5cb18408df3284e">
+        <source>For more info see:</source>
+        <target>Per ulteriori informazioni:</target>
+        
+      </trans-unit>
+      <trans-unit id="scef7abb8456b06d6">
+        <source>Check zxcvbn</source>
+        <target>Controlla zxcvbn</target>
+        
+      </trans-unit>
+      <trans-unit id="sdfdb58cd232b363d">
+        <source>Password strength estimator created by Dropbox, see:</source>
+        <target>Strumento per la stima della forza della password creato da Dropbox, vedere:</target>
+        
+      </trans-unit>
+      <trans-unit id="s40b034801fcb843b">
+        <source>Allows/denys requests based on the users and/or the IPs reputation.</source>
+        <target>Consente/nega le richieste in base alla reputazione degli utenti e/o degli IP.</target>
+        
+      </trans-unit>
+      <trans-unit id="scf4afecb0f1e69b2">
+        <source>Invalid login attempts will decrease the score for the client's IP, and the
+username they are attempting to login as, by one.</source>
+        <target>I tentativi di accesso fallito diminuiranno di uno il punteggio per l'IP del client e per l'utente.</target>
+      </trans-unit>
+      <trans-unit id="s8323a9af28e10502">
+        <source>The policy passes when the reputation score is below the threshold, and
+doesn't pass when either or both of the selected options are equal or above the threshold.</source>
+        <target>La policy passa quando il punteggio della reputazione è al di sotto della soglia e
+ Non passa quando entrambe le opzioni selezionate sono uguali o sopra la soglia.</target>
+      </trans-unit>
+      <trans-unit id="s1828fbfc2c56379c">
+        <source>Check IP</source>
+        <target>Controlla IP</target>
+        
+      </trans-unit>
+      <trans-unit id="s4751df77cfd8a5f9">
+        <source>Check Username</source>
+        <target>Controlla Username</target>
+        
+      </trans-unit>
+      <trans-unit id="se19cc57dd8675498">
+        <source>Threshold</source>
+        <target>Soglia</target>
+        
+      </trans-unit>
+      <trans-unit id="sdbccb39a658f0e45">
+        <source>New policy</source>
+        <target>Nuovo criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="sf693300708a40d2c">
+        <source>Create a new policy.</source>
+        <target>Crea un nuovo criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s5b1fb0d4c0daeba8">
+        <source>Create Binding</source>
+        <target>Crea associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s9fb28be12e2c6317">
+        <source>Superuser</source>
+        <target>Superutente</target>
+        
+      </trans-unit>
+      <trans-unit id="s9f5a5f23312798f0">
+        <source>Members</source>
+        <target>Membri</target>
+        
+      </trans-unit>
+      <trans-unit id="s7eb3d239e0b491ab">
+        <source>Select groups to add user to</source>
+        <target>Seleziona i gruppi a cui aggiungere l'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sec5cdfa358f9dbf7">
+        <source>Warning: Adding the user to the selected group(s) will give them superuser permissions.</source>
+        <target>Attenzione: L' utente aggiunto al gruppo(i) selezionato otterrà permessi di superutente.</target>
+        
+      </trans-unit>
+      <trans-unit id="scab2900019953050">
+        <source>Successfully updated user.</source>
+        <target>Aggiornamento utente effettuato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9c3c272944dcfca3">
+        <source>Successfully created user.</source>
+        <target>Creato utente con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s03f42eea72154959">
+        <source>Username</source>
+        <target>Username</target>
+        
+      </trans-unit>
+      <trans-unit id="s5a802e46a033c8af">
+        <source>User's primary identifier. 150 characters or fewer.</source>
+        <target>L'identificatore principale dell'utente. 150 caratteri o meno.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd34be0d0fcb39971">
+        <source>User's display name.</source>
+        <target>Nome visualizzato dell'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd1f44f1a8bc20e67">
+        <source>Email</source>
+        <target>Email</target>
+        
+      </trans-unit>
+      <trans-unit id="sbe3b416a356f1c91">
+        <source>Is active</source>
+        <target>È attivo</target>
+        
+      </trans-unit>
+      <trans-unit id="s35fac2e5677d55cd">
+        <source>Designates whether this user should be treated as active. Unselect this instead of deleting accounts.</source>
+        <target>Designa se questo utente deve essere considerato attivo. Deseleziona questa opzione invece di eliminare gli account.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2e532e19ed477a56">
+        <source>Path</source>
+        <target>Percorso</target>
+        
+      </trans-unit>
+      <trans-unit id="s67560d7e37d984c3">
+        <source>Policy / User / Group</source>
+        <target>Criterio / Utente / Gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s030ac0829bb50a49">
+        <source>Policy <x id="0" equiv-text="${item.policyObj?.name}"/></source>
+        <target>Criterio
+        <x id="0" equiv-text="${item.policyObj?.name}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s2a64d2dca3da9b0e">
+        <source>Group <x id="0" equiv-text="${item.groupObj?.name}"/></source>
+        <target>Gruppo
+        <x id="0" equiv-text="${item.groupObj?.name}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="se5dc026819a32ff8">
+        <source>User <x id="0" equiv-text="${item.userObj?.name}"/></source>
+        <target>Utente
+        <x id="0" equiv-text="${item.userObj?.name}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s50c312bea93b6925">
+        <source>Edit Policy</source>
+        <target>Modifica Criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s0b55a57f473ab8af">
+        <source>Update Group</source>
+        <target>Aggiorna Gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s494e1ed913d9351a">
+        <source>Edit Group</source>
+        <target>Modifica Gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="sad130c2d925fb7bf">
+        <source>Update User</source>
+        <target>Aggiorna Utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s5cd31f4a88adf180">
+        <source>Edit User</source>
+        <target>Modifica Utente</target>
+        
+      </trans-unit>
+      <trans-unit id="se291dfd2a59d7842">
+        <source>Policy binding(s)</source>
+        <target>Associazone(i) criteri</target>
+        
+      </trans-unit>
+      <trans-unit id="s7e87ab366c199345">
+        <source>Update Binding</source>
+        <target>Aggiorna Associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s40b80eb4cc1f0e0c">
+        <source>Edit Binding</source>
+        <target>Modifica Associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sbad5b96fb855ef36">
+        <source>No Policies bound.</source>
+        <target>Nessun criterio associato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc15d60377cc8aaac">
+        <source>No policies are currently bound to this object.</source>
+        <target>Nessun criterio è associato a questo oggetto al momento.</target>
+        
+      </trans-unit>
+      <trans-unit id="saa855c61e0403fe6">
+        <source>Warning: Application is not used by any Outpost.</source>
+        <target>Attenzione: l'applicazione non viene utilizzata da nessun avamposto.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb6cbd4f92ebaf5d8">
+        <source>Related</source>
+        <target>Correlato</target>
+        
+      </trans-unit>
+      <trans-unit id="sc92ea8fbf9ba06a7">
+        <source>Backchannel Providers</source>
+        <target>Fornitori di backchannel</target>
+        
+      </trans-unit>
+      <trans-unit id="sd71081c23d1cd38b">
+        <source>Check access</source>
+        <target>Verifica l'accesso</target>
+        
+      </trans-unit>
+      <trans-unit id="s42cbd8dca939a9c7">
+        <source>Check</source>
+        <target>Controlla</target>
+        
+      </trans-unit>
+      <trans-unit id="sf22f7f8a9309b4ed">
+        <source>Check Application access</source>
+        <target>Controlla l'accesso all'applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s2474e7fb1aec9f05">
+        <source>Test</source>
+        <target>Test</target>
+        
+      </trans-unit>
+      <trans-unit id="s512957aa09384646">
+        <source>Launch</source>
+        <target>Avvia</target>
+        
+      </trans-unit>
+      <trans-unit id="sed02f831e653deb3">
+        <source>Logins over the last week (per 8 hours)</source>
+        <target>Accessi nell'ultima settimana (per 8 ore)</target>
+        
+      </trans-unit>
+      <trans-unit id="s2b1bc31276c4c477">
+        <source>Policy / Group / User Bindings</source>
+        <target>Associazione Criterio / Gruppo / Utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s473f0143efa3f706">
+        <source>These policies control which users can access this application.</source>
+        <target>Questi criteri controllano quali utenti possono accedere a questa applicazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s24875d5475e82526">
+        <source>Successfully updated source.</source>
+        <target>Sorgente aggiornata.</target>
+        
+      </trans-unit>
+      <trans-unit id="s60d891ed3ee9ebc5">
+        <source>Successfully created source.</source>
+        <target>Sorgente creata.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8af7239354f7e7b6">
+        <source>Sync users</source>
+        <target>Sincronizza utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="sd80b0b8aeae3abe3">
+        <source>User password writeback</source>
+        <target>Scrittura della password utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s2b952e9dc99cbded">
+        <source>Login password is synced from LDAP into authentik automatically. Enable this option only to write password changes in authentik back to LDAP.</source>
+        <target>La password di accesso viene sincronizzata automaticamente da LDAP in authentik. Abilita questa opzione solo per riscrivere le modifiche della password in authentik su LDAP.</target>
+        
+      </trans-unit>
+      <trans-unit id="saf7ce4165a1025f6">
+        <source>Sync groups</source>
+        <target>Gruppi di sincronizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s2035f889f576bca6">
+        <source>Connection settings</source>
+        <target>Impostazioni di connessione</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a72e65aef45b1e8">
+        <source>Server URI</source>
+        <target>Server URI</target>
+        
+      </trans-unit>
+      <trans-unit id="sa599dbe5776897ad">
+        <source>Specify multiple server URIs by separating them with a comma.</source>
+        <target>Specificare più URI del server separandoli con una virgola.</target>
+        
+      </trans-unit>
+      <trans-unit id="se36b55dfcf5dc80b">
+        <source>Enable StartTLS</source>
+        <target>Abilita StartTLS</target>
+        
+      </trans-unit>
+      <trans-unit id="s33683c3b1dbaf264">
+        <source>To use SSL instead, use 'ldaps://' and disable this option.</source>
+        <target>Per usare invece SSL, usa 'ldaps://' e disabilita questa opzione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2221fef80f4753a2">
+        <source>TLS Verification Certificate</source>
+        <target>Certificato di verifica TLS</target>
+        
+      </trans-unit>
+      <trans-unit id="sb8c13bd58191cea2">
+        <source>When connecting to an LDAP Server with TLS, certificates are not checked by default. Specify a keypair to validate the remote certificate.</source>
+        <target>Quando ci si connette a un server LDAP con TLS, i certificati non vengono controllati per impostazione predefinita. Specificare una coppia di chiavi per convalidare il certificato remoto.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb7684e2910a33a1f">
+        <source>Bind CN</source>
+        <target>Associa CN</target>
+        
+      </trans-unit>
+      <trans-unit id="s3de6db803012016a">
+        <source>LDAP Attribute mapping</source>
+        <target>Mappatura attributo LDAP</target>
+        
+      </trans-unit>
+      <trans-unit id="s94333971a07803b9">
+        <source>Additional settings</source>
+        <target>Impostazioni aggiuntive</target>
+        
+      </trans-unit>
+      <trans-unit id="sd14a19a19d507f9e">
+        <source>Parent group for all the groups imported from LDAP.</source>
+        <target>Gruppo principale per tutti i gruppi importati da LDAP.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfbc59ff17a73503d">
+        <source>User path</source>
+        <target>Percorso utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sd18170637295bace">
+        <source>Addition User DN</source>
+        <target>Aggiunta DN utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ae089fd248e72db">
+        <source>Additional user DN, prepended to the Base DN.</source>
+        <target>DN utente aggiuntivo, anteposto al DN di base.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5944355d69db1fb8">
+        <source>Addition Group DN</source>
+        <target>Aggiunta DN gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="sfae9f4ea5749a36b">
+        <source>Additional group DN, prepended to the Base DN.</source>
+        <target>DN di gruppo aggiuntivo, anteposto al DN di base.</target>
+        
+      </trans-unit>
+      <trans-unit id="s66ffc06300964849">
+        <source>User object filter</source>
+        <target>Filtro oggetto utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s1c2a173db0e1ec61">
+        <source>Consider Objects matching this filter to be Users.</source>
+        <target>Considera gli oggetti che corrispondono a questo filtro come utenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2ec94a7c7f5bcd1b">
+        <source>Group object filter</source>
+        <target>Filtro oggetto gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="saf5eb7596b3a355b">
+        <source>Consider Objects matching this filter to be Groups.</source>
+        <target>Considera gli oggetti che corrispondono a questo filtro come gruppi.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf325a4adba4d6278">
+        <source>Group membership field</source>
+        <target>Campo di appartenenza al gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s76768bebabb7d543">
+        <source>Field which contains members of a group. Note that if using the &quot;memberUid&quot; field, the value is assumed to contain a relative distinguished name. e.g. 'memberUid=some-user' instead of 'memberUid=cn=some-user,ou=groups,...'</source>
+        <target>Campo che contiene i membri di un gruppo. Tieni presente che se utilizzi il campo &quot;memberUid&quot;, si presuppone che il valore contenga un nome distinto relativo. per esempio. 'memberUid=qualche-utente' invece di 'memberUid=cn=qualche-utente,ou=gruppi,...'</target>
+        
+      </trans-unit>
+      <trans-unit id="s026555347e589f0e">
+        <source>Object uniqueness field</source>
+        <target>Campo unicità dell'oggetto</target>
+        
+      </trans-unit>
+      <trans-unit id="s24211f319e5b7e98">
+        <source>Field which contains a unique Identifier.</source>
+        <target>Campo che contiene un identificatore univoco.</target>
+        
+      </trans-unit>
+      <trans-unit id="s900b0d85b872d134">
+        <source>Link users on unique identifier</source>
+        <target>Collega gli utenti su un identificatore univoco</target>
+        
+      </trans-unit>
+      <trans-unit id="s6c70a73265e14521">
+        <source>Link to a user with identical email address. Can have security implications when a source doesn't validate email addresses</source>
+        <target>Collegamento a un utente con indirizzo email identico. Può avere implicazioni sulla sicurezza quando una fonte non convalida gli indirizzi e-mail</target>
+        
+      </trans-unit>
+      <trans-unit id="s995535e7af30d754">
+        <source>Use the user's email address, but deny enrollment when the email address already exists</source>
+        <target>Utilizza l'indirizzo e-mail dell'utente, ma nega la registrazione quando l'indirizzo e-mail esiste già</target>
+        
+      </trans-unit>
+      <trans-unit id="s542ecb4130f6cea5">
+        <source>Link to a user with identical username. Can have security implications when a username is used with another source</source>
+        <target>Collegamento a un utente con nome utente identico. Può avere implicazioni sulla sicurezza quando un nome utente viene utilizzato con un'altra fonte</target>
+        
+      </trans-unit>
+      <trans-unit id="s2a1debf34e5aeba4">
+        <source>Use the user's username, but deny enrollment when the username already exists</source>
+        <target>Utilizza il nome utente dell'utente, ma nega la registrazione quando il nome utente esiste già</target>
+        
+      </trans-unit>
+      <trans-unit id="s81ce0d54727f42d2">
+        <source>Unknown user matching mode</source>
+        <target>Modalità di corrispondenza utente sconosciuta</target>
+        
+      </trans-unit>
+      <trans-unit id="sd04376c4216c921f">
+        <source>URL settings</source>
+        <target>Impostazioni URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s872d0e88ab34ed83">
+        <source>Authorization URL</source>
+        <target>URL autorizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="see3ff55262fd6500">
+        <source>URL the user is redirect to to consent the authorization.</source>
+        <target>URL a cui l'utente viene reindirizzato per acconsentire all'autorizzazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb932dead79567c7b">
+        <source>Access token URL</source>
+        <target>URL token d'accesso</target>
+        
+      </trans-unit>
+      <trans-unit id="s88b8a2892635a2fc">
+        <source>URL used by authentik to retrieve tokens.</source>
+        <target>URL utilizzato da authentik per recuperare i token.</target>
+        
+      </trans-unit>
+      <trans-unit id="s69bd313dd12fc2f3">
+        <source>Profile URL</source>
+        <target>URL profilo</target>
+        
+      </trans-unit>
+      <trans-unit id="sa8d83cd8023e8e4d">
+        <source>URL used by authentik to get user information.</source>
+        <target>URL utilizzato da authentik per ottenere informazioni sull'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc7707b3ba3a2a7ca">
+        <source>Request token URL</source>
+        <target>URL di richiesta del token</target>
+        
+      </trans-unit>
+      <trans-unit id="s3926da5b20cdf3b6">
+        <source>URL used to request the initial token. This URL is only required for OAuth 1.</source>
+        <target>URL utilizzato per richiedere il token iniziale. Questo URL è richiesto solo per OAuth 1.</target>
+        
+      </trans-unit>
+      <trans-unit id="s199b55513a739f43">
+        <source>OIDC Well-known URL</source>
+        <target>OIDC Well-known URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s8b149b30b5b523ef">
+        <source>OIDC well-known configuration URL. Can be used to automatically configure the URLs above.</source>
+        <target>URL di configurazione well-known OIDC. Può essere utilizzato per configurare automaticamente gli URL sopra.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9db2c836ade1339c">
+        <source>OIDC JWKS URL</source>
+        <target>OIDC JWKS URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s4b2a1b657c160f5b">
+        <source>JSON Web Key URL. Keys from the URL will be used to validate JWTs from this source.</source>
+        <target>JSON Web Key URL. Le chiavi dell'URL verranno utilizzate per convalidare i JWT da questa fonte.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2df0b65125600de9">
+        <source>OIDC JWKS</source>
+        <target>OIDC JWKS</target>
+        
+      </trans-unit>
+      <trans-unit id="s02de8d9e8583b480">
+        <source>Raw JWKS data.</source>
+        <target>Raw JWKS data.</target>
+        
+      </trans-unit>
+      <trans-unit id="s81a87652ade099e4">
+        <source>User matching mode</source>
+        <target>Modalità di corrispondenza utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s485c05d34eb00415">
+        <source>Delete currently set icon.</source>
+        <target>Elimina l'icona attualmente impostata.</target>
+        
+      </trans-unit>
+      <trans-unit id="se8987bdfb35e46b2">
+        <source>Consumer key</source>
+        <target>Consumer key</target>
+        
+      </trans-unit>
+      <trans-unit id="sabaf0061f7e41b0b">
+        <source>Consumer secret</source>
+        <target>Consumer secret</target>
+        
+      </trans-unit>
+      <trans-unit id="sa61966cd83b4924c">
+        <source>Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *.</source>
+        <target>Ulteriori ambiti da passare al fornitore di OAuth, separati da spazio. Per sostituire gli ambiti esistenti, prefissare con *.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1cc0e66dbd2b5502">
+        <source>Flow settings</source>
+        <target>Impostazione flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe6977a3aea3ee6e">
+        <source>Flow to use when authenticating existing users.</source>
+        <target>Flusso da utilizzare quando si autenticano gli utenti esistenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2801a48ceac691b3">
+        <source>Enrollment flow</source>
+        <target>Flusso di iscrizione</target>
+        
+      </trans-unit>
+      <trans-unit id="s5d0a14d29ebad561">
+        <source>Flow to use when enrolling new users.</source>
+        <target>Flusso da utilizzare quando si iscrivono nuovi utenti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s91f389c796720a81">
+        <source>Load servers</source>
+        <target>Carico server</target>
+        
+      </trans-unit>
+      <trans-unit id="s24f405197ede5ebb">
+        <source>Re-authenticate with plex</source>
+        <target>Riautenticarsi con plex</target>
+        
+      </trans-unit>
+      <trans-unit id="sc297b2e13c28ecf9">
+        <source>Allow friends to authenticate via Plex, even if you don't share any servers</source>
+        <target>Consenti agli amici di autenticarsi tramite Plex, anche se non condividi alcun server</target>
+        
+      </trans-unit>
+      <trans-unit id="sfee91e08b8b47477">
+        <source>Allowed servers</source>
+        <target>Server permessi</target>
+        
+      </trans-unit>
+      <trans-unit id="s216eb300543edd91">
+        <source>Select which server a user has to be a member of to be allowed to authenticate.</source>
+        <target>Seleziona il server di cui un utente deve essere membro per potersi autenticare.</target>
+        
+      </trans-unit>
+      <trans-unit id="s31d7f3ba04d306a5">
+        <source>SSO URL</source>
+        <target>URL SSO</target>
+        
+      </trans-unit>
+      <trans-unit id="s1d9d6c5b424fdc1f">
+        <source>URL that the initial Login request is sent to.</source>
+        <target>URL a cui viene inviata la richiesta di accesso iniziale.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd94db2b8c85d10a6">
+        <source>SLO URL</source>
+        <target>URL SLO</target>
+        
+      </trans-unit>
+      <trans-unit id="sc764ddf60b5149de">
+        <source>Optional URL if the IDP supports Single-Logout.</source>
+        <target>URL facoltativo se l'IDP supporta il logout singolo.</target>
+        
+      </trans-unit>
+      <trans-unit id="se7430794fa89005a">
+        <source>Also known as Entity ID. Defaults the Metadata URL.</source>
+        <target>Noto anche come ID entità. Predefinisce l'URL dei metadati.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5615bb595ad6ded6">
+        <source>Binding Type</source>
+        <target>Tipo associazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa2e4d6830226d3ec">
+        <source>Redirect binding</source>
+        <target>Associazione redirect</target>
+        
+      </trans-unit>
+      <trans-unit id="s6f96a78d81ef277c">
+        <source>Post-auto binding</source>
+        <target>Binding post-auto</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2c70fd56f5d0b48">
+        <source>Post binding but the request is automatically sent and the user doesn't have to confirm.</source>
+        <target>POST BINDING Ma la richiesta viene inviata automaticamente e l'utente non deve confermare.</target>
+        
+      </trans-unit>
+      <trans-unit id="s968c90258dcf7562">
+        <source>Post binding</source>
+        <target>Post binding</target>
+        
+      </trans-unit>
+      <trans-unit id="se10bbf4cf861c81b">
+        <source>Signing keypair</source>
+        <target>Coppia di chiavi di firma</target>
+        
+      </trans-unit>
+      <trans-unit id="s838ed611b533b19e">
+        <source>Keypair which is used to sign outgoing requests. Leave empty to disable signing.</source>
+        <target>Coppia di chiavi utilizzata per firmare le richieste in uscita. Lascia vuoto per disabilitare la firma.</target>
+        
+      </trans-unit>
+      <trans-unit id="s39c8c0bf4d927c9f">
+        <source> Allow IDP-initiated logins</source>
+        <target>Consenti accessi iniziati da IDP</target>
+        
+      </trans-unit>
+      <trans-unit id="s65d507f1513c2f03">
+        <source>Allows authentication flows initiated by the IdP. This can be a security risk, as no validation of the request ID is done.</source>
+        <target>Consente i flussi di autenticazione avviati dall'IDP. Questo può essere un rischio per la sicurezza, poiché non viene eseguita alcuna convalida dell'ID richiesta.</target>
+        
+      </trans-unit>
+      <trans-unit id="s297a2075bd7e40db">
+        <source>NameID Policy</source>
+        <target>Criterio NameID</target>
+        
+      </trans-unit>
+      <trans-unit id="s004e9a2c90f23900">
+        <source>Persistent</source>
+        <target>Persistente</target>
+        
+      </trans-unit>
+      <trans-unit id="s38887b94b3320533">
+        <source>Email address</source>
+        <target>Indirizzo email</target>
+        
+      </trans-unit>
+      <trans-unit id="s2d34c87f67f66c6a">
+        <source>Windows</source>
+        <target>Windows</target>
+        
+      </trans-unit>
+      <trans-unit id="s1665454e31e14941">
+        <source>X509 Subject</source>
+        <target>Soggetto X509</target>
+        
+      </trans-unit>
+      <trans-unit id="s0c3ac7f9383a8cfd">
+        <source>Transient</source>
+        <target>Effimero</target>
+        
+      </trans-unit>
+      <trans-unit id="s20a0ce62823bfa97">
+        <source>Delete temporary users after</source>
+        <target>Elimina gli utenti temporanei dopo</target>
+        
+      </trans-unit>
+      <trans-unit id="s3198c384c2f68b08">
+        <source>Time offset when temporary users should be deleted. This only applies if your IDP uses the NameID Format 'transient', and the user doesn't log out manually.</source>
+        <target>Tempo da attendere quando gli utenti temporanei devono essere eliminati. Questo vale solo se l'IDP utilizza il formato NameID &quot;Transient&quot; e l'utente non si disconnette manualmente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb32e9c1faa0b8673">
+        <source>Pre-authentication flow</source>
+        <target>Flusso pre-autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sa3c1f6ac5e63a70f">
+        <source>Flow used before authentication.</source>
+        <target>Flusso utilizzato prima dell'autenticazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="se12969ade44cd2b6">
+        <source>New source</source>
+        <target>Nuova sorgente</target>
+        
+      </trans-unit>
+      <trans-unit id="s19b09f4fc72175d1">
+        <source>Create a new source.</source>
+        <target>Crea una nuova sorgente</target>
+        
+      </trans-unit>
+      <trans-unit id="s6152026c364ad974">
+        <source>Sources of identities, which can either be synced into authentik's database, or can be used by users to authenticate and enroll themselves.</source>
+        <target>Fonti di identità, che possono essere sincronizzate nel database di Authentik o possono essere utilizzate dagli utenti per autenticarsi e iscriversi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a0ca63b967f1630">
+        <source>Source(s)</source>
+        <target>Sorgente(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s66722bc2ea775e05">
+        <source>Disabled</source>
+        <target>Disabilitato</target>
+        
+      </trans-unit>
+      <trans-unit id="s4ff2c202b4e5bdc5">
+        <source>Built-in</source>
+        <target>Built-in</target>
+        
+      </trans-unit>
+      <trans-unit id="s52b500138a2d2b8a">
+        <source>Update LDAP Source</source>
+        <target>Aggiorna sorgente LDAP</target>
+        
+      </trans-unit>
+      <trans-unit id="s31a2d43bc1cf1790">
+        <source>Not synced yet.</source>
+        <target>Non ancora sincronizzato</target>
+        
+      </trans-unit>
+      <trans-unit id="sf3fec8353106ac2f">
+        <source>OAuth Source <x id="0" equiv-text="${this.source.name}"/></source>
+        <target>Dorgente OAuth
+        <x id="0" equiv-text="${this.source.name}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="se09d055771f3a11d">
+        <source>Generic OpenID Connect</source>
+        <target>OpenID Connect Generico</target>
+        
+      </trans-unit>
+      <trans-unit id="s5c1dc164c89ac13e">
+        <source>Unknown provider type</source>
+        <target>Tipo provider sconosciuto</target>
+        
+      </trans-unit>
+      <trans-unit id="s355b21b89ce5d9c5">
+        <source>Details</source>
+        <target>Dettagli</target>
+        
+      </trans-unit>
+      <trans-unit id="s01088b6625d2443b">
+        <source>Callback URL</source>
+        <target>Callback URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sb6d5146d5efb3058">
+        <source>Access Key</source>
+        <target>Access Key</target>
+        
+      </trans-unit>
+      <trans-unit id="s065604a41e9d1584">
+        <source>Update OAuth Source</source>
+        <target>Aggiorna sorgente OAuth</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b576aa71acb36a6">
+        <source>Diagram</source>
+        <target>Diagramma</target>
+        
+      </trans-unit>
+      <trans-unit id="s587ba266269297ab">
+        <source>Policy Bindings</source>
+        <target>Associazione Criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s2feae323f46479f8">
+        <source>These bindings control which users can access this source.
+            You can only use policies here as access is checked before the user is authenticated.</source>
+        <target>Questi bindings (collegamenti) controllano quali utenti possono accedere a questa fonte.
+ È possibile utilizzare solo policies poiché l'accesso viene controllato prima che l'utente venga autenticato.</target>
+      </trans-unit>
+      <trans-unit id="se17fcb1f159ee382">
+        <source>Update Plex Source</source>
+        <target>Aggiorna sorgente Plex</target>
+        
+      </trans-unit>
+      <trans-unit id="saa10777250a6deca">
+        <source>Update SAML Source</source>
+        <target>Aggiorna sorgente SAML</target>
+        
+      </trans-unit>
+      <trans-unit id="s643d8f2e5e5e930d">
+        <source>Successfully updated mapping.</source>
+        <target>Mappatura aggiornata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sffeef5b119d8625c">
+        <source>Successfully created mapping.</source>
+        <target>Mappatura creata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd39c5e998efecf93">
+        <source>SAML Attribute Name</source>
+        <target>Attributo nome SAML</target>
+        
+      </trans-unit>
+      <trans-unit id="scf2790cf3ad89283">
+        <source>Attribute name used for SAML Assertions. Can be a URN OID, a schema reference, or a any other string. If this property mapping is used for NameID Property, this field is discarded.</source>
+        <target>Nome attributo usato per le asserzioni SAML. Può essere un URN OID, un riferimento allo schema o qualsiasi altra stringa. Se questa mappatura delle proprietà viene utilizzata per la proprietà NameID, questo campo viene scartato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sab6d24c5ec8dc361">
+        <source>Friendly Name</source>
+        <target>Nome amichevole</target>
+        
+      </trans-unit>
+      <trans-unit id="s9f8aac89fe318acc">
+        <source>Optionally set the 'FriendlyName' value of the Assertion attribute.</source>
+        <target>Opzionale: imposta il valore &quot;friendlyname&quot; dell'attributo di asserzione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s851c108679653d2a">
+        <source>Scope name</source>
+        <target>Scope name</target>
+        
+      </trans-unit>
+      <trans-unit id="s23fd4411419fca06">
+        <source>Scope which the client can specify to access these properties.</source>
+        <target>Ambito che il client può specificare per accedere a queste proprietà.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7754f0e34f27fb6e">
+        <source>Description shown to the user when consenting. If left empty, the user won't be informed.</source>
+        <target>Descrizione mostrata all'utente quando consenziente. Se lasciato vuoto, l'utente non verrà informato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb6c3bf5489d7556e">
+        <source>Example context data</source>
+        <target>Dati di contesto di esempio</target>
+        
+      </trans-unit>
+      <trans-unit id="s4a697f0b36c4fe83">
+        <source>Active Directory User</source>
+        <target>Utente Active Directory</target>
+        
+      </trans-unit>
+      <trans-unit id="s9277b90db38e1983">
+        <source>Active Directory Group</source>
+        <target>Gruppo Active Directory</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2e03590269d5a10">
+        <source>New property mapping</source>
+        <target>Nuova mappatura proprietà</target>
+        
+      </trans-unit>
+      <trans-unit id="s713e8666ed70f8b3">
+        <source>Create a new property mapping.</source>
+        <target>Crea una nuova mappatura proprietà</target>
+        
+      </trans-unit>
+      <trans-unit id="sce106606ae84d46f">
+        <source>Property Mappings</source>
+        <target>Mappatura proprietà</target>
+        
+      </trans-unit>
+      <trans-unit id="s271a7e04ff9865b1">
+        <source>Control how authentik exposes and interprets information.</source>
+        <target>Controlla come authentik espone e interpreta le informazioni.</target>
+        
+      </trans-unit>
+      <trans-unit id="s59dc0eda07f9e2b6">
+        <source>Property Mapping(s)</source>
+        <target>Mappatura delle proprietà</target>
+        
+      </trans-unit>
+      <trans-unit id="sa57c393736e2732c">
+        <source>Test Property Mapping</source>
+        <target>Mappatura delle proprietà di test</target>
+        
+      </trans-unit>
+      <trans-unit id="sc39fb3ff3753d5ab">
+        <source>Hide managed mappings</source>
+        <target>Nascondere mappature gestite</target>
+        
+      </trans-unit>
+      <trans-unit id="s476ffc07e6d66f18">
+        <source>Successfully updated token.</source>
+        <target>Token aggiornato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s93c1e5fbe8184895">
+        <source>Successfully created token.</source>
+        <target>Token creato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5fc4269c2addee61">
+        <source>Unique identifier the token is referenced by.</source>
+        <target>Identificatore univoco del token</target>
+        
+      </trans-unit>
+      <trans-unit id="sb8bc2b8376c96a6b">
+        <source>Intent</source>
+        <target>Intent</target>
+        
+      </trans-unit>
+      <trans-unit id="sbd34d118bcb1aaf2">
+        <source>API Token</source>
+        <target>API Token</target>
+        
+      </trans-unit>
+      <trans-unit id="se31d92bea7f3a186">
+        <source>Used to access the API programmatically</source>
+        <target>Utilizzato per accedere all'API in modo programmatico</target>
+        
+      </trans-unit>
+      <trans-unit id="sfd586951c75eb291">
+        <source>App password.</source>
+        <target>App password.</target>
+        
+      </trans-unit>
+      <trans-unit id="s59bf194136d0d13a">
+        <source>Used to login using a flow executor</source>
+        <target>Utilizzato per accedere usando un esecutore di flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s1b14062c44e5ef45">
+        <source>Expiring</source>
+        <target>In scadenza</target>
+        
+      </trans-unit>
+      <trans-unit id="safcc54b2aedb1a17">
+        <source>If this is selected, the token will expire. Upon expiration, the token will be rotated.</source>
+        <target>Se questo è selezionato, il token scade. Alla scadenza, il token viene ruotato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4165cd175bc4c0c4">
+        <source>Expires on</source>
+        <target>Scade il</target>
+        
+      </trans-unit>
+      <trans-unit id="s1cd198d689c66e4b">
+        <source>API Access</source>
+        <target>Accesso API</target>
+        
+      </trans-unit>
+      <trans-unit id="sf29883ac9ec43085">
+        <source>App password</source>
+        <target>App password</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe211545fd02f73e">
+        <source>Verification</source>
+        <target>Verifica</target>
+        
+      </trans-unit>
+      <trans-unit id="sd73b202ec04eefd9">
+        <source>Unknown intent</source>
+        <target>Intent sconosciuto</target>
+        
+      </trans-unit>
+      <trans-unit id="s78fd8c03f8c967f3">
+        <source>Tokens</source>
+        <target>Tokens</target>
+        
+      </trans-unit>
+      <trans-unit id="sdcc7b2c109ce9775">
+        <source>Tokens are used throughout authentik for Email validation stages, Recovery keys and API access.</source>
+        <target>I token vengono utilizzati in Authentik per le fasi di convalida dell'e-mail, le chiavi di ripristino e l'accesso all'API.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf71dba2c30283a54">
+        <source>Expires?</source>
+        <target>Scade?</target>
+        
+      </trans-unit>
+      <trans-unit id="sc7be80a7f8ec597e">
+        <source>Expiry date</source>
+        <target>Data di scadenza</target>
+        
+      </trans-unit>
+      <trans-unit id="s71dcd9cf808449aa">
+        <source>Token(s)</source>
+        <target>Token(s)</target>
+        
+      </trans-unit>
+      <trans-unit id="sb15e8daacf26bdfc">
+        <source>Create Token</source>
+        <target>Crea token</target>
+        
+      </trans-unit>
+      <trans-unit id="s8d7ecd944ebe834b">
+        <source>Token is managed by authentik.</source>
+        <target>Token gestito da Authentik</target>
+        
+      </trans-unit>
+      <trans-unit id="sd1288ca57e221cf9">
+        <source>Update Token</source>
+        <target>Aggiorna Token</target>
+        
+      </trans-unit>
+      <trans-unit id="s41706a202b6c40f1">
+        <source>Domain</source>
+        <target>Dominio</target>
+        
+      </trans-unit>
+      <trans-unit id="se74ce42d41e392ba">
+        <source>Matching is done based on domain suffix, so if you enter domain.tld, foo.domain.tld will still match.</source>
+        <target>La corrispondenza viene effettuata in base al suffisso del dominio, quindi se inserisci domain.tld, foo.domain.tld corrisponderà comunque.</target>
+        
+      </trans-unit>
+      <trans-unit id="s11326fd2590f4e5e">
+        <source>Default</source>
+        <target>Predefinito</target>
+        
+      </trans-unit>
+      <trans-unit id="sc19838ca8c135c1b">
+        <source>Branding settings</source>
+        <target>Impostazioni branding</target>
+        
+      </trans-unit>
+      <trans-unit id="s99f110d27e30b289">
+        <source>Title</source>
+        <target>Titolo</target>
+        
+      </trans-unit>
+      <trans-unit id="sab6bad52985c6676">
+        <source>Branding shown in page title and several other places.</source>
+        <target>Branding mostrato nel titolo della pagina e in molti altri posti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4f1af2b48a5e249a">
+        <source>Logo</source>
+        <target>Logo</target>
+        
+      </trans-unit>
+      <trans-unit id="sd6b8b4156f7df696">
+        <source>Icon shown in sidebar/header and flow executor.</source>
+        <target>Icona mostrata nella barra laterale/intestazione e nell'esecutore del flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3626433940124897">
+        <source>Favicon</source>
+        <target>Favicon</target>
+        
+      </trans-unit>
+      <trans-unit id="se99efc0873031976">
+        <source>Icon shown in the browser tab.</source>
+        <target>Icona mostrata nella scheda del browser.</target>
+        
+      </trans-unit>
+      <trans-unit id="s10356fd921037fbf">
+        <source>Default flows</source>
+        <target>Flussi predefiniti</target>
+        
+      </trans-unit>
+      <trans-unit id="sd216b08bafb297ee">
+        <source>Flow used to authenticate users. If left empty, the first applicable flow sorted by the slug is used.</source>
+        <target>Flusso utilizzato per autenticare gli utenti. Se lasciato vuoto, viene utilizzato il primo flusso applicabile ordinato in base allo slug.</target>
+        
+      </trans-unit>
+      <trans-unit id="s35e6e60e83a8c003">
+        <source>Invalidation flow</source>
+        <target>Flusso di invalidazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s7989db5f4819af89">
+        <source>Flow used to logout. If left empty, the first applicable flow sorted by the slug is used.</source>
+        <target>Flusso usato per logout. Se lasciato vuoto, viene utilizzato il primo flusso applicabile ordinato dallo slug.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfeb779d4ccbc5a0e">
+        <source>Recovery flow</source>
+        <target>Flusso di recupero</target>
+        
+      </trans-unit>
+      <trans-unit id="s836aa192b30c21da">
+        <source>Unenrollment flow</source>
+        <target>Flusso di cancellazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s081d3c4b47a6ff83">
+        <source>If set, users are able to unenroll themselves using this flow. If no flow is set, option is not shown.</source>
+        <target>Se impostato, gli utenti sono in grado di anullare l'iscrizione usando questo flusso. Se non è impostato alcun flusso, l'opzione non viene mostrata.</target>
+        
+      </trans-unit>
+      <trans-unit id="secbfd13bdae95a59">
+        <source>User settings flow</source>
+        <target>Flusso impostazioni utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s523160b433311521">
+        <source>If set, users are able to configure details of their profile.</source>
+        <target>Se impostato, gli utenti sono in grado di configurare i dettagli del proprio profilo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s134177568525dbc8">
+        <source>Device code flow</source>
+        <target>Flusso dispositivo codice</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b298427bdea81ae">
+        <source>If set, the OAuth Device Code profile can be used, and the selected flow will be used to enter the code.</source>
+        <target>Se impostato, è possibile utilizzare il OAuth Device Code e il flusso selezionato verrà utilizzato per immettere il codice.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7f4e4054fbe132e1">
+        <source>Other global settings</source>
+        <target>Altre impostazioni globali</target>
+        
+      </trans-unit>
+      <trans-unit id="sbadde673052efc02">
+        <source>Web Certificate</source>
+        <target>Certificato Web</target>
+        
+      </trans-unit>
+      <trans-unit id="s84c5a011acd608c9">
+        <source>Event retention</source>
+        <target>Ritenzione degli eventi</target>
+        
+      </trans-unit>
+      <trans-unit id="s2536ac8d32d2e63f">
+        <source>Duration after which events will be deleted from the database.</source>
+        <target>Tempo dopo il quale gli eventi verranno eliminati dal database.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b1fba26d245cb1c">
+        <source>When using an external logging solution for archiving, this can be set to &quot;minutes=5&quot;.</source>
+        <target>Quando si utilizza una soluzione di archiviazione esterna, questo può essere impostato a &quot;minutes=5&quot;.</target>
+        
+      </trans-unit>
+      <trans-unit id="s44536d20bb5c8257">
+        <source>This setting only affects new Events, as the expiration is saved per-event.</source>
+        <target>Questa impostazione influisce solo sui nuovi eventi, poiché la scadenza viene salvata per evento.</target>
+        
+      </trans-unit>
+      <trans-unit id="s164be9a7537b99f6">
+        <source>Configure visual settings and defaults for different domains.</source>
+        <target>Configura le impostazioni visibili e le impostazioni predefinite per domini diversi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4802636d55022ed3">
+        <source>Default?</source>
+        <target>Predefinito?</target>
+        
+      </trans-unit>
+      <trans-unit id="s8cb7bb82e96d5d77">
+        <source>Policies</source>
+        <target>Criteri</target>
+        
+      </trans-unit>
+      <trans-unit id="sec1808532fe107b9">
+        <source>Allow users to use Applications based on properties, enforce Password Criteria and selectively apply Stages.</source>
+        <target>Consenti agli utenti di utilizzare le applicazioni in base alle proprietà, applicare i criteri di password e applicare selettivamente le fasi(stages).</target>
+        
+      </trans-unit>
+      <trans-unit id="se16ac750b81fa93d">
+        <source>Assigned to <x id="0" equiv-text="${item.boundTo}"/> object(s).</source>
+        <target>Assegnato a
+        <x id="0" equiv-text="${item.boundTo}"/>oggetto(i).</target>
+        
+      </trans-unit>
+      <trans-unit id="s5a48d5171e1a1522">
+        <source>Warning: Policy is not assigned.</source>
+        <target>Attenzione: il criterio non è assegnato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s544142ce35050751">
+        <source>Test Policy</source>
+        <target>Prova criterio</target>
+        
+      </trans-unit>
+      <trans-unit id="s00c8354318addfa0">
+        <source>Policy / Policies</source>
+        <target>Criterio / Criteri</target>
+        
+      </trans-unit>
+      <trans-unit id="s76da2c978dcc5ef4">
+        <source>Successfully cleared policy cache</source>
+        <target>Cancellazione della cache dei criteri con successo</target>
+        
+      </trans-unit>
+      <trans-unit id="sa717841a602fe7d8">
+        <source>Failed to delete policy cache</source>
+        <target>Impossibile eliminare la cache della policy</target>
+        
+      </trans-unit>
+      <trans-unit id="s3ed5607ad78d4224">
+        <source>Clear cache</source>
+        <target>Cancella cache</target>
+        
+      </trans-unit>
+      <trans-unit id="s1b07757762cda372">
+        <source>Clear Policy cache</source>
+        <target>Cancella cache criteri</target>
+        
+      </trans-unit>
+      <trans-unit id="s15b46b78edebb20a">
+        <source>Are you sure you want to clear the policy cache? This will cause all policies to be re-evaluated on their next usage.</source>
+        <target>Sei sicuro di voler cancellare la cache delle politiche? Ciò causerà la rivalutazione di tutte le politiche al loro prossimo utilizzo.</target>
+      </trans-unit>
+      <trans-unit id="s62ddcbaaa91d120d">
+        <source>Reputation scores</source>
+        <target>Punteggi di reputazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sd080b2370aa82967">
+        <source>Reputation for IP and user identifiers. Scores are decreased for each failed login and increased for each successful login.</source>
+        <target>Reputazione per IP e identificatori dell'utente. I punteggi vengono ridotti per ogni accesso non riuscito e aumentati per ogni accesso riuscito.</target>
+        
+      </trans-unit>
+      <trans-unit id="s09242207b5b8f83c">
+        <source>IP</source>
+        <target>IP</target>
+        
+      </trans-unit>
+      <trans-unit id="s7d684b6257284e55">
+        <source>Score</source>
+        <target>Punteggio</target>
+        
+      </trans-unit>
+      <trans-unit id="s10d2dbc4613397f0">
+        <source>Updated</source>
+        <target>Aggiornato</target>
+        
+      </trans-unit>
+      <trans-unit id="sa33d061d2ade20aa">
+        <source>Reputation</source>
+        <target>Reputazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s9f26843287bb592d">
+        <source>Groups</source>
+        <target>Gruppi</target>
+        
+      </trans-unit>
+      <trans-unit id="s4dcb9288f7e9e4d7">
+        <source>Group users together and give them permissions based on the membership.</source>
+        <target>Gruppo gli utenti insieme e forniscono loro autorizzazioni in base all'appartenenza.</target>
+        
+      </trans-unit>
+      <trans-unit id="s62f93cfcb45d5a06">
+        <source>Superuser privileges?</source>
+        <target>Privilegi di superutente?</target>
+        
+      </trans-unit>
+      <trans-unit id="s9fdda7ea4642306c">
+        <source>Group(s)</source>
+        <target>Gruppo(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s416a540b16275f2e">
+        <source>Create Group</source>
+        <target>Crea Gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s7c5774fad9d050ce">
+        <source>Create group</source>
+        <target>Crea gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s2a12e0b5527ff99a">
+        <source>Enabling this toggle will create a group named after the user, with the user as member.</source>
+        <target>Abilitazione di questo interruttore creerà un gruppo che prende il nome dall'utente, con l'utente come membro.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6b6e6eb037aef7da">
+        <source>Use the username and password below to authenticate. The password can be retrieved later on the Tokens page.</source>
+        <target>Utilizzare il nome utente e la password di seguito per autenticare. La password può essere recuperata più avanti nella pagina dei token.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf6e1665c7022a1f8">
+        <source>Password</source>
+        <target>Password</target>
+        
+      </trans-unit>
+      <trans-unit id="sbb57cd8a3ed12915">
+        <source>Valid for 360 days, after which the password will automatically rotate. You can copy the password from the Token List.</source>
+        <target>Valido per 360 giorni, dopo di che la password ruoterà automaticamente. È possibile copiare la password dall'elenco dei token.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4414164d120de61a">
+        <source>The following objects use <x id="0" equiv-text="${objName}"/></source>
+        <target>Il seguente oggetto usa
+        <x id="0" equiv-text="${objName}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s92e241c9f3c101a2">
+        <source>connecting object will be deleted</source>
+        <target>oggetti connessi saranno cancellati</target>
+        
+      </trans-unit>
+      <trans-unit id="se6a13beff646557b">
+        <source>Successfully updated <x id="0" equiv-text="${this.objectLabel} ${this.obj?.name}"/></source>
+        <target>Aggiornato con successo <x id="0" equiv-text="${this.objectLabel} ${this.obj?.name}"/></target>
+      </trans-unit>
+      <trans-unit id="s14401ff4a0cba208">
+        <source>Failed to update <x id="0" equiv-text="${this.objectLabel}"/>: <x id="1" equiv-text="${e.toString()}"/></source>
+        <target>Impossibile aggiornare
+        <x id="0" equiv-text="${this.objectLabel}"/>:
+        <x id="1" equiv-text="${e.toString()}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="sa95a538bfbb86111">
+        <source>Are you sure you want to update <x id="0" equiv-text="${this.objectLabel}"/> &quot;<x id="1" equiv-text="${this.obj?.name}"/>&quot;?</source>
+        <target>Sei sicuro di voler aggiornare
+        <x id="0" equiv-text="${this.objectLabel}"/>&quot;
+        <x id="1" equiv-text="${this.obj?.name}"/>&quot;?</target>
+        
+      </trans-unit>
+      <trans-unit id="sc92d7cfb6ee1fec6">
+        <source>Successfully updated password.</source>
+        <target>Password aggiornata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="se5498954255620b4">
+        <source>Successfully sent email.</source>
+        <target>Email inviata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s44ea4e9a81ce730d">
+        <source>Email stage</source>
+        <target>Fase email</target>
+        
+      </trans-unit>
+      <trans-unit id="sdb53ccdd6174e6e3">
+        <source>Successfully added user(s).</source>
+        <target>Aggiunto con successo utente(i).</target>
+        
+      </trans-unit>
+      <trans-unit id="s306a35df5d0d38bb">
+        <source>Users to add</source>
+        <target>Utenti da aggiungere</target>
+        
+      </trans-unit>
+      <trans-unit id="s7d499be3b781a3ca">
+        <source>User(s)</source>
+        <target>Utente(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s7220fcf4fec4e0df">
+        <source>Remove Users(s)</source>
+        <target>Rimuovi Utente(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s5d7748b1d2363478">
+        <source>Are you sure you want to remove the selected users from the group <x id="0" equiv-text="${this.targetGroup?.name}"/>?</source>
+        <target>Vuoi davvero rimuovere gli utenti selezionati dal gruppo
+        <x id="0" equiv-text="${this.targetGroup?.name}"/>?</target>
+        
+      </trans-unit>
+      <trans-unit id="sea4f08110bb8f15d">
+        <source>Remove</source>
+        <target>Rimuovi</target>
+        
+      </trans-unit>
+      <trans-unit id="sf466142da6a65052">
+        <source>Impersonate</source>
+        <target>Impersona</target>
+        
+      </trans-unit>
+      <trans-unit id="s58888ef1ee9b5bb8">
+        <source>User status</source>
+        <target>Stato utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sf9e61f4f8e90f0f1">
+        <source>Change status</source>
+        <target>Cambiare stato</target>
+        
+      </trans-unit>
+      <trans-unit id="sf56998949bdf6b33">
+        <source>Deactivate</source>
+        <target>Disattiva</target>
+        
+      </trans-unit>
+      <trans-unit id="s3794c596ee7964ad">
+        <source>Update password</source>
+        <target>Aggiorna password</target>
+        
+      </trans-unit>
+      <trans-unit id="sce8d867ca5f35304">
+        <source>Set password</source>
+        <target>Imposta password</target>
+        
+      </trans-unit>
+      <trans-unit id="s0ae3395d8f48e624">
+        <source>Successfully generated recovery link</source>
+        <target>Link di recupero generato con successo</target>
+        
+      </trans-unit>
+      <trans-unit id="s8ca0dbaec5d48563">
+        <source>No recovery flow is configured.</source>
+        <target>Nessun flusso di recupero è configurato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb69119c9f0547bed">
+        <source>Copy recovery link</source>
+        <target>Copia il link di recupero</target>
+        
+      </trans-unit>
+      <trans-unit id="s7fa236d26b798301">
+        <source>Send link</source>
+        <target>Invia link</target>
+        
+      </trans-unit>
+      <trans-unit id="sa9dbe2fb284e26fe">
+        <source>Send recovery link to user</source>
+        <target>Invia il link di recupero all'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s03fd2c252ad7972a">
+        <source>Email recovery link</source>
+        <target>Link di recupero email</target>
+        
+      </trans-unit>
+      <trans-unit id="sd7fa99e4d82b374a">
+        <source>Recovery link cannot be emailed, user has no email address saved.</source>
+        <target>Impossibile inviare tramite e-mail il collegamento di recupero, l'utente non ha un indirizzo e-mail salvato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s720594461542943f">
+        <source>Add User</source>
+        <target>Aggiungi utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s4c41f3f4c23e8eaa">
+        <source>Warning: This group is configured with superuser access. Added users will have superuser access.</source>
+        <target>Attenzione: questo gruppo è configurato con accesso come superutente. Gli utenti aggiunti avranno accesso come superutente.</target>
+        
+      </trans-unit>
+      <trans-unit id="scee721983b1c28d0">
+        <source>Add existing user</source>
+        <target>Aggiungi utente esistente</target>
+        
+      </trans-unit>
+      <trans-unit id="sd600334ec2c39b74">
+        <source>Create user</source>
+        <target>Creare utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s53ad3455d9523b54">
+        <source>Create User</source>
+        <target>Creare utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s06c163334767a381">
+        <source>Create Service account</source>
+        <target>Creare account di servizio</target>
+        
+      </trans-unit>
+      <trans-unit id="sc744f3691efe310d">
+        <source>Hide service-accounts</source>
+        <target>Nascondi account di servizio</target>
+        
+      </trans-unit>
+      <trans-unit id="secdb4b4c4e66aa38">
+        <source>Group Info</source>
+        <target>Info Gruppi</target>
+        
+      </trans-unit>
+      <trans-unit id="s005053d82b712e0a">
+        <source>Notes</source>
+        <target>Note</target>
+        
+      </trans-unit>
+      <trans-unit id="s634448e4942cf452">
+        <source>Edit the notes attribute of this group to add notes here.</source>
+        <target>Modifica l'attributo Note di questo gruppo per aggiungere note qui.</target>
+        
+      </trans-unit>
+      <trans-unit id="s586d6bd2eca2da93">
+        <source>Users</source>
+        <target>Utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="sca7cfe2bef51b2a5">
+        <source>Root</source>
+        <target>Root</target>
+        
+      </trans-unit>
+      <trans-unit id="s3616cc78631f5893">
+        <source>Warning: You're about to delete the user you're logged in as (<x id="0" equiv-text="${shouldShowWarning.username}"/>). Proceed at your own risk.</source>
+        <target>Attenzione: stai per eliminare l'utente con cui hai effettuato l'accesso (
+        <x id="0" equiv-text="${shouldShowWarning.username}"/>). Procedete a vostro rischio.</target>
+        
+      </trans-unit>
+      <trans-unit id="s510c7add9e24c306">
+        <source>Hide deactivated user</source>
+        <target>Nascondi utente disattivato</target>
+        
+      </trans-unit>
+      <trans-unit id="s94055b4eb957dc8f">
+        <source>User folders</source>
+        <target>Cartelle utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sa982875b258fea07">
+        <source>Successfully added user to group(s).</source>
+        <target>Utente aggiunto ai gruppo(i) con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1bd5920d8adf2bd5">
+        <source>Groups to add</source>
+        <target>Gruppi da aggiungere</target>
+        
+      </trans-unit>
+      <trans-unit id="s5f71fa3c53828e30">
+        <source>Remove from Group(s)</source>
+        <target>Rimuovi dal gruppo(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="sb4c9ed2a487b238f">
+        <source>Are you sure you want to remove user <x id="0" equiv-text="${this.targetUser?.username}"/> from the following groups?</source>
+        <target>Sei sicuro di voler rimuovere l'utente
+            dai seguenti gruppi?</target>
+        
+      </trans-unit>
+      <trans-unit id="s964f6725aeb7662f">
+        <source>Add Group</source>
+        <target>Aggiungi Gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s65ca2f256ea09c11">
+        <source>Add to existing group</source>
+        <target>Aggiungi a gruppo esistente</target>
+        
+      </trans-unit>
+      <trans-unit id="s505fbbdcbc6aa921">
+        <source>Add new group</source>
+        <target>Aggiungi nuovo gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="s506beb486fa41241">
+        <source>Application authorizations</source>
+        <target>Autorizzazioni applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s7301a7069b7bc83e">
+        <source>Revoked?</source>
+        <target>Revocato?</target>
+        
+      </trans-unit>
+      <trans-unit id="sd924045605feea63">
+        <source>Expires</source>
+        <target>Scade</target>
+        
+      </trans-unit>
+      <trans-unit id="s1c8916418c334935">
+        <source>ID Token</source>
+        <target>ID Token</target>
+        
+      </trans-unit>
+      <trans-unit id="s90760e5e02e95dfe">
+        <source>Refresh Tokens(s)</source>
+        <target>Tokens(s) di aggiornamento</target>
+        
+      </trans-unit>
+      <trans-unit id="s1b88fa3df4423292">
+        <source>Last IP</source>
+        <target>Ultimo IP</target>
+        
+      </trans-unit>
+      <trans-unit id="se63f9d833700af49">
+        <source>Session(s)</source>
+        <target>Sessione(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="sf679b7a62808287e">
+        <source>Expiry</source>
+        <target>Scadenza</target>
+        
+      </trans-unit>
+      <trans-unit id="sde1907073fd96017">
+        <source>(Current session)</source>
+        <target>(Current session)</target>
+        
+      </trans-unit>
+      <trans-unit id="se8dca0132c66ae03">
+        <source>Permissions</source>
+        <target>Permessi</target>
+        
+      </trans-unit>
+      <trans-unit id="s76881c01b6a3a8c7">
+        <source>Consent(s)</source>
+        <target>Consenso(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="sea2f00b34b385a43">
+        <source>Successfully updated device.</source>
+        <target>Dispositivo aggiornato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s858e7ac4b3cf955f">
+        <source>Static tokens</source>
+        <target>Token statici</target>
+        
+      </trans-unit>
+      <trans-unit id="sfcfcf85a57eea78a">
+        <source>TOTP Device</source>
+        <target>Dispositivo TOTP</target>
+        
+      </trans-unit>
+      <trans-unit id="s6a406aecb2c0e5c5">
+        <source>Enroll</source>
+        <target>Iscrivi</target>
+        
+      </trans-unit>
+      <trans-unit id="sa0b01f479f40c52d">
+        <source>Device(s)</source>
+        <target>Dispositivo(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="sabb56f74492e7e96">
+        <source>Update Device</source>
+        <target>Aggiorna Dispositivo</target>
+        
+      </trans-unit>
+      <trans-unit id="sf05c700a1250824e">
+        <source>Confirmed</source>
+        <target>Confermato</target>
+        
+      </trans-unit>
+      <trans-unit id="s64a33dcdaf90af26">
+        <source>User Info</source>
+        <target>Info Utente</target>
+        
+      </trans-unit>
+      <trans-unit id="sc44bae5cde0083fa">
+        <source>Actions over the last week (per 8 hours)</source>
+        <target>Azioni nell'ultima settimana (per 8 ore)</target>
+        
+      </trans-unit>
+      <trans-unit id="sb57dbcda1929c642">
+        <source>Edit the notes attribute of this user to add notes here.</source>
+        <target>Modifica l'attributo Note di questo utente per aggiungere note qui.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5c18cae48b93138c">
+        <source>Sessions</source>
+        <target>Sessioni</target>
+        
+      </trans-unit>
+      <trans-unit id="s27586544c447d9e3">
+        <source>User events</source>
+        <target>Eventi utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s4d31797d81e9cea3">
+        <source>Explicit Consent</source>
+        <target>Consenso esplicito</target>
+        
+      </trans-unit>
+      <trans-unit id="sb6770fa90be6d8b3">
+        <source>OAuth Refresh Tokens</source>
+        <target>OAuth Refresh Tokens</target>
+        
+      </trans-unit>
+      <trans-unit id="s28b3de1561da72b3">
+        <source>MFA Authenticators</source>
+        <target>Autenticatori MFA</target>
+        
+      </trans-unit>
+      <trans-unit id="s7a322c89298dd27c">
+        <source>Successfully updated invitation.</source>
+        <target>Invito aggiornato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc554339ffc7b04e7">
+        <source>Successfully created invitation.</source>
+        <target>Invito creato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfcebd18506f1e535">
+        <source>Flow</source>
+        <target>Flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="sa84a7fd11ba85e88">
+        <source>When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages.</source>
+        <target>Una volta selezionato, l'invito sarà utilizzabile solo con il flusso. Per impostazione predefinita, l'invito viene accettato su tutti i flussi con fasi di invito.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7520286c8419a266">
+        <source>Optional data which is loaded into the flow's 'prompt_data' context variable. YAML or JSON.</source>
+        <target>Dati facoltativi che vengono caricati nella variabile di contesto &quot;prompt_data&quot; del flusso. YAML o JSON.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb8795b799c70776a">
+        <source>Single use</source>
+        <target>Uso singolo</target>
+        
+      </trans-unit>
+      <trans-unit id="sf232d42142eacc23">
+        <source>When enabled, the invitation will be deleted after usage.</source>
+        <target>Se abilitato, l'invito verrà eliminato dopo l'utilizzo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa4a8086275475714">
+        <source>Select an enrollment flow</source>
+        <target>Seleziona un flusso di registrazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s839cb09cb2193da9">
+        <source>Link to use the invitation.</source>
+        <target>Collegamento per usare l'invito.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8226f48cb1a80997">
+        <source>Invitations</source>
+        <target>Inviti</target>
+        
+      </trans-unit>
+      <trans-unit id="s57448f10eb973100">
+        <source>Create Invitation Links to enroll Users, and optionally force specific attributes of their account.</source>
+        <target>Crea collegamenti di invito per iscrivere gli utenti e, facoltativamente, forza attributi specifici del loro account.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4aee34a672e5cfc0">
+        <source>Created by</source>
+        <target>Creato da</target>
+        
+      </trans-unit>
+      <trans-unit id="sd5ba2d61ee4796fe">
+        <source>Invitation(s)</source>
+        <target>Invito/i</target>
+        
+      </trans-unit>
+      <trans-unit id="s96dcf7ec8342c335">
+        <source>Invitation not limited to any flow, and can be used with any enrollment flow.</source>
+        <target>L'invito non è limitato a nessun flusso e può essere utilizzato con qualsiasi flusso di registrazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1b42b49e7b392013">
+        <source>Update Invitation</source>
+        <target>Aggiorna Invito</target>
+        
+      </trans-unit>
+      <trans-unit id="s38c72e1cf120b8d8">
+        <source>Create Invitation</source>
+        <target>Crea Invito</target>
+        
+      </trans-unit>
+      <trans-unit id="s802826db4e2c852e">
+        <source>Warning: No invitation stage is bound to any flow. Invitations will not work as expected.</source>
+        <target>Attenzione: nessuna fase di invito è vincolata ad alcun flusso. Gli inviti non funzioneranno come previsto.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2f995efbb1e46b18">
+        <source>Auto-detect (based on your browser)</source>
+        <target>Rilevamento automatico (in base al browser)</target>
+        
+      </trans-unit>
+      <trans-unit id="s296fbffaaa7c910a">
+        <source>Required.</source>
+        <target>Richiesto.</target>
+        
+      </trans-unit>
+      <trans-unit id="s81ecf2d4386b8e84">
+        <source>Continue</source>
+        <target>Continua</target>
+        
+      </trans-unit>
+      <trans-unit id="s8b2b2a43fcf688a3">
+        <source>Successfully updated prompt.</source>
+        <target>Richiesta aggiornata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5572ac4d2208f5ec">
+        <source>Successfully created prompt.</source>
+        <target>Richiesta creata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s54e7a23a95d99649">
+        <source>Text: Simple Text input</source>
+        <target>Testo: semplice immissione di testo</target>
+        
+      </trans-unit>
+      <trans-unit id="s63e54b86e2a2cc43">
+        <source>Text Area: Multiline text input</source>
+        <target>Area di testo: immissione di testo su più righe</target>
+        
+      </trans-unit>
+      <trans-unit id="s12de1c06a1e18cc5">
+        <source>Text (read-only): Simple Text input, but cannot be edited.</source>
+        <target>Testo (sola lettura): semplice immissione di testo, ma non può essere modificato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4e5646b23e41231f">
+        <source>Text Area (read-only): Multiline text input, but cannot be edited.</source>
+        <target>Area di testo (sola lettura): inserimento di testo su più righe, ma non può essere modificato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1e4c3de6e12cd87b">
+        <source>Username: Same as Text input, but checks for and prevents duplicate usernames.</source>
+        <target>Nome utente: uguale all'immissione di testo, ma controlla e impedisce i nomi utente duplicati.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5462c7f56ed65e6c">
+        <source>Email: Text field with Email type.</source>
+        <target>E-mail: campo di testo con tipo di e-mail.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1c5574968b29ab1c">
+        <source>Password: Masked input, multiple inputs of this type on the same prompt need to be identical.</source>
+        <target>Password: input mascherato, più input di questo tipo sullo stesso prompt devono essere identici.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbbb97b1c63507dc0">
+        <source>Number</source>
+        <target>Numero</target>
+        
+      </trans-unit>
+      <trans-unit id="sdae649fae731e838">
+        <source>Checkbox</source>
+        <target>Casella di spunta</target>
+        
+      </trans-unit>
+      <trans-unit id="s34edeb18f887161d">
+        <source>Radio Button Group (fixed choice)</source>
+        <target>Gruppo di pulsanti di opzione (scelta fissa)</target>
+        
+      </trans-unit>
+      <trans-unit id="s57730b6870e8916c">
+        <source>Dropdown (fixed choice)</source>
+        <target>Menu a discesa (scelta fissa)</target>
+        
+      </trans-unit>
+      <trans-unit id="sac8252732f2edb19">
+        <source>Date</source>
+        <target>Data</target>
+        
+      </trans-unit>
+      <trans-unit id="s45960273852a61b2">
+        <source>Date Time</source>
+        <target>Data Ora</target>
+        
+      </trans-unit>
+      <trans-unit id="sd1f81284eeb7b503">
+        <source>File</source>
+        <target>File</target>
+        
+      </trans-unit>
+      <trans-unit id="s21e3c227cc2c5873">
+        <source>Separator: Static Separator Line</source>
+        <target>Separatore: linea di separazione statica</target>
+        
+      </trans-unit>
+      <trans-unit id="s706af57c1af42c6d">
+        <source>Hidden: Hidden field, can be used to insert data into form.</source>
+        <target>Nascosto: campo nascosto, può essere utilizzato per inserire i dati in forma.</target>
+        
+      </trans-unit>
+      <trans-unit id="s40e2c72dae905a50">
+        <source>Static: Static value, displayed as-is.</source>
+        <target>Statico: valore statico, visualizzato così com'è.</target>
+        
+      </trans-unit>
+      <trans-unit id="sdd4bd4224c4e943d">
+        <source>authentik: Locale: Displays a list of locales authentik supports.</source>
+        <target>Authenk: Locale: visualizza un elenco di supporti di Autenik Locali.</target>
+        
+      </trans-unit>
+      <trans-unit id="saf84e7732a9e1336">
+        <source>Preview errors</source>
+        <target>Anteprima errori</target>
+        
+      </trans-unit>
+      <trans-unit id="sb71ace8e9b35c749">
+        <source>Data preview</source>
+        <target>Anteprima dati</target>
+        
+      </trans-unit>
+      <trans-unit id="s4d53f4b7ff33bedd">
+        <source>Unique name of this field, used for selecting fields in prompt stages.</source>
+        <target>Nome univoco di questo campo, utilizzato per selezionare i campi nelle fasi del prompt.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3b58f8d2155ae90c">
+        <source>Field Key</source>
+        <target>Chiave campo</target>
+        
+      </trans-unit>
+      <trans-unit id="s2b088ba65eb69b7e">
+        <source>Name of the form field, also used to store the value.</source>
+        <target>Nome del campo del modulo, utilizzato anche per memorizzare il valore.</target>
+        
+      </trans-unit>
+      <trans-unit id="s662fcb3761ad9df7">
+        <source>When used in conjunction with a User Write stage, use attributes.foo to write attributes.</source>
+        <target>Se utilizzato insieme a una fase di scrittura dell'utente, utilizzare attributi.foo per scrivere gli attributi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5590dbf7e425789d">
+        <source>Label</source>
+        <target>Etichetta</target>
+        
+      </trans-unit>
+      <trans-unit id="s0c135eba6017d94f">
+        <source>Label shown next to/above the prompt.</source>
+        <target>Etichetta mostrata accanto/sopra il prompt.</target>
+        
+      </trans-unit>
+      <trans-unit id="sae5d87e99fe081e0">
+        <source>Required</source>
+        <target>Richiesto</target>
+        
+      </trans-unit>
+      <trans-unit id="s37dbfe2133b74d2d">
+        <source>Interpret placeholder as expression</source>
+        <target>Interpreta il segnaposto come espressione</target>
+        
+      </trans-unit>
+      <trans-unit id="s4a953e6234cb4808">
+        <source>When checked, the placeholder will be evaluated in the same way a property mapping is.
+            If the evaluation fails, the placeholder itself is returned.</source>
+        <target>Se controllato, il segnaposto verrà valutato allo stesso modo in cui è una mappatura della proprietà.
+ Se la valutazione fallisce, viene restituito il segnaposto stesso.</target>
+      </trans-unit>
+      <trans-unit id="sf90be97cb08f3d5a">
+        <source>Placeholder</source>
+        <target>Segnaposto</target>
+        
+      </trans-unit>
+      <trans-unit id="sf76ead4c4708dd06">
+        <source>Optionally provide a short hint that describes the expected input value.
+            When creating a fixed choice field, enable interpreting as expression and return a
+        list to return multiple choices.</source>
+        <target>Fornire facoltativamente un breve suggerimento che descrive il valore di input previsto.
+ Quando si crea un campo a scelta fissa, abilitare l'interpretazione come espressione e restituire a
+ Elenca per restituire più scelte.</target>
+      </trans-unit>
+      <trans-unit id="saa7ba2057bd524a1">
+        <source>Interpret initial value as expression</source>
+        <target>Interpretare il valore iniziale come espressione</target>
+        
+      </trans-unit>
+      <trans-unit id="sd60415c7666859f0">
+        <source>When checked, the initial value will be evaluated in the same way a property mapping is.
+            If the evaluation fails, the initial value itself is returned.</source>
+        <target>Se controllato, il valore iniziale verrà valutato allo stesso modo in cui è una mappatura delle proprietà.
+ Se la valutazione fallisce, viene restituito il valore iniziale stesso.</target>
+      </trans-unit>
+      <trans-unit id="sa9c7044d9fd1f3e6">
+        <source>Initial value</source>
+        <target>Valore iniziale</target>
+        
+      </trans-unit>
+      <trans-unit id="seab35681cbf36755">
+        <source>Optionally pre-fill the input with an initial value.
+            When creating a fixed choice field, enable interpreting as expression and
+        return a list to return multiple default choices.</source>
+        <target>pre-riempimento facoltativo con un valore iniziale.
+ Quando si crea un campo a scelta fissa, abilita l'interpretazione come espressione e
+ Restituisce un elenco di scelte predefinite.</target>
+      </trans-unit>
+      <trans-unit id="s72c1c17a9bdc76ad">
+        <source>Help text</source>
+        <target>Testo d'aiuto</target>
+        
+      </trans-unit>
+      <trans-unit id="s584d1c38ad20d560">
+        <source>Any HTML can be used.</source>
+        <target>È possibile utilizzare qualsiasi codice HTML.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2be6121210e2a2f8">
+        <source>Prompts</source>
+        <target>Richieste</target>
+        
+      </trans-unit>
+      <trans-unit id="s42fc6f4b64eff5d9">
+        <source>Single Prompts that can be used for Prompt Stages.</source>
+        <target>Richieste singole utilizzabili per le fasi delle richieste.</target>
+        
+      </trans-unit>
+      <trans-unit id="s42a1ebe17efda727">
+        <source>Field</source>
+        <target>Campo</target>
+        
+      </trans-unit>
+      <trans-unit id="s41b105819b67ee7a">
+        <source>Stages</source>
+        <target>Fasi</target>
+        
+      </trans-unit>
+      <trans-unit id="sec7443a45fd141e5">
+        <source>Prompt(s)</source>
+        <target>Richiesta(e)</target>
+        
+      </trans-unit>
+      <trans-unit id="scc733ba98740038a">
+        <source>Update Prompt</source>
+        <target>Richiesta aggiornamento</target>
+        
+      </trans-unit>
+      <trans-unit id="s61b6f3e6bc59c6dd">
+        <source>Create Prompt</source>
+        <target>Crea richiesta</target>
+        
+      </trans-unit>
+      <trans-unit id="sff5bb7742c2896c8">
+        <source>Target</source>
+        <target>Bersaglio</target>
+        
+      </trans-unit>
+      <trans-unit id="sae5da213b7f896ed">
+        <source>Stage</source>
+        <target>Fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a61796c1956d32c">
+        <source>Evaluate when flow is planned</source>
+        <target>Valuta quando è pianificato il flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="sf533f13321fee530">
+        <source>Evaluate policies during the Flow planning process.</source>
+        <target>Valutare le policies durante il processo di pianificazione del flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6336fa345e96dde9">
+        <source>Evaluate when stage is run</source>
+        <target>Valutare quando la fase è eseguita</target>
+        
+      </trans-unit>
+      <trans-unit id="sff3b708e23bb96b2">
+        <source>Evaluate policies before the Stage is present to the user.</source>
+        <target>Valutare le policies prima che la fase sia presente all'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0dc46deb8f181baf">
+        <source>Invalid response behavior</source>
+        <target>Comportamento risposta non valida</target>
+        
+      </trans-unit>
+      <trans-unit id="seb0805249661d15b">
+        <source>Returns the error message and a similar challenge to the executor</source>
+        <target>Restituisce il messaggio di errore e una sfida simile all'esecutore</target>
+        
+      </trans-unit>
+      <trans-unit id="sd891d8463d0ebace">
+        <source>Restarts the flow from the beginning</source>
+        <target>Riavvia il flusso dall'inizio</target>
+        
+      </trans-unit>
+      <trans-unit id="s6b9a1dd402750a8a">
+        <source>Restarts the flow from the beginning, while keeping the flow context</source>
+        <target>Riavvia il flusso dall'inizio, mantenendo il contesto del flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="sbc88fb27a4c3b894">
+        <source>Configure how the flow executor should handle an invalid response to a challenge given by this bound stage.</source>
+        <target>Configurare il modo in cui l'esecutore del flusso dovrebbe gestire una risposta non valida a una sfida data da questa fase vincolata.</target>
+        
+      </trans-unit>
+      <trans-unit id="s916b32ac64ea2b05">
+        <source>Successfully updated stage.</source>
+        <target>Fase aggiornata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s14c8f36e180d6bbc">
+        <source>Successfully created stage.</source>
+        <target>Fase creata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf22a28f83cc45fcc">
+        <source>Stage used to configure a duo-based authenticator. This stage should be used for configuration flows.</source>
+        <target>Fase utilizzata per configurare un autenticatore basato su duo. Questa fase dovrebbe essere utilizzata per i flussi di configurazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5adafce329aaa853">
+        <source>Authenticator type name</source>
+        <target>Nome del tipo di autenticatore</target>
+        
+      </trans-unit>
+      <trans-unit id="s23e6a57201fba25e">
+        <source>Display name of this authenticator, used by users when they enroll an authenticator.</source>
+        <target>Visualizza il nome di questo autenticatore, utilizzato dagli utenti quando iscrivono un autenticatore.</target>
+        
+      </trans-unit>
+      <trans-unit id="s276d751eb7a186cc">
+        <source>API Hostname</source>
+        <target>API Hostname</target>
+        
+      </trans-unit>
+      <trans-unit id="s5b6b6e2cb884d59f">
+        <source>Duo Auth API</source>
+        <target>Duo Auth API</target>
+        
+      </trans-unit>
+      <trans-unit id="s240ff02ce3a53dee">
+        <source>Integration key</source>
+        <target>Chiave di integrazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s56fd9ed596c724fa">
+        <source>Secret key</source>
+        <target>Chiave segreta</target>
+        
+      </trans-unit>
+      <trans-unit id="s88870d7e499e848b">
+        <source>Duo Admin API (optional)</source>
+        <target>Duo Admin API (opzionale)</target>
+        
+      </trans-unit>
+      <trans-unit id="s7f13f4a2d0370cf6">
+        <source>When using a Duo MFA, Access or Beyond plan, an Admin API application can be created.
+            This will allow authentik to import devices automatically.</source>
+        <target>Quando si utilizza un Duo MFA, l'accesso o oltre il piano, è possibile creare un'applicazione API di amministrazione.
+ Ciò consentirà ad Authenk di importare automaticamente i dispositivi.</target>
+      </trans-unit>
+      <trans-unit id="s9a34d1520e320465">
+        <source>Stage-specific settings</source>
+        <target>Impostazioni specifiche per la fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s0dfc6838c9d07677">
+        <source>Configuration flow</source>
+        <target>Flusso di configurazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sebf44d2471b608ad">
+        <source>Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage.</source>
+        <target>Flusso utilizzato da un utente autenticato per configurare questa fase. Se vuoto, l'utente non sarà in grado di configurare questa fase.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3baf512851453712">
+        <source>Twilio Account SID</source>
+        <target>Twilio Account SID</target>
+        
+      </trans-unit>
+      <trans-unit id="sa738ce390bc24875">
+        <source>Get this value from https://console.twilio.com</source>
+        <target>Ottieni questo valore da https://console.twilio.com</target>
+        
+      </trans-unit>
+      <trans-unit id="sa7b56a80ab1801f0">
+        <source>Twilio Auth Token</source>
+        <target>Twilio Auth Token</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe99a8caa70232ab">
+        <source>Authentication Type</source>
+        <target>Tipo di autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="safd0363143a46a91">
+        <source>Basic Auth</source>
+        <target>Basic Auth</target>
+        
+      </trans-unit>
+      <trans-unit id="sd06b47084fec0ec5">
+        <source>Bearer Token</source>
+        <target>Bearer Token</target>
+        
+      </trans-unit>
+      <trans-unit id="sb1751a1411d6874f">
+        <source>External API URL</source>
+        <target>External API URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sbdc1176ff9f93da2">
+        <source>This is the full endpoint to send POST requests to.</source>
+        <target>Questo è l'endpoint completo a cui inviare richieste post.</target>
+        
+      </trans-unit>
+      <trans-unit id="s51da4de00984fe51">
+        <source>API Auth Username</source>
+        <target>API Auth Username</target>
+        
+      </trans-unit>
+      <trans-unit id="s293ab4331c1dd387">
+        <source>This is the username to be used with basic auth or the token when used with bearer token</source>
+        <target>Questo è il nome utente da utilizzare con l'autenticazione di base o il token quando utilizzato con il bearer token</target>
+        
+      </trans-unit>
+      <trans-unit id="s634d041fd954ab20">
+        <source>API Auth password</source>
+        <target>API Auth password</target>
+        
+      </trans-unit>
+      <trans-unit id="sb635ad3c2e357d3c">
+        <source>This is the password to be used with basic auth</source>
+        <target>Questa è la password da utilizzare con l'autenticazione di base</target>
+        
+      </trans-unit>
+      <trans-unit id="sa92398dba8b12d85">
+        <source>Mapping</source>
+        <target>Mappatura</target>
+        
+      </trans-unit>
+      <trans-unit id="s38162f615710c7b4">
+        <source>Modify the payload sent to the custom provider.</source>
+        <target>Modifica il payload inviato al provider personalizzato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5e830ae7688d1219">
+        <source>Stage used to configure an SMS-based TOTP authenticator.</source>
+        <target>Fase utilizzata per configurare un autenticatore TOTP basato su SMS.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0d5d05bf3d122ced">
+        <source>Twilio</source>
+        <target>Twilio</target>
+        
+      </trans-unit>
+      <trans-unit id="sc3c74f5273df459a">
+        <source>Generic</source>
+        <target>Generico</target>
+        
+      </trans-unit>
+      <trans-unit id="sbbb2180b6aed196e">
+        <source>From number</source>
+        <target>Da numero</target>
+        
+      </trans-unit>
+      <trans-unit id="sc647dcb91f6958dd">
+        <source>Number the SMS will be sent from.</source>
+        <target>Il numero da cui verrà inviato l'SMS.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0ae0072614320ae2">
+        <source>Hash phone number</source>
+        <target>Hash numero di telefono</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ca3310e1999fd5b">
+        <source>If enabled, only a hash of the phone number will be saved. This can be done for data-protection reasons. Devices created from a stage with this enabled cannot be used with the authenticator validation stage.</source>
+        <target>Se abilitato, verrà salvato solo un hash del numero di telefono. Questo può essere fatto per motivi di protezione dei dati. I dispositivi creati da una fase con questo abilitato non possono essere utilizzati con la fase di convalida dell'autenticatore.</target>
+        
+      </trans-unit>
+      <trans-unit id="s128e7f5f34bfa155">
+        <source>Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows.</source>
+        <target>Fase utilizzato per configurare un autenticatore statico (ovvero token statici). Questa fase dovrebbe essere utilizzata per i flussi di configurazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sabf67834e35dede5">
+        <source>Token count</source>
+        <target>Conteggio dei token</target>
+        
+      </trans-unit>
+      <trans-unit id="sc5a4711395ffb043">
+        <source>Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator).</source>
+        <target>Fase utilizzato per configurare un Autenticatore TOTP (ovvero Authy/Google Authenticator).</target>
+        
+      </trans-unit>
+      <trans-unit id="s9d8ad4b85287131f">
+        <source>Digits</source>
+        <target>Cifre</target>
+        
+      </trans-unit>
+      <trans-unit id="sc04e92d753742189">
+        <source>6 digits, widely compatible</source>
+        <target>6 cifre, ampia compatibilità</target>
+        
+      </trans-unit>
+      <trans-unit id="sdc70195469e83e3f">
+        <source>8 digits, not compatible with apps like Google Authenticator</source>
+        <target>8 cifre, non compatibile con app come Google Authenticator</target>
+        
+      </trans-unit>
+      <trans-unit id="s0e15f678445dfc45">
+        <source>Stage used to validate any authenticator. This stage should be used during authentication or authorization flows.</source>
+        <target>Stage utilizzato per convalidare qualsiasi autenticatore. Questa fase dovrebbe essere utilizzata durante i flussi di autenticazione o di autorizzazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s73c13e5a6f5e38a3">
+        <source>Device classes</source>
+        <target>Classi dispositivi</target>
+        
+      </trans-unit>
+      <trans-unit id="s97d1b0070f50c07f">
+        <source>Static Tokens</source>
+        <target>Token statici</target>
+        
+      </trans-unit>
+      <trans-unit id="sb8168ae309c66abc">
+        <source>TOTP Authenticators</source>
+        <target>Autenticatori TOTP</target>
+        
+      </trans-unit>
+      <trans-unit id="sde47e4d8b9b21b59">
+        <source>WebAuthn Authenticators</source>
+        <target>Autenticatori WebAuthn</target>
+        
+      </trans-unit>
+      <trans-unit id="s8da88a8a5750bce1">
+        <source>Duo Authenticators</source>
+        <target>Autenticatori Duo</target>
+        
+      </trans-unit>
+      <trans-unit id="s4d182bae8a578010">
+        <source>SMS-based Authenticators</source>
+        <target>Autenticatori bassati su SMS</target>
+        
+      </trans-unit>
+      <trans-unit id="sd8d9451f86502d1a">
+        <source>Device classes which can be used to authenticate.</source>
+        <target>Classi di dispositivi che possono essere utilizzati per autenticare.</target>
+        
+      </trans-unit>
+      <trans-unit id="se2e9f5a32c93e5f7">
+        <source>Last validation threshold</source>
+        <target>Ultima soglia di convalida</target>
+        
+      </trans-unit>
+      <trans-unit id="s681074b6c1f19c08">
+        <source>Not configured action</source>
+        <target>Azione non configurata</target>
+        
+      </trans-unit>
+      <trans-unit id="sa2c29dc5ed47b26d">
+        <source>Force the user to configure an authenticator</source>
+        <target>Costringere l'utente a configurare un autenticatore</target>
+        
+      </trans-unit>
+      <trans-unit id="sa30c58514a3dc0fb">
+        <source>Deny the user access</source>
+        <target>Nega l'accesso utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s1e0de9c4f66dc371">
+        <source>WebAuthn User verification</source>
+        <target>Verifica utente WebAuthn</target>
+        
+      </trans-unit>
+      <trans-unit id="sdb7b2173869822bc">
+        <source>User verification must occur.</source>
+        <target>È necessario che venga effettuata la verifica dell'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7683363cdf78cf31">
+        <source>User verification is preferred if available, but not required.</source>
+        <target>La verifica dell'utente è preferita se disponibile, ma non richiesta.</target>
+        
+      </trans-unit>
+      <trans-unit id="scb43f5faeb6a7ca9">
+        <source>User verification should not occur.</source>
+        <target>La verifica dell'utente non dovrebbe verificarsi.</target>
+        
+      </trans-unit>
+      <trans-unit id="scae166352a31032c">
+        <source>Configuration stages</source>
+        <target>Configurazione fasi</target>
+        
+      </trans-unit>
+      <trans-unit id="s6941a67f0038ba4c">
+        <source>Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again.</source>
+        <target>Fase utilizzate per configurare Authenticator quando l'utente non ha dispositivi compatibili. Dopo questa fase di configurazione passa, all'utente non viene nuovamente richiesto.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7e5af9c6ba6f5cc6">
+        <source>When multiple stages are selected, the user can choose which one they want to enroll.</source>
+        <target>Quando vengono selezionate più fasi, l'utente può scegliere quale desidera iscriversi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s34b23ebbac9f6ab9">
+        <source>User verification</source>
+        <target>Verifica dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ea472b555374771">
+        <source>Resident key requirement</source>
+        <target>Richesta chiave residente</target>
+        
+      </trans-unit>
+      <trans-unit id="s5fbaeb14f42815e5">
+        <source>Authenticator Attachment</source>
+        <target>Allegato Autenticatore</target>
+        
+      </trans-unit>
+      <trans-unit id="s502d2473587032e1">
+        <source>No preference is sent</source>
+        <target>Nessuna preferenza viene inviata</target>
+        
+      </trans-unit>
+      <trans-unit id="s60cc554fde2676cb">
+        <source>A non-removable authenticator, like TouchID or Windows Hello</source>
+        <target>Un autenticatore non rimovibile, come TouchID o Windows Hello</target>
+        
+      </trans-unit>
+      <trans-unit id="sdf1d8edef27236f0">
+        <source>A &quot;roaming&quot; authenticator, like a YubiKey</source>
+        <target>Un autenticatore &quot;roaming&quot;, come un YubiKey</target>
+        
+      </trans-unit>
+      <trans-unit id="sfffba7b23d8fb40c">
+        <source>This stage checks the user's current session against the Google reCaptcha (or compatible) service.</source>
+        <target>Questa fase controlla la sessione corrente dell'utente rispetto al servizio Google Recaptcha (o compatibile).</target>
+        
+      </trans-unit>
+      <trans-unit id="sfd1af96798dd8a5f">
+        <source>Public Key</source>
+        <target>Chiave pubblica</target>
+        
+      </trans-unit>
+      <trans-unit id="sf339673f0f76a8bd">
+        <source>Public key, acquired from https://www.google.com/recaptcha/intro/v3.html.</source>
+        <target>Chiave pubblica, acquisita da https://www.google.com/recaptcha/intro/v3.html.</target>
+        
+      </trans-unit>
+      <trans-unit id="s83d0f62ad1731a03">
+        <source>Private Key</source>
+        <target>Chiave privata</target>
+        
+      </trans-unit>
+      <trans-unit id="s892d2731a6f22e59">
+        <source>Private key, acquired from https://www.google.com/recaptcha/intro/v3.html.</source>
+        <target>Chiave privata, acquisita da https://www.google.com/recaptcha/intro/v3.html.</target>
+        
+      </trans-unit>
+      <trans-unit id="scb6620fcd5bff04c">
+        <source>Advanced settings</source>
+        <target>Impostazioni avanzate</target>
+        
+      </trans-unit>
+      <trans-unit id="s39e436de1dc4df4f">
+        <source>JS URL</source>
+        <target>JS URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s170b705c55ecb2ae">
+        <source>URL to fetch JavaScript from, defaults to recaptcha. Can be replaced with any compatible alternative.</source>
+        <target>URL per recuperare javascript da, impostazione predefinita per recaptcha. Può essere sostituito con qualsiasi alternativa compatibile.</target>
+        
+      </trans-unit>
+      <trans-unit id="s275021658614ce9e">
+        <source>API URL</source>
+        <target>API URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sc8a79fddea3ab4a9">
+        <source>URL used to validate captcha response, defaults to recaptcha. Can be replaced with any compatible alternative.</source>
+        <target>URL usato per convalidare la risposta di Captcha, i valori predefiniti sono recaptcha. Può essere sostituito con qualsiasi alternativa compatibile.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1cd617e7bbe278d0">
+        <source>Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time.</source>
+        <target>Prompt per il consenso dell'utente. Il consenso può essere permanente o scadere in un periodo di tempo definito.</target>
+        
+      </trans-unit>
+      <trans-unit id="s26513c9dd154f041">
+        <source>Always require consent</source>
+        <target>Richiedi sempre il consenso</target>
+        
+      </trans-unit>
+      <trans-unit id="s8ce8bdc9cc9c8604">
+        <source>Consent given last indefinitely</source>
+        <target>Consenso dato l'ultimo indefinitamente</target>
+        
+      </trans-unit>
+      <trans-unit id="sb986f15fa9b17805">
+        <source>Consent expires.</source>
+        <target>Consenso scade.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6f328f2d8382d998">
+        <source>Consent expires in</source>
+        <target>Il consenso scade tra</target>
+        
+      </trans-unit>
+      <trans-unit id="se0c660020d9cf5b7">
+        <source>Offset after which consent expires.</source>
+        <target>Offset dopo di che il consenso scade.</target>
+        
+      </trans-unit>
+      <trans-unit id="s22b10ed263b96194">
+        <source>Dummy stage used for testing. Shows a simple continue button and always passes.</source>
+        <target>Stage fittizio utilizzato per i test. Mostra un semplice pulsante Continua e passa sempre.</target>
+        
+      </trans-unit>
+      <trans-unit id="sdb861d9906f18ac2">
+        <source>Throw error?</source>
+        <target>Lanciare errore?</target>
+        
+      </trans-unit>
+      <trans-unit id="s31ebc5431d677f5d">
+        <source>SMTP Host</source>
+        <target>Host SMTP</target>
+        
+      </trans-unit>
+      <trans-unit id="s289fce7e694b98ac">
+        <source>SMTP Port</source>
+        <target>Porta SMTP</target>
+        
+      </trans-unit>
+      <trans-unit id="se4a9da0295597e73">
+        <source>SMTP Username</source>
+        <target>Nome utente SMTP</target>
+        
+      </trans-unit>
+      <trans-unit id="s593db2c00d6516a2">
+        <source>SMTP Password</source>
+        <target>Password SMTP</target>
+        
+      </trans-unit>
+      <trans-unit id="s0d4268408182491d">
+        <source>Use TLS</source>
+        <target>Usa TLS</target>
+        
+      </trans-unit>
+      <trans-unit id="s480c6c40a248f7d2">
+        <source>Use SSL</source>
+        <target>Usa SSL</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1feadd25659c94d">
+        <source>From address</source>
+        <target>Da indirizzo</target>
+        
+      </trans-unit>
+      <trans-unit id="sa248e1021d2c27b5">
+        <source>Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity.</source>
+        <target>Verifica l'indirizzo e-mail dell'utente inviando loro un collegamento una tantum. Può anche essere utilizzato per il recupero per verificare l'autenticità dell'utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s87b7e3bc944c728c">
+        <source>Activate pending user on success</source>
+        <target>Attiva l'utente in sospeso sul successo</target>
+        
+      </trans-unit>
+      <trans-unit id="s9e9c8d99f4c26baf">
+        <source>When a user returns from the email successfully, their account will be activated.</source>
+        <target>Quando un utente ritorna correttamente dall'e -mail, il loro account verrà attivato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s618d4e53f455c834">
+        <source>Use global settings</source>
+        <target>Usa impostazioni globali</target>
+        
+      </trans-unit>
+      <trans-unit id="sae1e1a59d22609c4">
+        <source>When enabled, global Email connection settings will be used and connection settings below will be ignored.</source>
+        <target>Se abilitato, verranno utilizzate le impostazioni di connessione e -mail globali e le impostazioni di connessione di seguito verranno ignorate.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb1fe947f9ad27b9d">
+        <source>Token expiry</source>
+        <target>Scadenza token</target>
+        
+      </trans-unit>
+      <trans-unit id="s1c6ba8d100453392">
+        <source>Time in minutes the token sent is valid.</source>
+        <target>Il tempo in pochi minuti il ​​token inviato è valido.</target>
+        
+      </trans-unit>
+      <trans-unit id="se47baf2fd16b9d2b">
+        <source>Template</source>
+        <target>Modello</target>
+        
+      </trans-unit>
+      <trans-unit id="s4af8a3ce5a600855">
+        <source>Let the user identify themselves with their username or Email address.</source>
+        <target>Lascia che l'utente si identifichi con il proprio nome utente o indirizzo e -mail.</target>
+        
+      </trans-unit>
+      <trans-unit id="s592ab7d2bc1b8973">
+        <source>User fields</source>
+        <target>Campi utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s61e48919db20538a">
+        <source>UPN</source>
+        <target>UPN</target>
+        
+      </trans-unit>
+      <trans-unit id="s4cdae7635e757555">
+        <source>Fields a user can identify themselves with. If no fields are selected, the user will only be able to use sources.</source>
+        <target>Campi con cui un utente può identificarsi. Se non vengono selezionati campi, l'utente sarà in grado di utilizzare solo fonti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3380d7cbcebe50f6">
+        <source>Password stage</source>
+        <target>Fase password</target>
+        
+      </trans-unit>
+      <trans-unit id="s08c91cb1a2cd3d97">
+        <source>When selected, a password field is shown on the same page instead of a separate page. This prevents username enumeration attacks.</source>
+        <target>Quando selezionato, un campo password viene mostrato nella stessa pagina anziché una pagina separata. Ciò impedisce gli attacchi di enumerazione del nome utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd97d8d0906e6cc47">
+        <source>Case insensitive matching</source>
+        <target>Corrispondenza senza distinzione tra maiuscole e minuscole</target>
+        
+      </trans-unit>
+      <trans-unit id="s8aaad223e954f9ca">
+        <source>When enabled, user fields are matched regardless of their casing.</source>
+        <target>Se abilitato, i campi utente vengono abbinati indipendentemente dal loro involucro.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbab723b98dcfe23f">
+        <source>Show matched user</source>
+        <target>Mostra l'utente corrispondente</target>
+        
+      </trans-unit>
+      <trans-unit id="se50a08ab71bb96ed">
+        <source>When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown.</source>
+        <target>Quando è stato inserito un nome utente/e -mail valido e questa opzione è abilitata, verranno visualizzati il ​​nome utente e l'avatar dell'utente. Altrimenti, verrà visualizzato il testo che l'utente immesso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0295ce5d6f635d75">
+        <source>Source settings</source>
+        <target>Impostazioni sorgenti</target>
+        
+      </trans-unit>
+      <trans-unit id="s91e3a47599412f51">
+        <source>Sources</source>
+        <target>Sorgenti</target>
+        
+      </trans-unit>
+      <trans-unit id="s17a679298216aca9">
+        <source>Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP.</source>
+        <target>Selezionare le fonti devono essere mostrate per gli utenti con cui l'autenticazione. Ciò influisce solo sulle fonti basate sul Web, non LDAP.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa41aee3ae04c9216">
+        <source>Show sources' labels</source>
+        <target>Mostra le etichette di fonti</target>
+        
+      </trans-unit>
+      <trans-unit id="s54cd35e6224ba65d">
+        <source>By default, only icons are shown for sources. Enable this to show their full names.</source>
+        <target>Per impostazione predefinita, vengono mostrate solo le icone per le fonti. Abilita questa opzione per mostrare i loro nomi completi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ee20003cb116abf">
+        <source>Passwordless flow</source>
+        <target>Flusso passwordless</target>
+        
+      </trans-unit>
+      <trans-unit id="s0c8c4d2bb0a9162a">
+        <source>Optional passwordless flow, which is linked at the bottom of the page. When configured, users can use this flow to authenticate with a WebAuthn authenticator, without entering any details.</source>
+        <target>Flusso opzionale senza password, che è collegato in fondo alla pagina. Quando configurato, gli utenti possono usare questo flusso per autenticarsi con un autenticatore WebAuthn, senza immettere alcun dettaglio.</target>
+        
+      </trans-unit>
+      <trans-unit id="s01a3a7f48ee4edaf">
+        <source>Optional enrollment flow, which is linked at the bottom of the page.</source>
+        <target>Flusso di iscrizione facoltativo, il cui collegamento si trova in fondo alla pagina.</target>
+        
+      </trans-unit>
+      <trans-unit id="s82188c9542510212">
+        <source>Optional recovery flow, which is linked at the bottom of the page.</source>
+        <target>Flusso di recupero facoltativo, il cui collegamento si trova in fondo alla pagina.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3e59b8b2debf0209">
+        <source>This stage can be included in enrollment flows to accept invitations.</source>
+        <target>Questa fase può essere inclusa nei flussi di iscrizione per accettare gli inviti.</target>
+        
+      </trans-unit>
+      <trans-unit id="s79ad406777feab1f">
+        <source>Continue flow without invitation</source>
+        <target>Continua a flusso senza invito</target>
+        
+      </trans-unit>
+      <trans-unit id="s61ccefd661ac2296">
+        <source>If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given.</source>
+        <target>Se questa bandiera è impostata, questa fase salterà alla fase successiva quando non viene fornito alcun invito. Per impostazione predefinita, questa fase annullerà il flusso quando non viene fornito alcun invito.</target>
+        
+      </trans-unit>
+      <trans-unit id="sdc30bddeda2f0225">
+        <source>Validate the user's password against the selected backend(s).</source>
+        <target>Convalida la password dell'utente rispetto al backend selezionato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb8d4f44a1d5b9a14">
+        <source>Backends</source>
+        <target>Backends</target>
+        
+      </trans-unit>
+      <trans-unit id="sba42248f3f27955c">
+        <source>User database + standard password</source>
+        <target>Database utente + password standard</target>
+        
+      </trans-unit>
+      <trans-unit id="s3330adb3f0922f7b">
+        <source>User database + app passwords</source>
+        <target>Database utente + password dell'app</target>
+        
+      </trans-unit>
+      <trans-unit id="sc10db51c9bb77d5c">
+        <source>User database + LDAP password</source>
+        <target>Database utente + password LDAP</target>
+        
+      </trans-unit>
+      <trans-unit id="sd35ae4be63df1f9f">
+        <source>Selection of backends to test the password against.</source>
+        <target>Selezione di backend per testare la password contro.</target>
+        
+      </trans-unit>
+      <trans-unit id="s482ae78809a6822b">
+        <source>Flow used by an authenticated user to configure their password. If empty, user will not be able to configure change their password.</source>
+        <target>Flusso utilizzato da un utente autenticato per configurare la propria password. Se vuoto, l'utente non sarà in grado di configurare la modifica della password.</target>
+        
+      </trans-unit>
+      <trans-unit id="s77994108c886b965">
+        <source>Failed attempts before cancel</source>
+        <target>Tentativi non riusciti prima dell'annullamento</target>
+        
+      </trans-unit>
+      <trans-unit id="sa9020b93c3bd7235">
+        <source>How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage.</source>
+        <target>Quanti tentativi ha un utente prima che il flusso venga annullato. Per bloccare l'utente, utilizzare una politica di reputazione e una fase User_Write.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5170f9ef331949c0">
+        <source>Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable.</source>
+        <target>Mostra campi di input arbitrari all'utente, ad esempio durante l'iscrizione. I dati vengono salvati nel contesto di flusso nell'ambito della variabile &quot;prompt_data&quot;.</target>
+        
+      </trans-unit>
+      <trans-unit id="s36cb242ac90353bc">
+        <source>Fields</source>
+        <target>Campi</target>
+        
+      </trans-unit>
+      <trans-unit id="s3b7b519444181264">
+        <source>Validation Policies</source>
+        <target>Criteri di Validazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s59691290a232c687">
+        <source>Selected policies are executed when the stage is submitted to validate the data.</source>
+        <target>Le politiche selezionate vengono eseguite quando la fase viene inviata per convalidare i dati.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbf4ef82e04772a4e">
+        <source>Delete the currently pending user. CAUTION, this stage does not ask for confirmation. Use a consent stage to ensure the user is aware of their actions.</source>
+        <target>Elimina l'utente attualmente in sospeso. Attenzione, questa fase non chiede conferma. Utilizzare una fase di consenso per garantire che l'utente sia a conoscenza delle proprie azioni.</target>
+      </trans-unit>
+      <trans-unit id="s8cc920e6a8430a0d">
+        <source>Log the currently pending user in.</source>
+        <target>Registra l'utente attualmente in sospeso in.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb85ffe141d7c229d">
+        <source>Session duration</source>
+        <target>Durata della sessione</target>
+        
+      </trans-unit>
+      <trans-unit id="sece294cd51a85745">
+        <source>Determines how long a session lasts. Default of 0 seconds means that the sessions lasts until the browser is closed.</source>
+        <target>Determina quanto dura una sessione. Predefinito di 0 secondi significa che le sessioni durano fino alla chiusura del browser.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf7949fbbab2eb566">
+        <source>Different browsers handle session cookies differently, and might not remove them even when the browser is closed.</source>
+        <target>Diversi browser gestiscono i cookie di sessione in modo diverso e potrebbero non rimuoverli anche quando il browser è chiuso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s53bbc3ae4b5fa1d0">
+        <source>See here.</source>
+        <target>Guarda qui.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2512334108f06a5a">
+        <source>Stay signed in offset</source>
+        <target>Resta firmato in composizione</target>
+        
+      </trans-unit>
+      <trans-unit id="s1608b2f94fa0dbd4">
+        <source>If set to a duration above 0, the user will have the option to choose to &quot;stay signed in&quot;, which will extend their session by the time specified here.</source>
+        <target>Se impostato su una durata superiore a 0, l'utente avrà la possibilità di scegliere di &quot;rimanere firmato&quot;, che estenderà la sessione entro il momento specificato qui.</target>
+        
+      </trans-unit>
+      <trans-unit id="s542a71bb8f41e057">
+        <source>Terminate other sessions</source>
+        <target>Terminare altre sessioni</target>
+        
+      </trans-unit>
+      <trans-unit id="sa920231366378c90">
+        <source>When enabled, all previous sessions of the user will be terminated.</source>
+        <target>Se abilitato, tutte le sessioni precedenti dell'utente verranno terminate.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfee06600c15082a9">
+        <source>Remove the user from the current session.</source>
+        <target>Rimuovere l'utente dalla sessione corrente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s927398c400970760">
+        <source>Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user
+        is pending, a new user is created, and data is written to them.</source>
+        <target>Scrivi qualsiasi dati dal contesto del flusso &quot;prompt_data&quot; all'utente attualmente in sospeso. Se nessun utente
+ è in sospeso, viene creato un nuovo utente e vengono scritti dati.</target>
+      </trans-unit>
+      <trans-unit id="sb379d861cbed0b47">
+        <source>Never create users</source>
+        <target>Non creare mai utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="s81d673755a86a4f0">
+        <source>When no user is present in the flow context, the stage will fail.</source>
+        <target>Quando nessun utente è presente nel contesto del flusso, lo stadio fallirà.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9940e3f073fbdbd4">
+        <source>Create users when required</source>
+        <target>Creare utenti quando richiesto</target>
+        
+      </trans-unit>
+      <trans-unit id="s5414356cc10e80fe">
+        <source>When no user is present in the the flow context, a new user is created.</source>
+        <target>Quando non è presente alcun utente nel contesto del flusso, viene creato un nuovo utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s57337099d96ce6d2">
+        <source>Always create new users</source>
+        <target>Creare sempre nuovi utenti</target>
+        
+      </trans-unit>
+      <trans-unit id="se80dd66f23b4fc39">
+        <source>Create a new user even if a user is in the flow context.</source>
+        <target>Crea un nuovo utente anche se un utente è nel contesto di flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sed3512fe4560c7f4">
+        <source>Create users as inactive</source>
+        <target>Creare utenti come inattivi</target>
+        
+      </trans-unit>
+      <trans-unit id="s9193ef1a39a6c872">
+        <source>Mark newly created users as inactive.</source>
+        <target>Segna i nuovi utenti come inattivi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s89d1847b5e4ad225">
+        <source>User path template</source>
+        <target>Modello percorso utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s18269e3889d6fa54">
+        <source>Path new users will be created under. If left blank, the default path will be used.</source>
+        <target>Percorso verranno creati nuovi utenti. Se lasciato vuoto, verrà utilizzato il percorso predefinito.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1cb0eef9ed94e6a">
+        <source>Newly created users are added to this group, if a group is selected.</source>
+        <target>Gli utenti appena creati vengono aggiunti a questo gruppo, se viene selezionato un gruppo.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd8417b41ca27bc8f">
+        <source>New stage</source>
+        <target>Nuova fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s293801033f9fc0d0">
+        <source>Create a new stage.</source>
+        <target>Crea una nuova fase.</target>
+        
+      </trans-unit>
+      <trans-unit id="s71633a67e0d7c0e4">
+        <source>Successfully imported device.</source>
+        <target>Dispositivo importato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7d61705dfb120d7b">
+        <source>The user in authentik this device will be assigned to.</source>
+        <target>L'utente in autencik questo dispositivo verrà assegnato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s5eaf1d304e03ed4b">
+        <source>Duo User ID</source>
+        <target>Duo User ID</target>
+        
+      </trans-unit>
+      <trans-unit id="s003847d8bc01c676">
+        <source>The user ID in Duo, can be found in the URL after clicking on a user.</source>
+        <target>L'ID utente in duo è disponibile nell'URL dopo aver fatto clic su un utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbbc806ea3987c781">
+        <source>Automatic import</source>
+        <target>Importazione automatica</target>
+        
+      </trans-unit>
+      <trans-unit id="s77299a9d3dd932cd">
+        <source>Successfully imported <x id="0" equiv-text="${res.count}"/> devices.</source>
+        <target>Importati con successo
+        <x id="0" equiv-text="${res.count}"/> dispositivi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6a615f6165ef01c9">
+        <source>Start automatic import</source>
+        <target>Iniziare l'importazione automatica</target>
+        
+      </trans-unit>
+      <trans-unit id="s9f83d7768aea548a">
+        <source>Or manually import</source>
+        <target>O importa manualmente</target>
+        
+      </trans-unit>
+      <trans-unit id="sddc8efe94cb8c210">
+        <source>Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow.</source>
+        <target>Le fasi sono singoli passaggi di un flusso su cui un utente è guidato. Una fase può essere eseguita solo all'interno di un flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb69a4b0acd0895f2">
+        <source>Flows</source>
+        <target>Flussi</target>
+        
+      </trans-unit>
+      <trans-unit id="s0eaf755fa88c8d97">
+        <source>Stage(s)</source>
+        <target>Fase(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s3914cb410fca44d4">
+        <source>Import</source>
+        <target>Importa</target>
+        
+      </trans-unit>
+      <trans-unit id="s8a67b33a0d70d322">
+        <source>Import Duo device</source>
+        <target>Importa dispositivo Duo</target>
+        
+      </trans-unit>
+      <trans-unit id="s48cf8fd56b1237ed">
+        <source>Successfully updated flow.</source>
+        <target>Aggiornato con successo il flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc3e0c240b159fbce">
+        <source>Successfully created flow.</source>
+        <target>Creato con successo il flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s925936f647ae52cc">
+        <source>Shown as the Title in Flow pages.</source>
+        <target>Mostrato come titolo nelle pagine di flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s50719dda8f90abf4">
+        <source>Visible in the URL.</source>
+        <target>Visibile nell'URL.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0f4c6540c30bd8b4">
+        <source>Designation</source>
+        <target>Designazione</target>
+        
+      </trans-unit>
+      <trans-unit id="sb25d9afe10941425">
+        <source>Decides what this Flow is used for. For example, the Authentication flow is redirect to when an un-authenticated user visits authentik.</source>
+        <target>Decide a cosa serve questo flusso. Ad esempio, il flusso di autenticazione viene reindirizzato a quando un utente non autenticato visita Authenk.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb36e4c05244278c1">
+        <source>No requirement</source>
+        <target>Nessun requisito</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b105164d209f670">
+        <source>Require authentication</source>
+        <target>Richiedere l'autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s239c2a351cde6d39">
+        <source>Require no authentication.</source>
+        <target>Richiedere nessuna autenticazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s98beadfeeb3acb66">
+        <source>Require superuser.</source>
+        <target>Richiedi superutente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfad9279cc42c6b61">
+        <source>Required authentication level for this flow.</source>
+        <target>Livello di autenticazione richiesto per questo flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb56674c9ea4f0588">
+        <source>Behavior settings</source>
+        <target>Impostazioni del comportamento</target>
+        
+      </trans-unit>
+      <trans-unit id="sb6d7d58cb0a1544e">
+        <source>Compatibility mode</source>
+        <target>Modalità di compatibilità</target>
+        
+      </trans-unit>
+      <trans-unit id="s14ace18ccf4fb86d">
+        <source>Increases compatibility with password managers and mobile devices.</source>
+        <target>Aumenta la compatibilità con i gestori di password e i dispositivi mobili.</target>
+        
+      </trans-unit>
+      <trans-unit id="scfbc2f1396ee8550">
+        <source>Denied action</source>
+        <target>Azione negata</target>
+        
+      </trans-unit>
+      <trans-unit id="sff38031cf061e3ae">
+        <source>Will follow the ?next parameter if set, otherwise show a message</source>
+        <target>Seguirà il parametro successivo se impostato, altrimenti mostra un messaggio</target>
+        
+      </trans-unit>
+      <trans-unit id="s936bf4342b182ad4">
+        <source>Will either follow the ?next parameter or redirect to the default interface</source>
+        <target>Seguirà il parametro successivo o reindirizza all'interfaccia predefinita</target>
+        
+      </trans-unit>
+      <trans-unit id="s22b0e8c5277dd5a9">
+        <source>Will notify the user the flow isn't applicable</source>
+        <target>Notificherà all'utente il flusso non è applicabile</target>
+        
+      </trans-unit>
+      <trans-unit id="s2eeca5cfc99ef19b">
+        <source>Decides the response when a policy denies access to this flow for a user.</source>
+        <target>Decide la risposta quando una politica nega l'accesso a questo flusso per un utente.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbaf20067de176c90">
+        <source>Appearance settings</source>
+        <target>Impostazioni di visualizzazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s2e4818861000b13f">
+        <source>Layout</source>
+        <target>Layout</target>
+        
+      </trans-unit>
+      <trans-unit id="s1efbfc3937d565bd">
+        <source>Background</source>
+        <target>Sfondo</target>
+        
+      </trans-unit>
+      <trans-unit id="s374abf1a54d87b67">
+        <source>Background shown during execution.</source>
+        <target>Sfondo mostrato durante l'esecuzione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3ebf4c166058afce">
+        <source>Clear background</source>
+        <target>Pulisci sfondo</target>
+        
+      </trans-unit>
+      <trans-unit id="sb24755ea94bef31d">
+        <source>Delete currently set background image.</source>
+        <target>Elimina l'immagine di sfondo attualmente impostata.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb904f23f17b60c3a">
+        <source>Successfully imported flow.</source>
+        <target>Importazione del flusso riuscita.</target>
+        
+      </trans-unit>
+      <trans-unit id="s344c4a2a48997e18">
+        <source>.yaml files, which can be found on goauthentik.io and can be exported by authentik.</source>
+        <target>.yaml Files, che possono essere trovati su goauthentik.io e possono essere esportati da Authenk.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc816360d6f5a1eeb">
+        <source>Flows describe a chain of Stages to authenticate, enroll or recover a user. Stages are chosen based on policies applied to them.</source>
+        <target>I flussi descrivono una catena di fasi per autenticare, iscrivere o recuperare un utente. Le fasi vengono scelte in base alle politiche applicate a loro.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6f857299d5db1ecf">
+        <source>Flow(s)</source>
+        <target>Flusso(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s9e830cbc0b42a514">
+        <source>Update Flow</source>
+        <target>Aggiorna Flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s2f1bcfcc5cae94c3">
+        <source>Create Flow</source>
+        <target>Crea Flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s832282d415294df4">
+        <source>Import Flow</source>
+        <target>Importa Flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s098237f7ccb4dc4a">
+        <source>Successfully cleared flow cache</source>
+        <target>Cache di flusso cancellata con successo</target>
+        
+      </trans-unit>
+      <trans-unit id="s59572c1be31a812e">
+        <source>Failed to delete flow cache</source>
+        <target>Impossibile eliminare la cache di flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="sa2b727168b090d34">
+        <source>Clear Flow cache</source>
+        <target>Pulisci cache flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="sf12d588a76ba7e51">
+        <source>Are you sure you want to clear the flow cache?
+            This will cause all flows to be re-evaluated on their next usage.</source>
+        <target>Sei sicuro di voler cancellare la cache del flusso?
+ Ciò causerà la rivalutazione di tutti i flussi al loro prossimo utilizzo.</target>
+      </trans-unit>
+      <trans-unit id="sbe47a5bdeec19ab0">
+        <source>Stage binding(s)</source>
+        <target>Associazione(i) fase</target>
+        
+      </trans-unit>
+      <trans-unit id="sfa88f413e287bb0f">
+        <source>Stage type</source>
+        <target>Tipo fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s04440099d97c0bef">
+        <source>Edit Stage</source>
+        <target>Modifica Fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s980270d0fab7ecb3">
+        <source>Update Stage binding</source>
+        <target>Aggiorna Associazione fase</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe938c1585e0bf68">
+        <source>These bindings control if this stage will be applied to the flow.</source>
+        <target>Questi legami controllano se questa fase verrà applicata al flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sfac6f995c7670559">
+        <source>No Stages bound</source>
+        <target>Nessuna fase associata</target>
+        
+      </trans-unit>
+      <trans-unit id="s955c1fec1c6fb970">
+        <source>No stages are currently bound to this flow.</source>
+        <target>Al momento non sono presenti fasi associate a questo flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9a393a04eaf1eb0e">
+        <source>Create Stage binding</source>
+        <target>Crea associazione di fase</target>
+        
+      </trans-unit>
+      <trans-unit id="scc2e420c54dc8089">
+        <source>Bind existing stage</source>
+        <target>Associa la fase esistente</target>
+        
+      </trans-unit>
+      <trans-unit id="s30d1f50f476c3f48">
+        <source>Flow Overview</source>
+        <target>Panoramica del flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s77099d752f1ab773">
+        <source>Related actions</source>
+        <target>Azioni correlate</target>
+        
+      </trans-unit>
+      <trans-unit id="sd07866d9f38b2c50">
+        <source>Execute flow</source>
+        <target>Esegui flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ff3121d30f88d52">
+        <source>Normal</source>
+        <target>Normale</target>
+        
+      </trans-unit>
+      <trans-unit id="s6e4c997a101b6abf">
+        <source>with current user</source>
+        <target>con utente corrente</target>
+        
+      </trans-unit>
+      <trans-unit id="s8ecdbff1a7329b64">
+        <source>with inspector</source>
+        <target>con ispettore</target>
+        
+      </trans-unit>
+      <trans-unit id="s3576aead3e68c5c9">
+        <source>Export flow</source>
+        <target>Esportazione flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s293aa6a6446fb153">
+        <source>Export</source>
+        <target>Esportazione</target>
+        
+      </trans-unit>
+      <trans-unit id="se2c3cbf2ed1403f1">
+        <source>Stage Bindings</source>
+        <target>Associazione Fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s78c08391ffbfb8c0">
+        <source>These bindings control which users can access this flow.</source>
+        <target>Queste associzioni controllano quali utenti possono accedere a questo flusso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1a1ff47c058bb09">
+        <source>Event Log</source>
+        <target>Registro eventi</target>
+        
+      </trans-unit>
+      <trans-unit id="s65d67612999165e9">
+        <source>Event <x id="0" equiv-text="${this.event.pk}"/></source>
+        <target>Evento
+        <x id="0" equiv-text="${this.event.pk}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s455de2f740b073fd">
+        <source>Event info</source>
+        <target>Info Evento</target>
+        
+      </trans-unit>
+      <trans-unit id="sb41b2cfbbc52565b">
+        <source>Created</source>
+        <target>Creato</target>
+        
+      </trans-unit>
+      <trans-unit id="s037bc6d25a03c3c8">
+        <source>Successfully updated transport.</source>
+        <target>Aggiornato con successo il trasporto.</target>
+        
+      </trans-unit>
+      <trans-unit id="s1575a15cee001915">
+        <source>Successfully created transport.</source>
+        <target>Creato con successo il trasporto.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4acf840bc792c3ae">
+        <source>Local (notifications will be created within authentik)</source>
+        <target>Local (le notifiche verranno create all'interno di authentik)</target>
+        
+      </trans-unit>
+      <trans-unit id="sede0abbf2b612812">
+        <source>Webhook (generic)</source>
+        <target>Webhook (generico)</target>
+        
+      </trans-unit>
+      <trans-unit id="s76f5dca6404a1210">
+        <source>Webhook (Slack/Discord)</source>
+        <target>Webhook (Slack/Discord)</target>
+        
+      </trans-unit>
+      <trans-unit id="s6873bdbfa24615fb">
+        <source>Webhook URL</source>
+        <target>Webhook URL</target>
+        
+      </trans-unit>
+      <trans-unit id="s25ec2846f6b88214">
+        <source>Webhook Mapping</source>
+        <target>Webhook Mapping</target>
+        
+      </trans-unit>
+      <trans-unit id="sca2879d96f58a39c">
+        <source>Send once</source>
+        <target>Invia una volta</target>
+        
+      </trans-unit>
+      <trans-unit id="s2430e000b7cfefd0">
+        <source>Only send notification once, for example when sending a webhook into a chat channel.</source>
+        <target>Invia una notifica solo una volta, ad esempio quando si invia un webhook in un canale di chat.</target>
+        
+      </trans-unit>
+      <trans-unit id="s819509c33a7534ac">
+        <source>Notification Transports</source>
+        <target>Notifiche di trasporto</target>
+        
+      </trans-unit>
+      <trans-unit id="s57072ffb92b6c9c8">
+        <source>Define how notifications are sent to users, like Email or Webhook.</source>
+        <target>Definire come vengono inviate le notifiche agli utenti, come e -mail o webhook.</target>
+        
+      </trans-unit>
+      <trans-unit id="s624256f8a4bb4c89">
+        <source>Notification transport(s)</source>
+        <target>Notifica trasporto(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="sac1332e6f421526e">
+        <source>Update Notification Transport</source>
+        <target>Aggiorna trasporto di notifica</target>
+        
+      </trans-unit>
+      <trans-unit id="s6b5002c605b39d6d">
+        <source>Create Notification Transport</source>
+        <target>Creare trasporto di notifica</target>
+        
+      </trans-unit>
+      <trans-unit id="s0a39e4f61ccafacb">
+        <source>Successfully updated rule.</source>
+        <target>Aggiornato con successo la regola.</target>
+        
+      </trans-unit>
+      <trans-unit id="s72e102414fec81a4">
+        <source>Successfully created rule.</source>
+        <target>Creato con successo la regola.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa55ee64c5c51df0f">
+        <source>Select the group of users which the alerts are sent to. If no group is selected the rule is disabled.</source>
+        <target>Seleziona il gruppo di utenti a cui vengono inviati gli avvisi. Se non viene selezionato alcun gruppo, la regola è disabilitata.</target>
+        
+      </trans-unit>
+      <trans-unit id="sffa171e11d4ae513">
+        <source>Transports</source>
+        <target>Trasporti</target>
+        
+      </trans-unit>
+      <trans-unit id="s7b18721be331241e">
+        <source>Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI.</source>
+        <target>Selezionare quali trasporti dovrebbero essere utilizzati per avvisare l'utente. Se nessuno è selezionato, la notifica verrà mostrata solo nell'interfaccia utente di Authenk.</target>
+        
+      </trans-unit>
+      <trans-unit id="scd0cfe87af6f2ff2">
+        <source>Severity</source>
+        <target>Gravità</target>
+        
+      </trans-unit>
+      <trans-unit id="s98c3bdf4fd5cdf65">
+        <source>Notification Rules</source>
+        <target>Regole di notifica</target>
+        
+      </trans-unit>
+      <trans-unit id="s107bf77afb93c9b8">
+        <source>Send notifications whenever a specific Event is created and matched by policies.</source>
+        <target>Invia notifiche ogni volta che un evento specifico viene creato e abbinato dalle politiche.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf3f9a0feaf083207">
+        <source>Sent to group</source>
+        <target>Inviato al gruppo</target>
+        
+      </trans-unit>
+      <trans-unit id="sc92ed9d5e01d3f24">
+        <source>Notification rule(s)</source>
+        <target>Regola(e) di notifica</target>
+        
+      </trans-unit>
+      <trans-unit id="s5140d157642d7362">
+        <source>None (rule disabled)</source>
+        <target>Nessuno (regola disattivata)</target>
+        
+      </trans-unit>
+      <trans-unit id="sd1146418b344f81f">
+        <source>Update Notification Rule</source>
+        <target>Aggiorna regola di notifica</target>
+        
+      </trans-unit>
+      <trans-unit id="sbbc1de43ab6c1f76">
+        <source>Create Notification Rule</source>
+        <target>Crea regola di notifica</target>
+        
+      </trans-unit>
+      <trans-unit id="s5795b310ab271d20">
+        <source>These bindings control upon which events this rule triggers.
+Bindings to groups/users are checked against the user of the event.</source>
+        <target>Questi legami controllano quali eventi questa regola innesca.
+ I binding a gruppi/utenti vengono controllati contro l'utente dell'evento.</target>
+      </trans-unit>
+      <trans-unit id="s90c3b62194fe8508">
+        <source>Outpost Deployment Info</source>
+        <target>Info Deployment Avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="s35f9df7668d5fa79">
+        <source>View deployment documentation</source>
+        <target>Visualizza la documentazione di distribuzione</target>
+        
+      </trans-unit>
+      <trans-unit id="sad09c62cb4ebae68">
+        <source>Click to copy token</source>
+        <target>Clicca per copiare il token</target>
+        
+      </trans-unit>
+      <trans-unit id="s0e03fe2dc5b9164b">
+        <source>If your authentik Instance is using a self-signed certificate, set this value.</source>
+        <target>Se l'istanza Authenk sta utilizzando un certificato autofirmato, impostare questo valore.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc21032b0d37882a0">
+        <source>If your authentik_host setting does not match the URL you want to login with, add this setting.</source>
+        <target>Se l'impostazione AUTHENK_HOST non corrisponde all'URL con cui si desidera accedere, aggiungi questa impostazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6f270e1668c036e9">
+        <source>Successfully updated outpost.</source>
+        <target>Avamposto aggiornato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s79aed8154d7c472c">
+        <source>Successfully created outpost.</source>
+        <target>Avamposto creato con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8afc8c5aafb392d3">
+        <source>Radius</source>
+        <target>Radius</target>
+        
+      </trans-unit>
+      <trans-unit id="s03970aa76a09982d">
+        <source>Integration</source>
+        <target>Integrazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s9c29565c5ae1cc92">
+        <source>Selecting an integration enables the management of the outpost by authentik.</source>
+        <target>La selezione di un'integrazione consente la gestione dell'autospost di Authenk.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf9b1c0661a02d9f9">
+        <source>Configuration</source>
+        <target>Configurazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s3abecf1e778c9625">
+        <source>See more here:</source>
+        <target>Vedi di più qui:</target>
+        
+      </trans-unit>
+      <trans-unit id="s74cb3d66f6a668e1">
+        <source>Documentation</source>
+        <target>Documentazione</target>
+        
+      </trans-unit>
+      <trans-unit id="saa8939ac88a76f98">
+        <source>Last seen</source>
+        <target>Ultima volta visto</target>
+        
+      </trans-unit>
+      <trans-unit id="s1ac2653a6492b435">
+        <source><x id="0" equiv-text="${this.outpostHealth.version}"/>, should be <x id="1" equiv-text="${this.outpostHealth.versionShould}"/></source>
+        <target>, dovrebbe essere</target>
+        
+      </trans-unit>
+      <trans-unit id="s1e176e35c828318c">
+        <source>Hostname</source>
+        <target>Hostname</target>
+        
+      </trans-unit>
+      <trans-unit id="s322e34cfcba47155">
+        <source>Not available</source>
+        <target>Non disponibile</target>
+        
+      </trans-unit>
+      <trans-unit id="sa43153d53ae65063">
+        <source>Unknown type</source>
+        <target>Tipo sconosciuto</target>
+        
+      </trans-unit>
+      <trans-unit id="s5e169e1bac20b4a6">
+        <source>Outposts</source>
+        <target>Avamposti</target>
+        
+      </trans-unit>
+      <trans-unit id="s8802553bc57617ee">
+        <source>Outposts are deployments of authentik components to support different environments and protocols, like reverse proxies.</source>
+        <target>Gli avamposti sono distribuzioni di componenti autencik per supportare diversi ambienti e protocolli, come i proxy inversi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s84d7d6ebbedcb586">
+        <source>Health and Version</source>
+        <target>Salute e Versione</target>
+        
+      </trans-unit>
+      <trans-unit id="s9bf48a89367282cd">
+        <source>Warning: authentik Domain is not configured, authentication will not work.</source>
+        <target>Attenzione: il dominio authentik non è configurato, l'autenticazione non funzionerà.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbf5f4c5ba679e847">
+        <source>Logging in via <x id="0" equiv-text="${item.config.authentik_host}"/>.</source>
+        <target>Accesso con
+        <x id="0" equiv-text="${item.config.authentik_host}"/>.</target>
+        
+      </trans-unit>
+      <trans-unit id="s59b6028f19d15cda">
+        <source>No integration active</source>
+        <target>Nessuna integrazione attiva</target>
+        
+      </trans-unit>
+      <trans-unit id="s9bd59e0ea70a3e4a">
+        <source>Update Outpost</source>
+        <target>Aggiorna avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="sc8f286ac783c385d">
+        <source>View Deployment Info</source>
+        <target>Visualizza info Deployment</target>
+        
+      </trans-unit>
+      <trans-unit id="s9ee92717d7f63247">
+        <source>Detailed health (one instance per column, data is cached so may be out of date)</source>
+        <target>Salute dettagliata (un'istanza per colonna, i dati sono memorizzati nella cache, quindi potrebbe essere obsoleto)</target>
+        
+      </trans-unit>
+      <trans-unit id="s1d49ec5030447643">
+        <source>Outpost(s)</source>
+        <target>Avamposto(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s1a2f8f4b3861583b">
+        <source>Create Outpost</source>
+        <target>Crea avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="sdc1ef94016f0d855">
+        <source>Successfully updated integration.</source>
+        <target>Aggiornato con successo l'integrazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2a1a40a1b4b0170">
+        <source>Successfully created integration.</source>
+        <target>Creato con successo l'integrazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="se9b1fec72ffd8f48">
+        <source>Local</source>
+        <target>Locale</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1231049879b8d33">
+        <source>If enabled, use the local connection. Required Docker socket/Kubernetes Integration.</source>
+        <target>Se abilitato, utilizzare la connessione locale. Integrazione Docker Cocket Docker/Kubernetes.</target>
+        
+      </trans-unit>
+      <trans-unit id="s13de04774ff0f210">
+        <source>Docker URL</source>
+        <target>Docker URL</target>
+        
+      </trans-unit>
+      <trans-unit id="sa7fcf026bd25f231">
+        <source>Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system.</source>
+        <target>Può essere nel formato 'unix://' quando si connette a un demone Docker locale, utilizzando 'ssh://' per connettersi tramite SSH o 'https://:2376' quando si connette a un sistema remoto.</target>
+        
+      </trans-unit>
+      <trans-unit id="saf1d289e3137c2ea">
+        <source>CA which the endpoint's Certificate is verified against. Can be left empty for no validation.</source>
+        <target>CA su cui viene verificato il certificato dell'endpoint. Può essere lasciato vuoto per nessuna convalida.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0f2e070d38cd36df">
+        <source>TLS Authentication Certificate/SSH Keypair</source>
+        <target>Certificato di autenticazione TLS/KEYPAIR SSH</target>
+        
+      </trans-unit>
+      <trans-unit id="s2f58bb9905d2b76f">
+        <source>Certificate/Key used for authentication. Can be left empty for no authentication.</source>
+        <target>Certificato/chiave utilizzato per l'autenticazione. Può essere lasciato vuoto per nessuna autenticazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8b33660e2ed7212c">
+        <source>When connecting via SSH, this keypair is used for authentication.</source>
+        <target>Quando si collega tramite SSH, questa tastiera viene utilizzata per l'autenticazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa668bd79645c3e06">
+        <source>Kubeconfig</source>
+        <target>Kubeconfig</target>
+        
+      </trans-unit>
+      <trans-unit id="sa85cfb884c17d85d">
+        <source>Verify Kubernetes API SSL Certificate</source>
+        <target>Verifica certificato SSL API Kubernetes</target>
+        
+      </trans-unit>
+      <trans-unit id="se78364ee913ae2bd">
+        <source>New outpost integration</source>
+        <target>Nuova integrazione avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="s68d69ad0271c8ef6">
+        <source>Create a new outpost integration.</source>
+        <target>Crea una nuova integrazione avamposto.</target>
+        
+      </trans-unit>
+      <trans-unit id="sae239213b7c70376">
+        <source>State</source>
+        <target>Stato</target>
+        
+      </trans-unit>
+      <trans-unit id="sb96629f50f2e7fab">
+        <source>Unhealthy</source>
+        <target>Non sano</target>
+        
+      </trans-unit>
+      <trans-unit id="sa8e255492bb6ae0d">
+        <source>Outpost integration(s)</source>
+        <target>Integrazione(i) avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="s9d18948d25c68d66">
+        <source>Successfully generated certificate-key pair.</source>
+        <target>Generato con successo il certificato-chiave.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd4ac926e4ebb1cd7">
+        <source>Common Name</source>
+        <target>Common Name</target>
+        
+      </trans-unit>
+      <trans-unit id="s592425143c4f5834">
+        <source>Subject-alt name</source>
+        <target>Subject-alt name</target>
+        
+      </trans-unit>
+      <trans-unit id="se9d0f12f95b14095">
+        <source>Optional, comma-separated SubjectAlt Names.</source>
+        <target>Opzionale, nomi SubjectAlt separati da virgola.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7609ee54e8a7b05a">
+        <source>Validity days</source>
+        <target>Giorni di validità</target>
+        
+      </trans-unit>
+      <trans-unit id="s4c24b2baa377e870">
+        <source>Successfully updated certificate-key pair.</source>
+        <target>Aggiornata con successo la coppia certificato-chiave.</target>
+        
+      </trans-unit>
+      <trans-unit id="s122f308b5f198ba7">
+        <source>Successfully created certificate-key pair.</source>
+        <target>Creato con successo il certificato-chiave.</target>
+        
+      </trans-unit>
+      <trans-unit id="s08a8716c214a0efb">
+        <source>PEM-encoded Certificate data.</source>
+        <target>Dati del certificato codificato PEM.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6e612e5a6a359bbb">
+        <source>Optional Private Key. If this is set, you can use this keypair for encryption.</source>
+        <target>Chiave privata opzionale. Se impostata, puoi utilizzare questa coppia di chiavi per la crittografia.</target>
+        
+      </trans-unit>
+      <trans-unit id="s27ac7a47b390e3cb">
+        <source>Certificate-Key Pairs</source>
+        <target>Coppie di certificato-chiave</target>
+        
+      </trans-unit>
+      <trans-unit id="sb72ebab438cb2983">
+        <source>Import certificates of external providers or create certificates to sign requests with.</source>
+        <target>Importa certificati di fornitori esterni o crea certificati per firmare le richieste con.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4b5af7736aedd6c1">
+        <source>Private key available?</source>
+        <target>Chiave privata è disponibile?</target>
+        
+      </trans-unit>
+      <trans-unit id="s1d6e16d86961c782">
+        <source>Certificate-Key Pair(s)</source>
+        <target>Coppia(e) Certificato-Chiave</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1ce2f758935ff48">
+        <source>Managed by authentik</source>
+        <target>Gestito da authentik</target>
+        
+      </trans-unit>
+      <trans-unit id="sf53a78d889b6c775">
+        <source>Managed by authentik (Discovered)</source>
+        <target>Gestito da authentik (Scoperto)</target>
+        
+      </trans-unit>
+      <trans-unit id="sef50d248448e0df1">
+        <source>Yes (<x id="0" equiv-text="${item.privateKeyType?.toUpperCase()}"/>)</source>
+        <target>Sì (
+        <x id="0" equiv-text="${item.privateKeyType?.toUpperCase()}"/>)</target>
+        
+      </trans-unit>
+      <trans-unit id="s09205907b5b56cda">
+        <source>No</source>
+        <target>No</target>
+        
+      </trans-unit>
+      <trans-unit id="s33aa05f435c29753">
+        <source>Update Certificate-Key Pair</source>
+        <target>Aggiorna la coppia Certificato-Chiave</target>
+        
+      </trans-unit>
+      <trans-unit id="seffdf887fed7f668">
+        <source>Certificate Fingerprint (SHA1)</source>
+        <target>Fingerprint Certificato (SHA1)</target>
+        
+      </trans-unit>
+      <trans-unit id="sdd6b8b56a811080e">
+        <source>Certificate Fingerprint (SHA256)</source>
+        <target>Fingerprint Certificato (SHA256)</target>
+        
+      </trans-unit>
+      <trans-unit id="s2a2d3e7c379e9518">
+        <source>Certificate Subject</source>
+        <target>Soggetto del certificato</target>
+        
+      </trans-unit>
+      <trans-unit id="s351246c52548086a">
+        <source>Download Certificate</source>
+        <target>Scarica Certificato</target>
+        
+      </trans-unit>
+      <trans-unit id="s47bd537a3bcebf19">
+        <source>Download Private key</source>
+        <target>Scarica chiave privata</target>
+        
+      </trans-unit>
+      <trans-unit id="s3a5fec3d73ac9edc">
+        <source>Create Certificate-Key Pair</source>
+        <target>Creare coppia certificato-chiave</target>
+        
+      </trans-unit>
+      <trans-unit id="s45cb501abd43ba52">
+        <source>Generate</source>
+        <target>Genera</target>
+        
+      </trans-unit>
+      <trans-unit id="sf9bddaf910f4eea5">
+        <source>Generate Certificate-Key Pair</source>
+        <target>Genera coppia certificato-chiave</target>
+        
+      </trans-unit>
+      <trans-unit id="see2bcbc11bb91960">
+        <source>Successfully updated instance.</source>
+        <target>Istanza caricata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9e51d6de369f320b">
+        <source>Successfully created instance.</source>
+        <target>Istanza creata con successo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s92e91071c6a45eb4">
+        <source>Disabled blueprints are never applied.</source>
+        <target>I progetti disabili non vengono mai applicati.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf63c89c0604c288f">
+        <source>Local path</source>
+        <target>Percorso locale</target>
+        
+      </trans-unit>
+      <trans-unit id="sd6422f7004036cdd">
+        <source>OCI Registry</source>
+        <target>Registro OCI</target>
+        
+      </trans-unit>
+      <trans-unit id="se2d65e13768468e0">
+        <source>Internal</source>
+        <target>Interno</target>
+        
+      </trans-unit>
+      <trans-unit id="scbb7d3154da629f3">
+        <source>OCI URL, in the format of oci://registry.domain.tld/path/to/manifest.</source>
+        <target>OCI URL, nel formato di OCI: //registry.domain.tld/path/to/Manifest.</target>
+        
+      </trans-unit>
+      <trans-unit id="s0195c0df7294228a">
+        <source>See more about OCI support here:</source>
+        <target>Vedi di più sul supporto OCI qui:</target>
+        
+      </trans-unit>
+      <trans-unit id="sfae395b94a5a0040">
+        <source>Blueprint</source>
+        <target>Progetto</target>
+        
+      </trans-unit>
+      <trans-unit id="s7e1342d37124b65b">
+        <source>Configure the blueprint context, used for templating.</source>
+        <target>Configurare il contesto del progetto, utilizzato per il modello.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6ec8c9d11310300a">
+        <source>Orphaned</source>
+        <target>Orfano</target>
+        
+      </trans-unit>
+      <trans-unit id="saab79cd956ee56a9">
+        <source>Blueprints</source>
+        <target>Progetti</target>
+        
+      </trans-unit>
+      <trans-unit id="s6835db03209b4f94">
+        <source>Automate and template configuration within authentik.</source>
+        <target>Configurazione delle automazione e dei modelli all'interno di authentik.</target>
+        
+      </trans-unit>
+      <trans-unit id="s23de62f931f7d754">
+        <source>Last applied</source>
+        <target>Ultima applicazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s2708cac1f4942708">
+        <source>Blueprint(s)</source>
+        <target>Progetto(i)</target>
+        
+      </trans-unit>
+      <trans-unit id="s880b8b70b22f9977">
+        <source>Update Blueprint</source>
+        <target>Aggiorna progetto</target>
+        
+      </trans-unit>
+      <trans-unit id="sef3d102324bf8561">
+        <source>Create Blueprint Instance</source>
+        <target>Crea istanza progetto</target>
+        
+      </trans-unit>
+      <trans-unit id="s32a3efa23718e713">
+        <source>API Requests</source>
+        <target>Richieste API</target>
+        
+      </trans-unit>
+      <trans-unit id="sddb3b0176f437721">
+        <source>Open API Browser</source>
+        <target>Aprire il browser API</target>
+        
+      </trans-unit>
+      <trans-unit id="s5be3c6d61cd9182f">
+        <source>Notifications</source>
+        <target>Notifiche</target>
+        
+      </trans-unit>
+      <trans-unit id="sa3438c7bb4e9cce8">
+        <source><x id="0" equiv-text="${this.unread}"/> unread</source>
+        <target>
+        <x id="0" equiv-text="${this.unread}"/>non letto</target>
+        
+      </trans-unit>
+      <trans-unit id="s6e6e737601f44b2c">
+        <source>Successfully cleared notifications</source>
+        <target>Notifiche ripulite con successo</target>
+        
+      </trans-unit>
+      <trans-unit id="s8cda828dac449ea5">
+        <source>Clear all</source>
+        <target>Pulisci tutto</target>
+        
+      </trans-unit>
+      <trans-unit id="s4207178ba0b99418">
+        <source>A newer version of the frontend is available.</source>
+        <target>Una nuova versione del frontend è disponibile.</target>
+        
+      </trans-unit>
+      <trans-unit id="s96b3cddf33e1c853">
+        <source>You're currently impersonating <x id="0" equiv-text="${this.impersonation}"/>. Click to stop.</source>
+        <target>Attualemnte stai impersonando
+        <x id="0" equiv-text="${this.impersonation}"/>. Clicca per interrompere.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7031e6928c44cedd">
+        <source>User interface</source>
+        <target>Interfaccia utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s8849ece8c65e3a18">
+        <source>Dashboards</source>
+        <target>Dashboard</target>
+        
+      </trans-unit>
+      <trans-unit id="sc265a3e29e1206e4">
+        <source>Events</source>
+        <target>Eventi</target>
+        
+      </trans-unit>
+      <trans-unit id="s4f1ad6b48a5df506">
+        <source>Logs</source>
+        <target>Logs</target>
+        
+      </trans-unit>
+      <trans-unit id="sc0829ee663ced008">
+        <source>Directory</source>
+        <target>Cartella</target>
+        
+      </trans-unit>
+      <trans-unit id="sa81e2cdaf6921adc">
+        <source>System</source>
+        <target>Sistema</target>
+        
+      </trans-unit>
+      <trans-unit id="s5515a897ae98bed9">
+        <source>Certificates</source>
+        <target>Certificati</target>
+        
+      </trans-unit>
+      <trans-unit id="s6b79e73ca77148a0">
+        <source>Outpost Integrations</source>
+        <target>Integrazione avamposto</target>
+        
+      </trans-unit>
+      <trans-unit id="sab85321d3b0840b7">
+        <source>API request failed</source>
+        <target>Richiesta API non riuscita</target>
+        
+      </trans-unit>
+      <trans-unit id="sa3599457b9418bc5">
+        <source>User's avatar</source>
+        <target>Avatar dell'utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s9bd9ba84819493d4">
+        <source>Something went wrong! Please try again later.</source>
+        <target>Qualcosa è andato storto! Per favore riprova più tardi.</target>
+        
+      </trans-unit>
+      <trans-unit id="s4090dd0c0e45988b">
+        <source>Request ID</source>
+        <target>Request ID</target>
+        
+      </trans-unit>
+      <trans-unit id="s4d7fe7be1c49896c">
+        <source>You may close this page now.</source>
+        <target>Puoi chiudere questa pagina ora.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf8c76d5fb408de7b">
+        <source>You're about to be redirect to the following URL.</source>
+        <target>Stai per essere reindirizzato all'URL seguente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s197420b40df164f8">
+        <source>Follow redirect</source>
+        <target>Segui il reindirizzamento</target>
+        
+      </trans-unit>
+      <trans-unit id="sa11e92683c5860c7">
+        <source>Request has been denied.</source>
+        <target>La richiesta è stata negata.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8939f574b096054a">
+        <source>Not you?</source>
+        <target>Non sei tu?</target>
+        
+      </trans-unit>
+      <trans-unit id="sc4eedb434536bdb4">
+        <source>Need an account?</source>
+        <target>Hai bisogno di un account?</target>
+        
+      </trans-unit>
+      <trans-unit id="s38f774cd7e9b9dad">
+        <source>Sign up.</source>
+        <target>Registrati.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa03aa46068460c95">
+        <source>Forgot username or password?</source>
+        <target>Hai dimenticato il nome utente o la password?</target>
+        
+      </trans-unit>
+      <trans-unit id="s091d5407b5b32e84">
+        <source>Or</source>
+        <target>Oppure</target>
+        
+      </trans-unit>
+      <trans-unit id="se5fd752dbbc3cd28">
+        <source>Use a security key</source>
+        <target>Usa una chiave di sicurezza</target>
+        
+      </trans-unit>
+      <trans-unit id="s670ad066cc0e50a3">
+        <source>Login to continue to <x id="0" equiv-text="${this.challenge.applicationPre}"/>.</source>
+        <target>Accedi per continuare in
+        <x id="0" equiv-text="${this.challenge.applicationPre}"/>.</target>
+        
+      </trans-unit>
+      <trans-unit id="scf5ce91bfba10a61">
+        <source>Please enter your password</source>
+        <target>Per favore inserisci la tua password</target>
+        
+      </trans-unit>
+      <trans-unit id="s85366fac18679f28">
+        <source>Forgot password?</source>
+        <target>Hai dimenticato la password?</target>
+        
+      </trans-unit>
+      <trans-unit id="s14c552fb0a4c0186">
+        <source>Application requires following permissions:</source>
+        <target>L'applicazione richiede i seguenti permessi:</target>
+        
+      </trans-unit>
+      <trans-unit id="s7073489bb01b3c24">
+        <source>Application already has access to the following permissions:</source>
+        <target>L'applicazione ha già accesso alle seguenti autorizzazioni:</target>
+        
+      </trans-unit>
+      <trans-unit id="s98dc556f8bf707dc">
+        <source>Application requires following new permissions:</source>
+        <target>L'applicazione richiede le seguenti nuove autorizzazioni:</target>
+        
+      </trans-unit>
+      <trans-unit id="sbd19064fc3f405c1">
+        <source>Check your Inbox for a verification email.</source>
+        <target>Controlla la tua casella di posta per un'email di verifica.</target>
+        
+      </trans-unit>
+      <trans-unit id="s8aff572e64b7936b">
+        <source>Send Email again.</source>
+        <target>Invia di nuovo l'email.</target>
+        
+      </trans-unit>
+      <trans-unit id="sdc323c6af4ae9f01">
+        <source>Successfully copied TOTP Config.</source>
+        <target>Configurazione TOTP copiato correttamente.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3687049d1af562c4">
+        <source>Copy</source>
+        <target>Copia</target>
+        
+      </trans-unit>
+      <trans-unit id="s3643189d1abbb7f4">
+        <source>Code</source>
+        <target>Codice</target>
+        
+      </trans-unit>
+      <trans-unit id="sfe1c86b42ba13376">
+        <source>Please enter your TOTP Code</source>
+        <target>Per favore inserisci il tuo codice TOTP</target>
+        
+      </trans-unit>
+      <trans-unit id="sc2ec367e3108fe65">
+        <source>Duo activation QR code</source>
+        <target>Codice QR di attivazione Duo</target>
+        
+      </trans-unit>
+      <trans-unit id="sc5668cb23167e9bb">
+        <source>Alternatively, if your current device has Duo installed, click on this link:</source>
+        <target>In alternativa, se il tuo dispositivo corrente è installato duo, fare clic su questo link:</target>
+        
+      </trans-unit>
+      <trans-unit id="s721d94ae700b5dfd">
+        <source>Duo activation</source>
+        <target>Attivazione Duo</target>
+        
+      </trans-unit>
+      <trans-unit id="s708d9a4a0db0be8f">
+        <source>Check status</source>
+        <target>Verifica stato</target>
+        
+      </trans-unit>
+      <trans-unit id="s31fba571065f2c87">
+        <source>Make sure to keep these tokens in a safe place.</source>
+        <target>Assicurati di tenere questi token in un luogo sicuro.</target>
+        
+      </trans-unit>
+      <trans-unit id="sc0a0c87d5c556c38">
+        <source>Phone number</source>
+        <target>Numero di telefono</target>
+        
+      </trans-unit>
+      <trans-unit id="s04c1210202f48dc9">
+        <source>Please enter your Phone number.</source>
+        <target>Per favore, inserisci il tuo numero di telefono.</target>
+        
+      </trans-unit>
+      <trans-unit id="seb0c08d9f233bbfe">
+        <source>Please enter the code you received via SMS</source>
+        <target>Per favore, inserisci il codice che hai ricevuto tramite SMS.</target>
+        
+      </trans-unit>
+      <trans-unit id="s2b7dbba348234a36">
+        <source>A code has been sent to you via SMS.</source>
+        <target>Un codice ti è stato inviato tramite SMS.</target>
+        
+      </trans-unit>
+      <trans-unit id="sa84adff85b5e505c">
+        <source>Open your two-factor authenticator app to view your authentication code.</source>
+        <target>Apri la tua app di autenticazione a due fattori per visualizzare il tuo codice di autenticazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7abc9d08b0f70fd6">
+        <source>Static token</source>
+        <target>Token statico</target>
+        
+      </trans-unit>
+      <trans-unit id="s844fea0bfb10a72a">
+        <source>Authentication code</source>
+        <target>Codice di autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s3cd84e82e83e35ad">
+        <source>Please enter your code</source>
+        <target>Per favore inserisci il tuo codice.</target>
+        
+      </trans-unit>
+      <trans-unit id="se409d01b52c4e12f">
+        <source>Retry authentication</source>
+        <target>Riprova autenticazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s8d857061510fe794">
+        <source>Duo push-notifications</source>
+        <target>Notifiche push Duo</target>
+        
+      </trans-unit>
+      <trans-unit id="s47490298c17b753a">
+        <source>Receive a push notification on your device.</source>
+        <target>Ricevi una notifica push sul tuo dispositivo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s16bc281dce5685e8">
+        <source>Authenticator</source>
+        <target>Autenticatore</target>
+        
+      </trans-unit>
+      <trans-unit id="sdefec5401bf67eba">
+        <source>Use a security key to prove your identity.</source>
+        <target>Usa una chiave di sicurezza per dimostrare la tua identità.</target>
+        
+      </trans-unit>
+      <trans-unit id="sd6a025d66f2637d1">
+        <source>Traditional authenticator</source>
+        <target>Autenticatore tradizionale</target>
+        
+      </trans-unit>
+      <trans-unit id="sb25e689e00c61829">
+        <source>Use a code-based authenticator.</source>
+        <target>Utilizzare un autenticatore basato su codice.</target>
+        
+      </trans-unit>
+      <trans-unit id="s9e568afec3810bfe">
+        <source>Recovery keys</source>
+        <target>Chiavi di recupero</target>
+        
+      </trans-unit>
+      <trans-unit id="sb17e8c70f9a05c77">
+        <source>In case you can't access any other method.</source>
+        <target>In caso non riesci ad accedere a nessun altro metodo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s97f2dc19fa556a6a">
+        <source>SMS</source>
+        <target>SMS</target>
+        
+      </trans-unit>
+      <trans-unit id="s0e516232f2ab4e04">
+        <source>Tokens sent via SMS.</source>
+        <target>Token inviati tramite SMS.</target>
+        
+      </trans-unit>
+      <trans-unit id="s6ae0d087036e6d6d">
+        <source>Select an authentication method.</source>
+        <target>Seleziona un metodo di autenticazione.</target>
+        
+      </trans-unit>
+      <trans-unit id="sac17f177f884e238">
+        <source>Stay signed in?</source>
+        <target>Rimani connesso?</target>
+        
+      </trans-unit>
+      <trans-unit id="s859b2e00391da380">
+        <source>Select Yes to reduce the number of times you're asked to sign in.</source>
+        <target>Seleziona Sì per ridurre il numero di volte in cui ti viene chiesto di effettuare l'accesso.</target>
+        
+      </trans-unit>
+      <trans-unit id="s420d2cdedcaf8cd0">
+        <source>Authenticating with Plex...</source>
+        <target>Autenticazione con Plex...</target>
+        
+      </trans-unit>
+      <trans-unit id="s2ddbebcb8a49b005">
+        <source>Waiting for authentication...</source>
+        <target>In attesa di autenticazione...</target>
+        
+      </trans-unit>
+      <trans-unit id="sb15fe7b9d09bb419">
+        <source>If no Plex popup opens, click the button below.</source>
+        <target>Se non si apre alcun popup plex, fare clic sul pulsante in basso.</target>
+        
+      </trans-unit>
+      <trans-unit id="sbc625b4c669b9ce8">
+        <source>Open login</source>
+        <target>Aprire login</target>
+        
+      </trans-unit>
+      <trans-unit id="sd766cdc29b25ff95">
+        <source>Authenticating with Apple...</source>
+        <target>Autenticazione con Apple...</target>
+        
+      </trans-unit>
+      <trans-unit id="s2c8189544e3ea679">
+        <source>Retry</source>
+        <target>Riprova</target>
+        
+      </trans-unit>
+      <trans-unit id="sc1589121ae2f5f92">
+        <source>Enter the code shown on your device.</source>
+        <target>Inserisci il codice mostrato sul tuo dispositivo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s67664f8ee9aea98d">
+        <source>Please enter your Code</source>
+        <target>Per favore inserisci il tuo Codice</target>
+        
+      </trans-unit>
+      <trans-unit id="s455a8fc21077e7f9">
+        <source>You've successfully authenticated your device.</source>
+        <target>Hai autenticato correttamente il tuo dispositivo.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3ab772345f78aee0">
+        <source>Flow inspector</source>
+        <target>Ispezione del flusso</target>
+        
+      </trans-unit>
+      <trans-unit id="s502884e1977b2c06">
+        <source>Next stage</source>
+        <target>Fase successiva</target>
+        
+      </trans-unit>
+      <trans-unit id="sb3fa80ccfa97ee54">
+        <source>Stage name</source>
+        <target>Nome fase</target>
+        
+      </trans-unit>
+      <trans-unit id="sbea3c1e4f2fd623d">
+        <source>Stage kind</source>
+        <target>Tipo fase</target>
+        
+      </trans-unit>
+      <trans-unit id="s2bc8aa1740d3da34">
+        <source>Stage object</source>
+        <target>Ogetto fase</target>
+        
+      </trans-unit>
+      <trans-unit id="sc3e1c4f1fff8e1ca">
+        <source>This flow is completed.</source>
+        <target>Questo flusso è completato.</target>
+        
+      </trans-unit>
+      <trans-unit id="s342eccabf83c9bde">
+        <source>Plan history</source>
+        <target>Storia del piano</target>
+        
+      </trans-unit>
+      <trans-unit id="sb2f307e79d20bb56">
+        <source>Current plan context</source>
+        <target>Contesto del piano attuale</target>
+        
+      </trans-unit>
+      <trans-unit id="sa13e6c8310000e30">
+        <source>Session ID</source>
+        <target>Session ID</target>
+        
+      </trans-unit>
+      <trans-unit id="s6fe64b4625517333">
+        <source>Powered by authentik</source>
+        <target>Powered by authentik</target>
+        
+      </trans-unit>
+      <trans-unit id="s7fa4e5e409d43573">
+        <source>Error creating credential: <x id="0" equiv-text="${err}"/></source>
+        <target>Errore durante la creazione della credenziale:
+        <x id="0" equiv-text="${err}"/></target>
+        
+      </trans-unit>
+      <trans-unit id="s9d95f09deb601f34">
+        <source>Server validation of credential failed: <x id="0" equiv-text="${err}"/></source>
+        <target>Convalida del server di credenziali non riuscita:</target>
+        
+      </trans-unit>
+      <trans-unit id="s3fb39fc45e840f78">
+        <source>Refer to documentation</source>
+        <target>Riferirsi alla documentazione</target>
+      </trans-unit>
+      <trans-unit id="sc741dfb09d3395f0">
+        <source>No Applications available.</source>
+        <target>Nessuna applicazione disponibile.</target>
+        
+      </trans-unit>
+      <trans-unit id="sf34026321b35315c">
+        <source>Either no applications are defined, or you don’t have access to any.</source>
+        <target>O non sono definite applicazioni o non hai accesso a nessuna.</target>
+      </trans-unit>
+      <trans-unit id="s1cf2298d92c327a6">
+        <source>My Applications</source>
+        <target>Le mie Applicazioni</target>
+        
+      </trans-unit>
+      <trans-unit id="s2656433a3b1f7e86">
+        <source>My applications</source>
+        <target>Le mie applicazioni</target>
+        
+      </trans-unit>
+      <trans-unit id="s06c92148da82be0d">
+        <source>Change your password</source>
+        <target>Cambia la tua password</target>
+        
+      </trans-unit>
+      <trans-unit id="sff50532a2d85e32e">
+        <source>Change password</source>
+        <target>Cambia password</target>
+        
+      </trans-unit>
+      <trans-unit id="saf63d34c8601dd41">
+        <source><x id="0" equiv-text="${prompt.label}"/></source>
+        <target><x id="0" equiv-text="${prompt.label}"/>
+        </target>
+        
+      </trans-unit>
+      <trans-unit id="s33f85f24c0f5f008">
+        <source>Save</source>
+        <target>Salva</target>
+        
+      </trans-unit>
+      <trans-unit id="s045c3b86aae073c1">
+        <source>Delete account</source>
+        <target>Elimina account</target>
+        
+      </trans-unit>
+      <trans-unit id="s4a6aa26413287069">
+        <source>Successfully updated details</source>
+        <target>Dettagli aggiornati con successo</target>
+        
+      </trans-unit>
+      <trans-unit id="s6fcd9b5a87ceccd6">
+        <source>Open settings</source>
+        <target>Aprire impostazioni</target>
+        
+      </trans-unit>
+      <trans-unit id="s8c05cccd470f6b5f">
+        <source>No settings flow configured.</source>
+        <target>Nessun flusso di impostazioni configurato.</target>
+        
+      </trans-unit>
+      <trans-unit id="sb546eb04425e07fa">
+        <source>Update details</source>
+        <target>Aggiorna dettagli</target>
+        
+      </trans-unit>
+      <trans-unit id="s30205d424e710818">
+        <source>Successfully disconnected source</source>
+        <target>Riuscita disconnessione sorgente</target>
+        
+      </trans-unit>
+      <trans-unit id="s67dedada007d4067">
+        <source>Failed to disconnected source: <x id="0" equiv-text="${exc}"/></source>
+        <target>Impossibile disconnettere la fonte:</target>
+        
+      </trans-unit>
+      <trans-unit id="sd2208cd1a767644b">
+        <source>Disconnect</source>
+        <target>Disconnetti</target>
+        
+      </trans-unit>
+      <trans-unit id="s7a4f059aaa029719">
+        <source>Connect</source>
+        <target>Connetti</target>
+        
+      </trans-unit>
+      <trans-unit id="sababff57115130a0">
+        <source>Error: unsupported source settings: <x id="0" equiv-text="${source.component}"/></source>
+        <target>Errore: impostazioni di origine non supportate:</target>
+        
+      </trans-unit>
+      <trans-unit id="sd1031bddc66dc495">
+        <source>Connect your user account to the services listed below, to allow you to login using the service instead of traditional credentials.</source>
+        <target>Collega il tuo account utente ai servizi elencati di seguito, per consentire di accedere utilizzando il servizio anziché le credenziali tradizionali.</target>
+        
+      </trans-unit>
+      <trans-unit id="s7968dbed9b106c29">
+        <source>No services available.</source>
+        <target>Nessun servizio disponibile.</target>
+        
+      </trans-unit>
+      <trans-unit id="s3a135682bd30bdbb">
+        <source>Create App password</source>
+        <target>Crea password dell'app</target>
+        
+      </trans-unit>
+      <trans-unit id="s588796ee929a2e4c">
+        <source>User details</source>
+        <target>Dettagli utente</target>
+        
+      </trans-unit>
+      <trans-unit id="s332a5235948c1a1d">
+        <source>Consent</source>
+        <target>Consenso</target>
+        
+      </trans-unit>
+      <trans-unit id="sff945d3f59b93c5e">
+        <source>MFA Devices</source>
+        <target>Dispositivi MFA</target>
+        
+      </trans-unit>
+      <trans-unit id="sc54aafeea9c9bab0">
+        <source>Connected services</source>
+        <target>Servizi connessi</target>
+        
+      </trans-unit>
+      <trans-unit id="sc6b4ebd37b7a91c7">
+        <source>Tokens and App passwords</source>
+        <target>Token e password dell'app</target>
+        
+      </trans-unit>
+      <trans-unit id="sba65ae54d6585c1a">
+        <source>Unread notifications</source>
+        <target>Notifiche non lette</target>
+        
+      </trans-unit>
+      <trans-unit id="s5599c62bb78c631f">
+        <source>Admin interface</source>
+        <target>Interfaccia amministrativa</target>
+        
+      </trans-unit>
+      <trans-unit id="s1298e361e40ee1c5">
+        <source>Stop impersonation</source>
+        <target>Concludi l'impersonificazione</target>
+        
+      </trans-unit>
+      <trans-unit id="s6abff64e7ff7fde9">
+        <source>Avatar image</source>
+        <target>Immagine dell'avatar</target>
+        
+      </trans-unit>
+      <trans-unit id="sbf9c5c5a8e5efad4">
+        <source>Failed</source>
+        <target>Fallito</target>
+        
+      </trans-unit>
+      <trans-unit id="se4cd073c125382af">
+        <source>Unsynced / N/A</source>
+        <target>Non sincronizzato / N/A</target>
+        
+      </trans-unit>
+      <trans-unit id="s21b3058faf874368">
+        <source>Outdated outposts</source>
+        <target>Avamposti obsoleti</target>
+        
+      </trans-unit>
+      <trans-unit id="s51f92b6fa76656ca">
+        <source>Unhealthy outposts</source>
+        <target>Avamposti degradati</target>
+        
+      </trans-unit>
+      <trans-unit id="s0fbf6dc6a1966408">
+        <source>Next</source>
+        <target>Successivo</target>
+        
+      </trans-unit>
+      <trans-unit id="s4409ada9c5c2a7f8">
+        <source>Inactive</source>
+        <target>Inattivo</target>
+        
+      </trans-unit>
+      <trans-unit id="s7ec7036b249f4f22">
+        <source>Regular user</source>
+        <target>Utente regolare</target>
+        
+      </trans-unit>
+      <trans-unit id="s27976e94b05c6970">
+        <source>Activate</source>
+        <target>Attivare</target>
+        
+      </trans-unit>
+<trans-unit id="s1024166475850a65">
+  <source>Use Server URI for SNI verification</source>
+  <target>Utilizzare l'URI del server per la verifica SNI</target>
+</trans-unit>
+<trans-unit id="se65beb94fffc3c4b">
+  <source>Required for servers using TLS 1.3+</source>
+  <target>Richiesto per i server usando TLS 1.3+</target>
+</trans-unit>
+<trans-unit id="s5506b35a1bceb141">
+  <source>Client certificate keypair to authenticate against the LDAP Server's Certificate.</source>
+  <target>KeyPair del certificato client per autenticarsi rispetto al certificato del server LDAP.</target>
+</trans-unit>
+<trans-unit id="s4647b2c92638d6fd">
+  <source>The certificate for the above configured Base DN. As a fallback, the provider uses a self-signed certificate.</source>
+  <target>Il certificato per la base di base sopra configurata DN. Come fallback, il fornitore utilizza un certificato autofirmati.</target>
+</trans-unit>
+<trans-unit id="scd247ffad6e04ac0">
+  <source>TLS Server name</source>
+  <target>Nome server TLS</target>
+</trans-unit>
+<trans-unit id="s2acef4f6ba39bf11">
+  <source>DNS name for which the above configured certificate should be used. The certificate cannot be detected based on the base DN, as the SSL/TLS negotiation happens before such data is exchanged.</source>
+  <target>Nome DNS per il quale deve essere utilizzato il certificato configurato sopra. Il certificato non può essere rilevato in base al DN di base, poiché la negoziazione SSL/TLS avviene prima che tali dati vengano scambiati.</target>
+</trans-unit>
+<trans-unit id="s000ee3e634868b3c">
+  <source>TLS Client authentication certificate</source>
+  <target>Certificato di autenticazione client TLS</target>
+</trans-unit>
+<trans-unit id="s5da52af9b083c29a">
+  <source>Model</source>
+  <target>Modello</target>
+</trans-unit>
+<trans-unit id="s3ba9b8aeb686d9f7">
+  <source>Match events created by selected model. When left empty, all models are matched.</source>
+  <target>Abbina eventi creati dal modello selezionato. Se lasciati vuoti, tutti i modelli sono abbinati.</target>
+</trans-unit>
+<trans-unit id="s254d527e3a53dbb7">
+  <source>Code-based MFA Support</source>
+  <target>Supporto MFA basato sul codice</target>
+</trans-unit>
+<trans-unit id="s1889ba2eaeec2f1e">
+  <source>When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.</source>
+  <target>Se abilitato, l'autenticazione multi-fattore basata su codice può essere utilizzata aggiungendo un punto e virgola e il codice TOTP alla password. Questo dovrebbe essere abilitato solo se tutti gli utenti che si legaranno a questo provider hanno un dispositivo TOTP configurato, poiché altrimenti una password può essere respinta in modo errato se contiene un punto e virgola.</target>
+</trans-unit>
+<trans-unit id="s9f9492d30a96b9c6">
+  <source>User type</source>
+  <target>Tipo di utente</target>
+</trans-unit>
+<trans-unit id="s0e427111d750cc02">
+  <source>Successfully updated license.</source>
+  <target>Licenza aggiornata con successo.</target>
+</trans-unit>
+<trans-unit id="s06ae64e621f302eb">
+  <source>Successfully created license.</source>
+  <target>Licenza creata con successo.</target>
+</trans-unit>
+<trans-unit id="s2905c425adae99bd">
+  <source>Install ID</source>
+  <target>ID Installazione</target>
+</trans-unit>
+<trans-unit id="sb18ec434a8a3aafb">
+  <source>License key</source>
+  <target>Chiave di licenza</target>
+</trans-unit>
+<trans-unit id="s2e109263b73c12d5">
+  <source>Licenses</source>
+  <target>Licenze</target>
+</trans-unit>
+<trans-unit id="sd49099e9522635f4">
+  <source>License(s)</source>
+  <target>Licenza(e)</target>
+</trans-unit>
+<trans-unit id="sd22bd01bdf28c548">
+  <source>Cumulative license expiry</source>
+  <target>Scadenza cumulativa della licenza</target>
+</trans-unit>
+<trans-unit id="sdeb6cee42435dd07">
+  <source>Update License</source>
+  <target>Aggiorna Licenza</target>
+</trans-unit>
+<trans-unit id="s7df5b92a3f93544f">
+  <source>Warning: The current user count has exceeded the configured licenses.</source>
+  <target>Attenzione: il numero di utenti correnti ha superato le licenze configurate.</target>
+</trans-unit>
+<trans-unit id="s0141f42936495787">
+  <source>Click here for more info.</source>
+  <target>Clicca qui per ulteriori informazioni.</target>
+</trans-unit>
+<trans-unit id="s7be2df39f727faa2">
+  <source>Enterprise</source>
+  <target>Enterprise</target>
+</trans-unit>
+<trans-unit id="s9ce7cc01fb9b5b53">
+  <source>Manage enterprise licenses</source>
+  <target>Gestire le licenze enterprise</target>
+</trans-unit>
+<trans-unit id="sf9ebf11ac2645820">
+  <source>No licenses found.</source>
+  <target>Nessuna licenza trovata.</target>
+</trans-unit>
+<trans-unit id="sa1db89262360550b">
+  <source>Send us feedback!</source>
+  <target>Invia il tuo feedback!</target>
+</trans-unit>
+<trans-unit id="sb2cbd06f8e25b47e">
+  <source>Go to Customer Portal</source>
+  <target>Vai al Portale del Cliente</target>
+</trans-unit>
+<trans-unit id="sf58825457d61c429">
+  <source>Forecast internal users</source>
+  <target>Previsione utenti interni</target>
+</trans-unit>
+<trans-unit id="sde9a3f41977ec1f8">
+  <source>Estimated user count one year from now based on <x id="0" equiv-text="${this.forecast?.internalUsers}"/> current internal users and <x id="1" equiv-text="${this.forecast?.forecastedInternalUsers}"/> forecasted internal users.</source>
+  <target>Conteggio degli utenti stimato tra un anno in base a
+            utenti interni attuali e
+            utenti interni previsti.</target>
+</trans-unit>
+<trans-unit id="s4557b6b9da258643">
+  <source>Forecast external users</source>
+  <target>Previsione utenti esterni</target>
+</trans-unit>
+<trans-unit id="sf52479d6daa0a4a8">
+  <source>Estimated user count one year from now based on <x id="0" equiv-text="${this.forecast?.externalUsers}"/> current external users and <x id="1" equiv-text="${this.forecast?.forecastedExternalUsers}"/> forecasted external users.</source>
+  <target>Conteggio degli utenti stimato tra un anno in base a
+            utenti esterni attuali e
+            utenti esterni previsti.</target>
+</trans-unit>
+<trans-unit id="s6196153c4b0c1ea0">
+  <source>Install</source>
+  <target>Installa</target>
+</trans-unit>
+<trans-unit id="s0285b4bd69130fa3">
+  <source>Install License</source>
+  <target>Installa Licenza</target>
+</trans-unit>
+<trans-unit id="scef2eb6a2bfe3110">
+  <source>Internal users might be users such as company employees, which will get access to the full Enterprise feature set.</source>
+  <target>Gli utenti interni potrebbero essere utenti come i dipendenti dell'azienda, che avranno accesso al set di funzionalità aziendali completo.</target>
+</trans-unit>
+<trans-unit id="sf66389b04fcc219c">
+  <source>External users might be external consultants or B2C customers. These users don't get access to enterprise features.</source>
+  <target>Gli utenti esterni potrebbero essere consulenti esterni o clienti B2C. Questi utenti non hanno accesso alle funzionalità aziendali.</target>
+</trans-unit>
+<trans-unit id="s77e8668a27dbc402">
+  <source>Service accounts should be used for machine-to-machine authentication or other automations.</source>
+  <target>Gli account di servizio devono essere utilizzati per l'autenticazione macchina a macchina o altre automazione.</target>
+</trans-unit>
+<trans-unit id="s28cbd874ba450b4e">
+  <source>Less details</source>
+  <target>Meno dettagli</target>
+</trans-unit>
+<trans-unit id="s8fa26f65aed77c96">
+  <source>More details</source>
+  <target>Più dettagli</target>
+</trans-unit>
+<trans-unit id="s08df8d0a773a3ea0">
+  <source>Remove item</source>
+  <target>Rimuovi elemento</target>
+</trans-unit>
+<trans-unit id="s364c4f177a2f8322">
+  <source>Open API drawer</source>
+  <target>Cassetto API aperto</target>
+</trans-unit>
+<trans-unit id="s9ba989e69344ff29">
+  <source>Open Notification drawer</source>
+  <target>Cassetto di notifica aperta</target>
+</trans-unit>
+<trans-unit id="s14bf17e2a1a2c381">
+  <source>Restart task</source>
+  <target>Riavvia attività</target>
+</trans-unit>
+<trans-unit id="s19409e8712ddd369">
+  <source>Add provider</source>
+  <target>Aggiungi provider</target>
+</trans-unit>
+<trans-unit id="s1f7698c061c208c9">
+  <source>Open</source>
+  <target>Apri</target>
+</trans-unit>
+<trans-unit id="scc3487e74c5a3e89">
+  <source>Copy token</source>
+  <target>Copia token</target>
+</trans-unit>
+<trans-unit id="s424f57afae0caac4">
+  <source>Add users</source>
+  <target>Aggiungi utenti</target>
+</trans-unit>
+<trans-unit id="sd9f67fbf3f86efcf">
+  <source>Add group</source>
+  <target>Aggiungi gruppo</target>
+</trans-unit>
+<trans-unit id="s254a9a23dc1635df">
+  <source>Import devices</source>
+  <target>Importa dispositivi</target>
+</trans-unit>
+<trans-unit id="sc4fdeccf14be5378">
+  <source>Execute</source>
+  <target>Esegui</target>
+</trans-unit>
+<trans-unit id="s3b3c333481944862">
+  <source>Show details</source>
+  <target>Mostra dettagli</target>
+</trans-unit>
+<trans-unit id="sb8f855b49234b81b">
+  <source>Apply</source>
+  <target>Applica</target>
+</trans-unit>
+<trans-unit id="s9d8b8aa2b404c2c8">
+  <source>Settings</source>
+  <target>Impostazioni</target>
+</trans-unit>
+<trans-unit id="s7cfe12cd14df9950">
+  <source>Sign out</source>
+  <target>Sign out</target>
+</trans-unit>
+<trans-unit id="s7caa8f7edb920909">
+  <source>The number of tokens generated whenever this stage is used. Every token generated per stage execution will be attached to a single static device.</source>
+  <target>Il numero di token generati ogni volta che viene utilizzata questa fase. Ogni token generato per fase di esecuzione sarà collegato a un singolo dispositivo statico.</target>
+</trans-unit>
+<trans-unit id="s4aacc4e0277c1042">
+  <source>Token length</source>
+  <target>Lunghezza Token</target>
+</trans-unit>
+<trans-unit id="s6931695c4f563bc4">
+  <source>The length of the individual generated tokens. Can be increased to improve security.</source>
+  <target>La lunghezza dei token generati individuali. Può essere aumentato per migliorare la sicurezza.</target>
+</trans-unit>
+<trans-unit id="s0dd031b58ed4017c">
+  <source>Internal: <x id="0" equiv-text="${item.internalUsers}"/></source>
+  <target>Interni: <x id="0" equiv-text="${item.internalUsers}"/></target>
+</trans-unit>
+<trans-unit id="s57b07e524f8f5c2a">
+  <source>External: <x id="0" equiv-text="${item.externalUsers}"/></source>
+  <target>Esterni: <x id="0" equiv-text="${item.externalUsers}"/></target>
+</trans-unit>
+<trans-unit id="s7f68101a50f526ee">
+  <source>Statically deny the flow. To use this stage effectively, disable *Evaluate when flow is planned* on the respective binding.</source>
+  <target>Negare staticamente il flusso. Per utilizzare questa fase in modo efficace, disabilita * Valuta quando è pianificato il flusso * sul rispettivo legame.</target>
+</trans-unit>
+<trans-unit id="s911a27022aba349f">
+  <source>Create and bind Policy</source>
+  <target>Crea e associa criterio</target>
+</trans-unit>
+<trans-unit id="sb1a4e9b288e2f005">
+  <source>Federation and Social login</source>
+  <target>Federazione e social login</target>
+</trans-unit>
+<trans-unit id="s6f367f5604d5056d">
+  <source>Create and bind Stage</source>
+  <target>Crea e associa fase</target>
+</trans-unit>
+<trans-unit id="s1a65ee08832fbfe2">
+  <source>Flows and Stages</source>
+  <target>Flussi e fasi</target>
+</trans-unit>
+<trans-unit id="s4ba4473f3d4ec896">
+  <source>New version available</source>
+  <target>Nuova versione disponibile</target>
+</trans-unit>
+<trans-unit id="s6b1ed7507f26cb4a">
+  <source>Failure result</source>
+  <target>Risultato fallimento</target>
+</trans-unit>
+<trans-unit id="s2e422519ed38f7d8">
+  <source>Pass</source>
+  <target>Pass</target>
+</trans-unit>
+<trans-unit id="s81a45c4fd11e8e1a">
+  <source>Don't pass</source>
+  <target>Non passare</target>
+</trans-unit>
+<trans-unit id="s95b73e0f4e47eb9a">
+  <source>Result used when policy execution fails.</source>
+  <target>Risultato utilizzato quando l'esecuzione delle politiche non riesce.</target>
+</trans-unit>
+<trans-unit id="s6a3cf855140b9511">
+  <source>Required: User verification must occur.</source>
+  <target>Obbligatorio: deve essere effettuata la verifica dell'utente.</target>
+</trans-unit>
+<trans-unit id="sc498a3b05cfe2b08">
+  <source>Preferred: User verification is preferred if available, but not required.</source>
+  <target>Preferibile: la verifica dell'utente è preferibile se disponibile, ma non obbligatoria.</target>
+</trans-unit>
+<trans-unit id="s9d2239d2b0402795">
+  <source>Discouraged: User verification should not occur.</source>
+  <target>Scoraggiato: la verifica dell'utente non dovrebbe avvenire.</target>
+</trans-unit>
+<trans-unit id="s428b7859907f6db2">
+  <source>Required: The authenticator MUST create a dedicated credential. If it cannot, the RP is prepared for an error to occur</source>
+  <target>Obbligatorio: l'autenticatore DEVE creare una credenziale dedicata. In caso contrario, l'RP è preparato al verificarsi di un errore</target>
+</trans-unit>
+<trans-unit id="s33e3766d4a02b042">
+  <source>Preferred: The authenticator can create and store a dedicated credential, but if it doesn't that's alright too</source>
+  <target>Preferibile: l'autenticatore può creare e archiviare credenziali dedicate, ma anche in caso contrario va bene</target>
+</trans-unit>
+<trans-unit id="sfb852dd507c25c24">
+  <source>Discouraged: The authenticator should not create a dedicated credential</source>
+  <target>Scoraggiato: l'autenticatore non deve creare una credenziale dedicata</target>
+</trans-unit>
+<trans-unit id="s028d385389b5aac0">
+  <source>Lock the user out of this system</source>
+  <target>Blocca l'utente fuori da questo sistema</target>
+</trans-unit>
+<trans-unit id="sd2122c514f0778b5">
+  <source>Allow the user to log in and use this system</source>
+  <target>Consenti all'utente di accedere e utilizzare questo sistema</target>
+</trans-unit>
+<trans-unit id="s43fe853bf219a9b8">
+  <source>Temporarily assume the identity of this user</source>
+  <target>Temporaneamente assumi l'identità di questo utente</target>
+</trans-unit>
+<trans-unit id="se28b5f3fcadaeeb1">
+  <source>Enter a new password for this user</source>
+  <target>Inserisci una nuova password per questo utente</target>
+</trans-unit>
+<trans-unit id="s6f5bb31e2733ecd5">
+  <source>Create a link for this user to reset their password</source>
+  <target>Crea un collegamento per consentire a questo utente di reimpostare la password</target>
+</trans-unit>
+<trans-unit id="s67ac11d47f1ce794">
+  <source>WebAuthn requires this page to be accessed via HTTPS.</source>
+  <target>WebAuthn richiede che questa pagina sia accessibile tramite HTTPS.</target>
+</trans-unit>
+<trans-unit id="se9e9e1d6799b86a5">
+  <source>WebAuthn not supported by browser.</source>
+  <target>WebAuthn non supportato dal browser.</target>
+</trans-unit>
+<trans-unit id="sff0ac1ace2d90709">
+  <source>Use this provider with nginx's auth_request or traefik's forwardAuth. Each application/domain needs its own provider. Additionally, on each domain, /outpost.goauthentik.io must be routed to the outpost (when using a managed outpost, this is done for you).</source>
+  <target>Usa questo provider con l'auth_request di Nginx o il forkauth di Traefik. Ogni applicazione/dominio ha bisogno del proprio fornitore. Inoltre, su ciascun dominio, /outpost.goauthentik.io deve essere indirizzato all'avamposto (quando si utilizza un avamposto gestito, questo viene fatto per te).</target>
+</trans-unit>
+<trans-unit id="scb58b8a60cad8762">
+  <source>Default relay state</source>
+  <target>Stato di relè predefinito</target>
+</trans-unit>
+<trans-unit id="s6827a456c9dfc6ee">
+  <source>When using IDP-initiated logins, the relay state will be set to this value.</source>
+  <target>Quando si utilizzano gli accessi avviati da IDP, lo stato di relè verrà impostato su questo valore.</target>
+</trans-unit>
+<trans-unit id="s01794c0ee3629c1b">
+  <source>Flow Info</source>
+  <target>Info Flusso</target>
+</trans-unit>
+<trans-unit id="s24bce955914b1f0a">
+  <source>Stage used to configure a WebAuthn authenticator (i.e. Yubikey, FaceID/Windows Hello).</source>
+  <target>Fase utilizzato per configurare un autenticatore WebAuthn (ovvero Yubikey, FaceId/Windows Hello).</target>
+</trans-unit>
+&lt;&lt;&lt;&lt;&lt;&lt;&lt; HEAD
+<trans-unit id="s1cffe58249b04669">
+  <source>Internal application name used in URLs.</source>
+  <target>Nome applicazione interno utilizzato negli URL.</target>
+</trans-unit>
+<trans-unit id="sb3d4f79d9d8b71e5">
+  <source>Submit</source>
+  <target>Invia</target>
+</trans-unit>
+<trans-unit id="se2b29e6cfe59414c">
+  <source>UI Settings</source>
+  <target>Impostazioni dell'Interfaccia Utente</target>
+</trans-unit>
+<trans-unit id="s836148f721d8913b">
+  <source>Transparent Reverse Proxy</source>
+  <target>Transparent Reverse Proxy</target>
+</trans-unit>
+<trans-unit id="s945a6b94361ee45b">
+  <source>For transparent reverse proxies with required authentication</source>
+  <target>Per i proxy inversi trasparenti con l'autenticazione richiesta</target>
+</trans-unit>
+<trans-unit id="s40830ec037f34626">
+  <source>Configure SAML provider manually</source>
+  <target>Configura manualmente il provider SAML</target>
+</trans-unit>
+<trans-unit id="sea9fc40dfd1d18b1">
+  <source>Configure RADIUS provider manually</source>
+  <target>Configura manualmente il provider RADIUS</target>
+</trans-unit>
+<trans-unit id="sa1b0052ae095b9b3">
+  <source>Configure SCIM provider manually</source>
+  <target>Configura manualmente il provider SCIM</target>
+</trans-unit>
+<trans-unit id="s15831fa50a116545">
+  <source>Saving Application...</source>
+  <target>Salvataggio Applicazione...</target>
+</trans-unit>
+<trans-unit id="s848288f8c2265aad">
+  <source>Your application has been saved</source>
+  <target>La tua applicazione è stata salvata</target>
+</trans-unit>
+<trans-unit id="s67d858051b34c38b">
+  <source>Method's display Name.</source>
+  <target>Nome visualizzato del metodo.</target>
+</trans-unit>
+<trans-unit id="h10ef80d434185070">
+  <source>Use this provider with nginx's <x id="0" equiv-text="&lt;code&gt;"/>auth_request<x id="1" equiv-text="&lt;/code&gt;"/> or traefik's
+                    <x id="2" equiv-text="&lt;code&gt;"/>forwardAuth<x id="3" equiv-text="&lt;/code&gt;"/>. Each application/domain needs its own provider.
+                    Additionally, on each domain, <x id="4" equiv-text="&lt;code&gt;"/>/outpost.goauthentik.io<x id="5" equiv-text="&lt;/code&gt;"/> must be
+                    routed to the outpost (when using a managed outpost, this is done for you).</source>
+  <target>Usa questo provider con Nginx
+            auth_request
+            o Traefik's
+            forti
+            . Ogni applicazione/dominio ha bisogno del proprio fornitore.
+ Inoltre, su ogni dominio,
+            /outpost.goauthentik.io
+            deve essere
+ Intrailata all'avamposto (quando si utilizza un avamposto gestito, questo viene fatto per te).</target>
+</trans-unit>
+<trans-unit id="sd18b18f91b804c3f">
+  <source>Custom attributes</source>
+  <target>Attributi personalizzati</target>
+</trans-unit>
+<trans-unit id="s71c5d51d5a357dbd">
+  <source>Don't show this message again.</source>
+  <target>Non mostrare di nuovo questo messaggio.</target>
+</trans-unit>
+<trans-unit id="s3e99ea082ca5ade9">
+  <source>Failed to fetch</source>
+  <target>Impossibile recuperare</target>
+</trans-unit>
+<trans-unit id="s98327528f00365a7">
+  <source>Failed to fetch data.</source>
+  <target>Impossibile recuperare i dati.</target>
+</trans-unit>
+<trans-unit id="sf485014051ad0cf7">
+  <source>Successfully assigned permission.</source>
+  <target>Autorizzazione assegnata correttamente.</target>
+</trans-unit>
+<trans-unit id="sca7fed2bef53cb99">
+  <source>Role</source>
+  <target>Ruolo</target>
+</trans-unit>
+<trans-unit id="sc92c1a54034e21cc">
+  <source>Assign</source>
+  <target>Assegna</target>
+</trans-unit>
+<trans-unit id="scd84d10ee9137070">
+  <source>Assign permission to role</source>
+  <target>Assegnare il permesso al ruolo</target>
+</trans-unit>
+<trans-unit id="s5ee6f1b84e9ebc69">
+  <source>Assign to new role</source>
+  <target>Assegna a nuovo ruolo</target>
+</trans-unit>
+<trans-unit id="s4afb26a8fae257e9">
+  <source>Directly assigned</source>
+  <target>Assegnato direttamente</target>
+</trans-unit>
+<trans-unit id="sd8051c26e155f043">
+  <source>Assign permission to user</source>
+  <target>Assegna permesso a utente</target>
+</trans-unit>
+<trans-unit id="sf79f8681e5ffaee2">
+  <source>Assign to new user</source>
+  <target>Assegna a nuovo utente</target>
+</trans-unit>
+<trans-unit id="saabeb4cab074b0b9">
+  <source>User Object Permissions</source>
+  <target>Autorizzazioni dell'oggetto utente</target>
+</trans-unit>
+<trans-unit id="s8489d5559dda260c">
+  <source>Role Object Permissions</source>
+  <target>Autorizzazioni oggetto ruolo</target>
+</trans-unit>
+<trans-unit id="s6b2beba7ab637e9e">
+  <source>Roles</source>
+  <target>Ruoli</target>
+</trans-unit>
+<trans-unit id="s96d2bb4be3f5e8aa">
+  <source>Select roles to grant this groups' users' permissions from the selected roles.</source>
+  <target>Seleziona i ruoli per concedere le autorizzazioni degli utenti di questi gruppi dai ruoli selezionati.</target>
+</trans-unit>
+<trans-unit id="sb37880a2a7288ef0">
+  <source>Update Permissions</source>
+  <target>Aggiorna permessi</target>
+</trans-unit>
+<trans-unit id="se9c07cf256774d81">
+  <source>Editing is disabled for managed tokens</source>
+  <target>La modifica è disabilitata per i token gestiti</target>
+</trans-unit>
+<trans-unit id="sdeb90bfd8a80b86b">
+  <source>Permissions to add</source>
+  <target>Permessi da aggiungere</target>
+</trans-unit>
+<trans-unit id="s36247910d67421e1">
+  <source>Select permissions</source>
+  <target>Seleziona le autorizzazioni</target>
+</trans-unit>
+<trans-unit id="s67e136af8fc1107b">
+  <source>Assign permission</source>
+  <target>Assegnare il permesso</target>
+</trans-unit>
+<trans-unit id="sb923723d27df40ba">
+  <source>Permission(s)</source>
+  <target>Permesso(i)</target>
+</trans-unit>
+<trans-unit id="sc5fb00b25c7f5a02">
+  <source>Permission</source>
+  <target>Permesso</target>
+</trans-unit>
+<trans-unit id="s1455753daa00f1bc">
+  <source>User doesn't have view permission so description cannot be retrieved.</source>
+  <target>L'utente non ha l'autorizzazione di visualizzazione, quindi la descrizione non può essere recuperata.</target>
+</trans-unit>
+<trans-unit id="s9cc631505c17b028">
+  <source>Assigned global permissions</source>
+  <target>Autorizzazioni globali assegnate</target>
+</trans-unit>
+<trans-unit id="s8f85a0e678846080">
+  <source>Assigned object permissions</source>
+  <target>Autorizzazioni oggetto assegnate</target>
+</trans-unit>
+<trans-unit id="s9103a949a3963aa9">
+  <source>Successfully updated role.</source>
+  <target>Aggiornamento del ruolo effettuato con successo.</target>
+</trans-unit>
+<trans-unit id="sdf87c5661b31359e">
+  <source>Successfully created role.</source>
+  <target>Ruolo creato con successo.</target>
+</trans-unit>
+<trans-unit id="s3484b1e6d0b5335f">
+  <source>Manage roles which grant permissions to objects within authentik.</source>
+  <target>Gestisci ruoli che concedono le autorizzazioni agli oggetti all'interno di Authenk.</target>
+</trans-unit>
+<trans-unit id="s259de999919316db">
+  <source>Role(s)</source>
+  <target>Ruolo(i)</target>
+</trans-unit>
+<trans-unit id="s2ffad156e8332f04">
+  <source>Update Role</source>
+  <target>Aggiorna Ruolo</target>
+</trans-unit>
+<trans-unit id="sc5f923729564fbf3">
+  <source>Create Role</source>
+  <target>Creare Ruolo</target>
+</trans-unit>
+<trans-unit id="s14bfa8fd1bec8889">
+  <source>Role doesn't have view permission so description cannot be retrieved.</source>
+  <target>Il ruolo non ha il permesso di visualizzazione, quindi la descrizione non può essere recuperata.</target>
+</trans-unit>
+<trans-unit id="s7e796fe83982863f">
+  <source>Role <x id="0" equiv-text="${this._role?.name || &quot;&quot;}"/></source>
+  <target>Ruolo <x id="0" equiv-text="${this._role?.name || &quot;&quot;}"/></target>
+</trans-unit>
+<trans-unit id="s526e2c66bd51ff5f">
+  <source>Role Info</source>
+  <target>Info Ruolo</target>
+</trans-unit>
+<trans-unit id="s2da4aa7a9abeb653">
+  <source>Pseudolocale (for testing)</source>
+  <target>Pseudolocale (per testare)</target>
+</trans-unit>
+<trans-unit id="s4bd386db7302bb22">
+  <source>Create With Wizard</source>
+  <target>Crea con la procedura guidata</target>
+</trans-unit>
+<trans-unit id="s070fdfb03034ca9b">
+  <source>One hint, 'New Application Wizard', is currently hidden</source>
+  <target>Un suggerimento, &quot;New Application Wizard&quot;, è attualmente nascosto</target>
+</trans-unit>
+<trans-unit id="s61bd841e66966325">
+  <source>External applications that use authentik as an identity provider via protocols like OAuth2 and SAML. All applications are shown here, even ones you cannot access.</source>
+  <target>Applicazioni esterne che utilizzano Authenk come fornitore di identità tramite protocolli come OAuth2 e SAML. Tutte le applicazioni sono mostrate qui, anche quelle a cui non è possibile accedere.</target>
+</trans-unit>
+<trans-unit id="s1cc306d8e28c4464">
+  <source>Deny message</source>
+  <target>Negare il messaggio</target>
+</trans-unit>
+<trans-unit id="s6985c401e1100122">
+  <source>Message shown when this stage is run.</source>
+  <target>Messaggio mostrato quando questa fase è eseguita.</target>
+</trans-unit>
+<trans-unit id="s09f0c100d0ad2fec">
+  <source>Open Wizard</source>
+  <target>Apri Wizard</target>
+</trans-unit>
+<trans-unit id="sf2ef885f7d0a101d">
+  <source>Demo Wizard</source>
+  <target>Demo Wizard</target>
+</trans-unit>
+<trans-unit id="s77505ee5d2e45e53">
+  <source>Run the demo wizard</source>
+  <target>Esegui il demo wizard</target>
+</trans-unit>
+<trans-unit id="s4498e890d47a8066">
+  <source>OAuth2/OIDC (Open Authorization/OpenID Connect)</source>
+  <target>OAuth2/OIDC (Autorizzazione aperta/OpenID Connect)</target>
+</trans-unit>
+<trans-unit id="s4f2e195d09e2868c">
+  <source>LDAP (Lightweight Directory Access Protocol)</source>
+  <target>LDAP (protocollo di accesso alla directory leggero)</target>
+</trans-unit>
+<trans-unit id="s7f5bb0c9923315ed">
+  <source>Forward Auth (Single Application)</source>
+  <target>Auth Auth (Applicazione singola)</target>
+</trans-unit>
+<trans-unit id="sf8008d2d6b064b95">
+  <source>Forward Auth (Domain Level)</source>
+  <target>Auth Auth (livello di dominio)</target>
+</trans-unit>
+<trans-unit id="sfa8a1ffa9fee07d3">
+  <source>SAML (Security Assertion Markup Language)</source>
+  <target>SAML (lingua di markup dell'asserzione di sicurezza)</target>
+</trans-unit>
+<trans-unit id="s848a23972e388662">
+  <source>RADIUS (Remote Authentication Dial-In User Service)</source>
+  <target>RADIUS (servizio utente dial-in autenticazione remota)</target>
+</trans-unit>
+<trans-unit id="s3e902999ddf7b50e">
+  <source>SCIM (System for Cross-domain Identity Management)</source>
+  <target>SCIM (Sistema per la gestione dell'identità a dominio)</target>
+</trans-unit>
+<trans-unit id="sdc5690be4a342985">
+  <source>The token has been copied to your clipboard</source>
+  <target>Il token è stato copiato negli appunti</target>
+</trans-unit>
+<trans-unit id="s7f3edfee24690c9f">
+  <source>The token was displayed because authentik does not have permission to write to the clipboard</source>
+  <target>Il token è stato visualizzato perché Authenk non ha il permesso di scrivere negli appunti</target>
+</trans-unit>
+<trans-unit id="saf6097bfa25205b8">
+  <source>A copy of this recovery link has been placed in your clipboard</source>
+  <target>Una copia di questo collegamento di recupero è stata inserita negli appunti</target>
+</trans-unit>
+<trans-unit id="s895514dda9cb9c94">
+  <source>Create recovery link</source>
+  <target>Crea link di recupero</target>
+</trans-unit>
+<trans-unit id="se5c795faf2c07514">
+  <source>Create Recovery Link</source>
+  <target>Crea Link di Recupero</target>
+</trans-unit>
+<trans-unit id="s84fcddede27b8e2a">
+  <source>External</source>
+  <target>Esterno</target>
+</trans-unit>
+<trans-unit id="s1a635369edaf4dc3">
+  <source>Service account</source>
+  <target>Account di servizio</target>
+</trans-unit>
+<trans-unit id="sff930bf2834e2201">
+  <source>Service account (internal)</source>
+  <target>Account di servizio (interno)</target>
+</trans-unit>
+<trans-unit id="s66313b45b69cfc88">
+  <source>Check the release notes</source>
+  <target>Controlla le note di rilascio</target>
+</trans-unit>
+<trans-unit id="sb4d7bae2440d9781">
+  <source>User Statistics</source>
+  <target>Statistiche degli utenti</target>
+</trans-unit>
+<trans-unit id="s0924f51b028233a3">
+  <source>&lt;No name set&gt;</source>
+  <target>&lt;No name set&gt;</target>
+</trans-unit>
+<trans-unit id="sdc9a6ad1af30572c">
+  <source>For nginx's auth_request or traefik's forwardAuth</source>
+  <target>Per l'auth_request di nginx o il forwardAuth di traefik</target>
+</trans-unit>
+<trans-unit id="sfc31264ef7ff86ef">
+  <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
+  <target>Per l'auth_request di nginx o il forwardAuth di traefik per dominio radice</target>
+</trans-unit>
+<trans-unit id="s32babfed740fd3c1">
+  <source>User type used for newly created users.</source>
+  <target>Tipo di utente utilizzato per gli utenti appena creati.</target>
+</trans-unit>
+<trans-unit id="s4a34a6be4c68ec87">
+  <source>Users created</source>
+  <target>Utenti creati</target>
+</trans-unit>
+<trans-unit id="s275c956687e2e656">
+  <source>Failed logins</source>
+  <target>Accessi falliti</target>
+</trans-unit>
+<trans-unit id="sb35c08e3a541188f">
+  <source>Also known as Client ID.</source>
+  <target>Anche conosciuto come Client ID.</target>
+</trans-unit>
+<trans-unit id="sd46fd9b647cfea10">
+  <source>Also known as Client Secret.</source>
+  <target>Anche conosciuto come Client Secret.</target>
+</trans-unit>
+<trans-unit id="s4476e9c50cfd13f4">
+  <source>Global status</source>
+  <target>Stato globale</target>
+</trans-unit>
+<trans-unit id="sd21a971eea208533">
+  <source>Vendor</source>
+  <target>Vendor</target>
+</trans-unit>
+<trans-unit id="sadadfe9dfa06d7dd">
+  <source>No sync status.</source>
+  <target>Nessuno stato di sincronizzazione.</target>
+</trans-unit>
+<trans-unit id="s2b1c81130a65a55b">
+  <source>Sync currently running.</source>
+  <target>Sync attualmente in esecuzione.</target>
+</trans-unit>
+<trans-unit id="sf36170f71cea38c2">
+  <source>Connectivity</source>
+  <target>Connettività</target>
+</trans-unit>
+<trans-unit id="sd94e99af8b41ff54">
+  <source>0: Too guessable: risky password. (guesses &amp;lt; 10^3)</source>
+  <target>0: Troppo indovinabile: password rischiosa. (tentativi &amp;lt; 10^3)</target>
+</trans-unit>
+<trans-unit id="sc926385d1a624c3a">
+  <source>1: Very guessable: protection from throttled online attacks. (guesses &amp;lt; 10^6)</source>
+  <target>1: Molto indovinabile: protezione dagli attacchi online limitati. (tentativi &amp;lt; 10^6)</target>
+</trans-unit>
+<trans-unit id="s8aae61c41319602c">
+  <source>2: Somewhat guessable: protection from unthrottled online attacks. (guesses &amp;lt; 10^8)</source>
+  <target>2: Abbastanza indovinabile: protezione dagli attacchi online senza limitazioni. (tentativi &amp;lt; 10^8)</target>
+</trans-unit>
+<trans-unit id="sc1f4b57e722a89d6">
+  <source>3: Safely unguessable: moderate protection from offline slow-hash scenario. (guesses &amp;lt; 10^10)</source>
+  <target>3: Difficilmente indovinabile: protezione moderata dallo scenario offline con hashing lento. (tentativi &amp;lt; 10^10)</target>
+</trans-unit>
+<trans-unit id="sd47f3d3c9741343d">
+  <source>4: Very unguessable: strong protection from offline slow-hash scenario. (guesses &amp;gt;= 10^10)</source>
+  <target>4: Molto difficilmente indovinabile: forte protezione dallo scenario offline con hash lento. (tentativi &amp;gt;= 10^10)</target>
+</trans-unit>
+<trans-unit id="s3d2a8b86a4f5a810">
+  <source>Successfully created user and added to group <x id="0" equiv-text="${this.group.name}"/></source>
+  <target>Utente creato correttamente e aggiunto al gruppo</target>
+</trans-unit>
+<trans-unit id="s824e0943a7104668">
+  <source>This user will be added to the group &quot;<x id="0" equiv-text="${this.targetGroup.name}"/>&quot;.</source>
+  <target>Questo utente verrà aggiunto al gruppo &quot;
+            &quot;.</target>
+</trans-unit>
+<trans-unit id="s62e7f6ed7d9cb3ca">
+  <source>Pretend user exists</source>
+  <target>Fingere che l'utente esista</target>
+</trans-unit>
+<trans-unit id="s52bdc80690a9a8dc">
+  <source>When enabled, the stage will always accept the given user identifier and continue.</source>
+  <target>Se abilitato, lo stadio accetterà sempre l'identificatore dell'utente dato e continuerà.</target>
+</trans-unit>
+<trans-unit id="scda8dc24b561e205">
+  <source>There was an error in the application.</source>
+  <target>C'è stato un errore nell'applicazione.</target>
+</trans-unit>
+<trans-unit id="sdaca9c2c0361ed3a">
+  <source>Review the application.</source>
+  <target>Rivedi l'applicazione.</target>
+</trans-unit>
+<trans-unit id="sb50000a8fada5672">
+  <source>There was an error in the provider.</source>
+  <target>C'è stato un errore nel provider.</target>
+</trans-unit>
+<trans-unit id="s21f95eaf151d4ce3">
+  <source>Review the provider.</source>
+  <target>Rivedere il fornitore.</target>
+</trans-unit>
+<trans-unit id="s9fd39a5cb20b4e61">
+  <source>There was an error</source>
+  <target>C'è stato un errore</target>
+</trans-unit>
+<trans-unit id="s7a6b3453209e1066">
+  <source>There was an error creating the application, but no error message was sent. Please review the server logs.</source>
+  <target>Si è verificato un errore creando l'applicazione, ma non è stato inviato alcun messaggio di errore. Si prega di rivedere i registri del server.</target>
+</trans-unit>
+<trans-unit id="s1a711c19cda48375">
+  <source>Configure LDAP Provider</source>
+  <target>Configurare il provider LDAP</target>
+</trans-unit>
+<trans-unit id="s9368e965b5c292ab">
+  <source>Configure OAuth2/OpenId Provider</source>
+  <target>Configura provider OAuth2/OpenID</target>
+</trans-unit>
+<trans-unit id="sf5cbccdc6254c8dc">
+  <source>Configure Proxy Provider</source>
+  <target>Configurare Proxy Provider</target>
+</trans-unit>
+<trans-unit id="s2c8c6f89089b31d4">
+  <source>Configure Radius Provider</source>
+  <target>Configurare il provider del raggio</target>
+</trans-unit>
+<trans-unit id="sfe906cde5dddc041">
+  <source>Configure SAML Provider</source>
+  <target>Configurare il provider SAML</target>
+</trans-unit>
+<trans-unit id="sb3defbacd01ad972">
+  <source>Property mappings used for user mapping.</source>
+  <target>Mappature delle proprietà utilizzate per la mappatura degli utenti.</target>
+</trans-unit>
+<trans-unit id="s7ccce0ec8d228db6">
+  <source>Configure SCIM Provider</source>
+  <target>Configurare il provider SCIM</target>
+</trans-unit>
+<trans-unit id="sd7728d2b6e1d25e9">
+  <source>Property mappings used for group creation.</source>
+  <target>Mapping di proprietà utilizzati per la creazione di gruppo.</target>
+</trans-unit>
+<trans-unit id="s7513372fe60f6387">
+  <source>Event volume</source>
+  <target>Volume degli eventi</target>
+</trans-unit>
+<trans-unit id="s047a5f0211fedc72">
+  <source>Require Outpost (flow can only be executed from an outpost).</source>
+  <target>Richiedere un avamposto (il flusso può essere eseguito solo da un avamposto).</target>
+</trans-unit>
+<trans-unit id="s3271da6c18c25b18">
+  <source>Connection settings.</source>
+  <target>Impostazioni connessione.</target>
+</trans-unit>
+<trans-unit id="s2f4ca2148183d692">
+  <source>Successfully updated endpoint.</source>
+  <target>Endpoint aggiornato correttamente.</target>
+</trans-unit>
+<trans-unit id="s5adee855dbe191d9">
+  <source>Successfully created endpoint.</source>
+  <target>Endpoint creato correttamente.</target>
+</trans-unit>
+<trans-unit id="s61e136c0658e27d5">
+  <source>Protocol</source>
+  <target>Protocollo</target>
+</trans-unit>
+<trans-unit id="sa062b019ff0c8809">
+  <source>RDP</source>
+  <target>RDP</target>
+</trans-unit>
+<trans-unit id="s97f9bf19fa5b57d1">
+  <source>SSH</source>
+  <target>SSH</target>
+</trans-unit>
+<trans-unit id="s7c100119e9ffcc32">
+  <source>VNC</source>
+  <target>VNC</target>
+</trans-unit>
+<trans-unit id="s6b05f9d8801fc14f">
+  <source>Host</source>
+  <target>Host</target>
+</trans-unit>
+<trans-unit id="sb474f652a2c2fc76">
+  <source>Hostname/IP to connect to.</source>
+  <target>Hostname/IP a cui connettersi.</target>
+</trans-unit>
+<trans-unit id="s8276649077e8715c">
+  <source>Endpoint(s)</source>
+  <target>Endpoint(s)</target>
+</trans-unit>
+<trans-unit id="sf1dabfe0fe8a75ad">
+  <source>Update Endpoint</source>
+  <target>Aggiorna Endpoint</target>
+</trans-unit>
+<trans-unit id="s008496c7716b9812">
+  <source>These bindings control which users will have access to this endpoint. Users must also have access to the application.</source>
+  <target>Questi legami controllano i quali gli utenti avranno accesso a questo endpoint. Gli utenti devono anche avere accesso all'applicazione.</target>
+</trans-unit>
+<trans-unit id="s38e7cd1a24e70faa">
+  <source>Create Endpoint</source>
+  <target>Crea Endpoint</target>
+</trans-unit>
+<trans-unit id="s168565f5ac74a89f">
+  <source>Update RAC Provider</source>
+  <target>Aggiorna il fornitore di rac</target>
+</trans-unit>
+<trans-unit id="s8465a2caa2d9ea5d">
+  <source>Endpoints</source>
+  <target>Endpoints</target>
+</trans-unit>
+<trans-unit id="s9857d883d8eb98fc">
+  <source>General settings</source>
+  <target>Impostazioni generali</target>
+</trans-unit>
+<trans-unit id="sd2066881798a1b96">
+  <source>RDP settings</source>
+  <target>Impostazioni RDP</target>
+</trans-unit>
+<trans-unit id="sb864dc36a463a155">
+  <source>Ignore server certificate</source>
+  <target>Ignora certificato server</target>
+</trans-unit>
+<trans-unit id="s20366a8d1eaaca54">
+  <source>Enable wallpaper</source>
+  <target>Abilita sfondo</target>
+</trans-unit>
+<trans-unit id="s1e44c5350ef7598c">
+  <source>Enable font-smoothing</source>
+  <target>Abilita lo smussamento dei caratteri</target>
+</trans-unit>
+<trans-unit id="s04ff5d6ae711e6d6">
+  <source>Enable full window dragging</source>
+  <target>Abilita il trascinamento della finestra completa</target>
+</trans-unit>
+<trans-unit id="s663ccbfdf27e8dd0">
+  <source>Network binding</source>
+  <target>Binding di rete</target>
+</trans-unit>
+<trans-unit id="sb108a06693c67753">
+  <source>No binding</source>
+  <target>Nessun legame</target>
+</trans-unit>
+<trans-unit id="s5aab90c74f1233b8">
+  <source>Bind ASN</source>
+  <target>Lega asn</target>
+</trans-unit>
+<trans-unit id="s488303b048afe83b">
+  <source>Bind ASN and Network</source>
+  <target>Lega l'ASN e la rete</target>
+</trans-unit>
+<trans-unit id="s3268dcfe0c8234dc">
+  <source>Bind ASN, Network and IP</source>
+  <target>Lega ASN, rete e IP</target>
+</trans-unit>
+<trans-unit id="s226381aca231644f">
+  <source>Configure if sessions created by this stage should be bound to the Networks they were created in.</source>
+  <target>Configurare se le sessioni create da questa fase dovrebbero essere legate alle reti in cui sono state create.</target>
+</trans-unit>
+<trans-unit id="s2555a1f20f3fd93e">
+  <source>GeoIP binding</source>
+  <target>Binding GEOIP</target>
+</trans-unit>
+<trans-unit id="s3d63c78f93c9a92e">
+  <source>Bind Continent</source>
+  <target>Lega Continente</target>
+</trans-unit>
+<trans-unit id="s395d5863b3a259b5">
+  <source>Bind Continent and Country</source>
+  <target>Lega il continente e il paese</target>
+</trans-unit>
+<trans-unit id="s625ea0c32b4b136c">
+  <source>Bind Continent, Country and City</source>
+  <target>Lega il continente, il paese e la città</target>
+</trans-unit>
+<trans-unit id="s4bc7a1a88961be90">
+  <source>Configure if sessions created by this stage should be bound to their GeoIP-based location</source>
+  <target>Configurare se le sessioni create da questa fase dovrebbero essere legate alla loro posizione basata su GEOIP</target>
+</trans-unit>
+<trans-unit id="sa06cd519ff151b6d">
+  <source>RAC</source>
+  <target>Rac</target>
+</trans-unit>
+<trans-unit id="s28b99b59541f54ca">
+  <source>Connection failed after <x id="0" equiv-text="${this.connectionAttempt}"/> attempts.</source>
+  <target>Connessione fallita dopo <x id="0" equiv-text="${this.connectionAttempt}"/> tentativi.</target>
+</trans-unit>
+<trans-unit id="s7c7d956418e1c8c8">
+  <source>Re-connecting in <x id="0" equiv-text="${Math.max(1, delay / 1000)}"/> second(s).</source>
+  <target>Ri-connessione in <x id="0" equiv-text="${Math.max(1, delay / 1000)}"/> secondo(i).</target>
+</trans-unit>
+<trans-unit id="sfc003381f593d943">
+  <source>Connecting...</source>
+  <target>Connessione...</target>
+</trans-unit>
+<trans-unit id="s31aa94a0b3c7edb2">
+  <source>Select endpoint to connect to</source>
+  <target>Seleziona Endpoint a cui connettersi</target>
+</trans-unit>
+<trans-unit id="sa2ea0fcd3ffa80e0">
+  <source>Connection expiry</source>
+  <target>Scadenza della connessione</target>
+</trans-unit>
+<trans-unit id="s6dd297c217729828">
+  <source>Determines how long a session lasts before being disconnected and requiring re-authorization.</source>
+  <target>Determina quanto dura una sessione prima di essere disconnessa e richiedere una riautorizzazione.</target>
+</trans-unit>
+<trans-unit id="s31f1afc1bfe1cb3a">
+  <source>Learn more</source>
+  <target>Per saperne di più</target>
+</trans-unit>
+<trans-unit id="sc39f6abf0daedb0f">
+  <source>Maximum concurrent connections</source>
+  <target>Connessioni simultanee massime</target>
+</trans-unit>
+<trans-unit id="s62418cbcd2a25498">
+  <source>Maximum concurrent allowed connections to this endpoint. Can be set to -1 to disable the limit.</source>
+  <target>Connessioni simultanee massime consentite a questo endpoint. Può essere impostato su -1 per disabilitare il limite.</target>
+</trans-unit>
+<trans-unit id="s94d61907ee22a8c1">
+  <source>Korean</source>
+  <target>Coreano</target>
+</trans-unit>
+<trans-unit id="s95d56e58f816d211">
+  <source>Dutch</source>
+  <target>Olandese</target>
+</trans-unit>
+<trans-unit id="s744401846fea6e76">
+  <source>Brand</source>
+  <target>Brand</target>
+</trans-unit>
+<trans-unit id="sab21e1f62676b56c">
+  <source>Successfully updated brand.</source>
+  <target>Brand aggiornato con successo.</target>
+</trans-unit>
+<trans-unit id="sa43e43fd3a23e22d">
+  <source>Successfully created brand.</source>
+  <target>Brand creato con successo.</target>
+</trans-unit>
+<trans-unit id="s41b3f9b4c98aabd9">
+  <source>Use this brand for each domain that doesn't have a dedicated brand.</source>
+  <target>Usa questo marchio per ogni dominio che non ha un marchio dedicato.</target>
+</trans-unit>
+<trans-unit id="s17260b71484b307f">
+  <source>Set custom attributes using YAML or JSON. Any attributes set here will be inherited by users, if the request is handled by this brand.</source>
+  <target>Imposta attributi personalizzati utilizzando YAML o JSON. Eventuali attributi impostati qui saranno ereditati dagli utenti, se la richiesta viene gestita da questo marchio.</target>
+</trans-unit>
+<trans-unit id="s79fc990a2b58f27f">
+  <source>Brands</source>
+  <target>Brands</target>
+</trans-unit>
+<trans-unit id="s02774bc46a167346">
+  <source>Brand(s)</source>
+  <target>Brand(s)</target>
+</trans-unit>
+<trans-unit id="s801bf3d03f4a3ff1">
+  <source>Update Brand</source>
+  <target>Aggiorna Brand</target>
+</trans-unit>
+<trans-unit id="s5c3efec5330e0000">
+  <source>Create Brand</source>
+  <target>Crea Brand</target>
+</trans-unit>
+<trans-unit id="sa9d13ce9e83aac17">
+  <source>To let a user directly reset a their password, configure a recovery flow on the currently active brand.</source>
+  <target>Per consentire a un utente di ripristinare direttamente una propria password, configurare un flusso di recupero sul marchio attualmente attivo.</target>
+</trans-unit>
+<trans-unit id="s6709b81e1ed4e39f">
+  <source>The current brand must have a recovery flow configured to use a recovery link</source>
+  <target>L'attuale marchio deve avere un flusso di ripristino configurato per utilizzare un collegamento di recupero</target>
+</trans-unit>
+<trans-unit id="s634e2fd82c397576">
+  <source>Successfully updated settings.</source>
+  <target>Impostazioni aggiornate.</target>
+</trans-unit>
+<trans-unit id="sb8e4edaea6f1d935">
+  <source>Avatars</source>
+  <target>Avatars</target>
+</trans-unit>
+<trans-unit id="s945856050217c828">
+  <source>Configure how authentik should show avatars for users. The following values can be set:</source>
+  <target>Configurare come Authenk dovrebbe mostrare avatar per gli utenti. È possibile impostare i seguenti valori:</target>
+</trans-unit>
+<trans-unit id="sf4ef4c8ce713f775">
+  <source>Disables per-user avatars and just shows a 1x1 pixel transparent picture</source>
+  <target>Disabilita gli avatar per utente e mostra solo un'immagine trasparente da 1x1 pixel</target>
+</trans-unit>
+<trans-unit id="s5446842a7e4a963b">
+  <source>Uses gravatar with the user's email address</source>
+  <target>Utilizza Gravatar con l'indirizzo email dell'utente</target>
+</trans-unit>
+<trans-unit id="s35363b9e1cc2abd3">
+  <source>Generated avatars based on the user's name</source>
+  <target>Avatar generati in base al nome dell'utente</target>
+</trans-unit>
+<trans-unit id="s48110ca292cad513">
+  <source>Any URL: If you want to use images hosted on another server, you can set any URL. Additionally, these placeholders can be used:</source>
+  <target>Qualsiasi URL: se si desidera utilizzare le immagini ospitate su un altro server, è possibile impostare qualsiasi URL. Inoltre, possono essere utilizzati questi segnaposto:</target>
+</trans-unit>
+<trans-unit id="sbe1dfda044bdc93b">
+  <source>The user's username</source>
+  <target>Nome utente</target>
+</trans-unit>
+<trans-unit id="s653f257c9c2d4dc5">
+  <source>The email address, md5 hashed</source>
+  <target>L'indirizzo e -mail, hashed MD5</target>
+</trans-unit>
+<trans-unit id="s9c9183cd80916b4f">
+  <source>The user's UPN, if set (otherwise an empty string)</source>
+  <target>L'utente è UPN, se impostato (altrimenti una stringa vuota)</target>
+</trans-unit>
+<trans-unit id="h4963ed14d7e239a9">
+  <source>An attribute path like
+                                    <x id="0" equiv-text="&lt;code&gt;"/>attributes.something.avatar<x id="1" equiv-text="&lt;/code&gt;"/>, which can be used in
+                                    combination with the file field to allow users to upload custom
+                                    avatars for themselves.</source>
+  <target>Un percorso di attributo come
+            attributi.something.avatar
+            , che può essere usato in
+ Combinazione con il campo File per consentire agli utenti di caricare personalizzati
+ avatar per se stessi.</target>
+</trans-unit>
+<trans-unit id="s4c80c34a67a6f1c9">
+  <source>Multiple values can be set, comma-separated, and authentik will fallback to the next mode when no avatar could be found.</source>
+  <target>È possibile impostare più valori, separati da virgole e Authenk scenderà alla modalità successiva quando non è stato possibile trovare un avatar.</target>
+</trans-unit>
+<trans-unit id="h2fafcc3ebafea2f8">
+  <source>For example, setting this to <x id="0" equiv-text="&lt;code&gt;"/>gravatar,initials<x id="1" equiv-text="&lt;/code&gt;"/> will
+                                attempt to get an avatar from Gravatar, and if the user has not
+                                configured on there, it will fallback to a generated avatar.</source>
+  <target>Ad esempio, impostarlo su
+            gravatar, iniziali
+            Volere
+ tentare di ottenere un avatar da Gravatar e se l'utente non ha
+ Configurato lì, ricadrà in un avatar generato.</target>
+</trans-unit>
+<trans-unit id="s5faec5eb5faf62ac">
+  <source>Allow users to change name</source>
+  <target>Permetti agli utenti di cambiare nome</target>
+</trans-unit>
+<trans-unit id="s078ffec0257621c0">
+  <source>Enable the ability for users to change their name.</source>
+  <target>Abilita la possibilità agli utenti di cambiare il proprio nome.</target>
+</trans-unit>
+<trans-unit id="s456d88f3679190fd">
+  <source>Allow users to change email</source>
+  <target>Consenti agli utenti di modificare l'email</target>
+</trans-unit>
+<trans-unit id="s5fc6c14d106f40d3">
+  <source>Enable the ability for users to change their email.</source>
+  <target>Consentire agli utenti di modificare la propria email.</target>
+</trans-unit>
+<trans-unit id="s628e414bb2367057">
+  <source>Allow users to change username</source>
+  <target>Consenti agli utenti di cambiare nome utente</target>
+</trans-unit>
+<trans-unit id="s6d816a95ca43a99d">
+  <source>Enable the ability for users to change their username.</source>
+  <target>Consentire agli utenti di modificare il proprio nome utente.</target>
+</trans-unit>
+<trans-unit id="s57b52b60ed5e2bc7">
+  <source>Footer links</source>
+  <target>Footer links</target>
+</trans-unit>
+<trans-unit id="s166b59f3cc5d8ec3">
+  <source>GDPR compliance</source>
+  <target>Conformità GDPR</target>
+</trans-unit>
+<trans-unit id="sb8b23770f899e5bb">
+  <source>When enabled, all the events caused by a user will be deleted upon the user's deletion.</source>
+  <target>Se abilitata, tutti gli eventi causati da un utente verranno eliminati al momento dell'eliminazione dell'utente.</target>
+</trans-unit>
+<trans-unit id="s29501761df0fe837">
+  <source>Impersonation</source>
+  <target>Impersonazione</target>
+</trans-unit>
+<trans-unit id="s8f503553d8432487">
+  <source>Globally enable/disable impersonation.</source>
+  <target>Abilita/disabilita globalmente l'impersonificazione.</target>
+</trans-unit>
+<trans-unit id="see1eb81c1f734079">
+  <source>System settings</source>
+  <target>Impostazioni di sistema</target>
+</trans-unit>
+<trans-unit id="s47fb5504f693775b">
+  <source>Changes made:</source>
+  <target>Cambiamenti effettuati:</target>
+</trans-unit>
+<trans-unit id="s506b6a19d12f414c">
+  <source>Key</source>
+  <target>Chiave</target>
+</trans-unit>
+<trans-unit id="s4fc9dc73245eab09">
+  <source>Previous value</source>
+  <target>Precedente valore</target>
+</trans-unit>
+<trans-unit id="scb3b0671d7b7f640">
+  <source>New value</source>
+  <target>Nuovo valore</target>
+</trans-unit>
+<trans-unit id="s4a642406b0745917">
+  <source>Raw event info</source>
+  <target>Informazioni sull'evento grezzo</target>
+</trans-unit>
+<trans-unit id="sa65e7bc7ddd3484d">
+  <source>Anonymous user</source>
+  <target>Utente anonimo</target>
+</trans-unit>
+<trans-unit id="s0db494ff61b48438">
+  <source>Add All Available</source>
+  <target>Aggiungi Tutti Disponibili</target>
+</trans-unit>
+<trans-unit id="s2f68faa5b84ee9fd">
+  <source>Remove All Available</source>
+  <target>Rimuovi Tutti Disponibili</target>
+</trans-unit>
+<trans-unit id="s0ba85594344a5c02">
+  <source>Remove All</source>
+  <target>Rimuovi Tutti</target>
+</trans-unit>
+<trans-unit id="s1efa17e3407e0f56">
+  <source>Available options</source>
+  <target>Opzioni disponibili</target>
+</trans-unit>
+<trans-unit id="s886db4d476f66522">
+  <source>Selected options</source>
+  <target>Opzioni selezionate</target>
+</trans-unit>
+<trans-unit id="sd429eba21dd59f44">
+  <source><x id="0" equiv-text="${availableCount}"/> item(s) marked to add.</source>
+  <target><x id="0" equiv-text="${availableCount}"/> elemento(i) contrassegnato per l'aggiunta.</target>
+</trans-unit>
+<trans-unit id="s4abfe4e0d0665fd1">
+  <source><x id="0" equiv-text="${selectedTotal}"/> item(s) selected.</source>
+  <target><x id="0" equiv-text="${selectedTotal}"/> elemento(i) selezionato.</target>
+</trans-unit>
+<trans-unit id="s56b3d54118c34b2f">
+  <source><x id="0" equiv-text="${selectedCount}"/> item(s) marked to remove.</source>
+  <target><x id="0" equiv-text="${selectedCount}"/> elemento(i) contrassegnato per la rimozione.</target>
+</trans-unit>
+<trans-unit id="scb76a63c68b0d81f">
+  <source>Available Applications</source>
+  <target>Applicazioni disponibili</target>
+</trans-unit>
+<trans-unit id="sd176021da2ea0fe3">
+  <source>Selected Applications</source>
+  <target>Applicazioni selezionate</target>
+</trans-unit>
+<trans-unit id="s862505f29064fc72">
+  <source>This option configures the footer links on the flow executor pages. It must be a valid YAML or JSON list and can be used as follows:</source>
+  <target>Questa opzione configura i collegamenti a piè di pagina sulle pagine dell'esecutore di flusso. Deve essere un elenco YAML o JSON valido e può essere utilizzato come segue:</target>
+</trans-unit>
+<trans-unit id="s6d3f81dc4bcacbda">
+  <source>Last used</source>
+  <target>Ultimo utilizzo</target>
+</trans-unit>
+<trans-unit id="s96b2703420bfbd0c">
+  <source>OAuth Access Tokens</source>
+  <target>OAuth Access Tokens</target>
+</trans-unit>
+<trans-unit id="sd99e668c54f78f6e">
+  <source>Credentials / Tokens</source>
+  <target>Credenziali / Tokens</target>
+</trans-unit>
+<trans-unit id="saada50e84c7c646d">
+  <source>Permissions set on users which affect this object.</source>
+  <target>Autorizzazioni impostate sugli utenti che influenzano questo oggetto.</target>
+</trans-unit>
+<trans-unit id="s37d1b74df205b528">
+  <source>Permissions set on roles which affect this object.</source>
+  <target>Autorizzazioni impostate su ruoli che influenzano questo oggetto.</target>
+</trans-unit>
+<trans-unit id="sc443bfff8a5dd106">
+  <source>Permissions assigned to this user which affect all object instances of a given type.</source>
+  <target>Autorizzazioni assegnate a questo utente che influiscono su tutte le istanze degli oggetti di un determinato tipo.</target>
+</trans-unit>
+<trans-unit id="s3eba09a350b7d6c9">
+  <source>Permissions assigned to this user affecting specific object instances.</source>
+  <target>Autorizzazioni assegnate a questo utente che influisce su istanze specifiche degli oggetti.</target>
+</trans-unit>
+<trans-unit id="s17032e57ba222d2f">
+  <source>Permissions assigned to this role which affect all object instances of a given type.</source>
+  <target>Autorizzazioni assegnate a questo ruolo che influiscono su tutte le istanze degli oggetti di un determinato tipo.</target>
+</trans-unit>
+<trans-unit id="sb9b51124d1b3dca0">
+  <source>JWT payload</source>
+  <target>JWT payload</target>
+</trans-unit>
+<trans-unit id="sbd065743a0c599e3">
+  <source>Preview for user</source>
+  <target>Anteprima per l'utente</target>
+</trans-unit>
+<trans-unit id="se16b4d412ad1aba9">
+  <source>Brand name</source>
+  <target>Nome Brand</target>
+</trans-unit>
+<trans-unit id="sb7e68dcad68a638c">
+  <source>Remote Access Provider</source>
+  <target>Remote Access Provider</target>
+</trans-unit>
+<trans-unit id="sfb1980a471b7dfb6">
+  <source>Remotely access computers/servers via RDP/SSH/VNC</source>
+  <target>Accesso remoto a computers/servers via RDP/SSH/VNC</target>
+</trans-unit>
+<trans-unit id="s9ffdea131dddb3c5">
+  <source>Configure Remote Access Provider Provider</source>
+  <target>Configurare provider di provider di accesso remoto</target>
+</trans-unit>
+<trans-unit id="s56bc67239b9255a2">
+  <source>Delete authorization on disconnect</source>
+  <target>Elimina l'autorizzazione su disconnessione</target>
+</trans-unit>
+<trans-unit id="s3945449bd524d8a5">
+  <source>When enabled, connection authorizations will be deleted when a client disconnects. This will force clients with flaky internet connections to re-authorize the endpoint.</source>
+  <target>Se abilitato, le autorizzazioni di connessione verranno eliminate quando un client si disconnette. Ciò costringerà i clienti con connessioni Internet traballante per autorizzare nuovamente l'endpoint.</target>
+</trans-unit>
+<trans-unit id="sc93712b5fbdc6810">
+  <source>Connection Token(s)</source>
+  <target>Connection Token (i)</target>
+</trans-unit>
+<trans-unit id="s526a525cdc79bbdc">
+  <source>Endpoint</source>
+  <target>Endpoint</target>
+</trans-unit>
+<trans-unit id="s5c18f85cda6e89be">
+  <source>Connections</source>
+  <target>Connessioni</target>
+</trans-unit>
+<trans-unit id="s269a190f0086d892">
+  <source>Unconfigured</source>
+  <target>Non configurato</target>
+</trans-unit>
+<trans-unit id="s9e24bec94ec23dc9">
+  <source>This option will not be changed by this mapping.</source>
+  <target>Questa opzione non verrà modificata da questa mappatura.</target>
+</trans-unit>
+<trans-unit id="sac428446e9e41f54">
+  <source>RAC Connections</source>
+  <target>Connessioni RAC</target>
+</trans-unit>
+<trans-unit id="s39002897db60bb28">
+  <source>Sending Duo push notification...</source>
+  <target>Invio notifica push Duo in corso...</target>
+</trans-unit>
+<trans-unit id="sd2b8c1caa0340ed6">
+  <source>Failed to authenticate</source>
+  <target>Autenticazione fallita</target>
+</trans-unit>
+<trans-unit id="sffef1a8596bc58bb">
+  <source>Authenticating...</source>
+  <target>Autenticazione...</target>
+</trans-unit>
+<trans-unit id="sd12f594a3184c056">
+  <source>Customization</source>
+  <target>Personalizzazione</target>
+</trans-unit>
+<trans-unit id="s363abde8a254ea5f">
+  <source>Authentication failed. Please try again.</source>
+  <target>Autenticazione fallita. Per favore riprova.</target>
+</trans-unit>
+<trans-unit id="sb0821a9e92cac5eb">
+  <source>Failed to register. Please try again.</source>
+  <target>Registrazione fallita. Per favore riprova.</target>
+</trans-unit>
+<trans-unit id="s238784fc1dc672ae">
+  <source>Registering...</source>
+  <target>Registrazione...</target>
+</trans-unit>
+<trans-unit id="s009bd1c98a9f5de2">
+  <source>Failed to register</source>
+  <target>Registrazione fallita</target>
+</trans-unit>
+<trans-unit id="sb166ce92e8e807d6">
+  <source>Retry registration</source>
+  <target>Riprova registrazione</target>
+</trans-unit>
+<trans-unit id="s6ecfc18dbfeedd76">
+  <source>Select one of the options below to continue.</source>
+  <target>Seleziona una delle opzioni qui sotto per continuare.</target>
+</trans-unit>
+<trans-unit id="s00bcaadd620a11f8">
+  <source>Latest version unknown</source>
+  <target>Ultima versione sconosciuta</target>
+</trans-unit>
+<trans-unit id="s10fedec3a779ea63">
+  <source>Timestamp</source>
+  <target>Timestamp</target>
+</trans-unit>
+<trans-unit id="s48e186fb300e5464">
+  <source>Time</source>
+  <target>Orario</target>
+</trans-unit>
+<trans-unit id="saa8aa81ad6f055fd">
+  <source>Level</source>
+  <target>Livello</target>
+</trans-unit>
+<trans-unit id="sd0ea7366ebc403ff">
+  <source>Event</source>
+  <target>Evento</target>
+</trans-unit>
+<trans-unit id="s225f3e57c6a0d635">
+  <source>Logger</source>
+  <target>Logger</target>
+</trans-unit>
+<trans-unit id="s39d6971531a270b6">
+  <source>Update internal password on login</source>
+  <target>Aggiorna la password interna all'accesso</target>
+</trans-unit>
+<trans-unit id="sefe04e319223a3d6">
+  <source>When the user logs in to authentik using this source password backend, update their credentials in authentik.</source>
+  <target>Quando l'utente accede ad Authenk utilizzando questo backend di password di origine, aggiorna le loro credenziali in Autenik.</target>
+</trans-unit>
+<trans-unit id="s5f43af3669b1e098">
+  <source>Source</source>
+  <target>Sorgente</target>
+</trans-unit>
+<trans-unit id="sd9f752de8448bcc9">
+  <source>Resume timeout</source>
+  <target>Riprendi il timeout</target>
+</trans-unit>
+<trans-unit id="s517954806d7610f2">
+  <source>Amount of time a user can take to return from the source to continue the flow.</source>
+  <target>La quantità di tempo che un utente può dedicare per tornare dall'origine per continuare il flusso.</target>
+</trans-unit>
+<trans-unit id="s8c4bc6e515949112">
+  <source>Your Install ID</source>
+  <target>Il tuo ID di installazione</target>
+</trans-unit>
+<trans-unit id="s8cc0075913c67566">
+  <source>Enter the email associated with your account, and we'll send you a link to reset your password.</source>
+  <target>Inserisci l'e -mail associata al tuo account e ti invieremo un link per reimpostare la password.</target>
+</trans-unit>
+<trans-unit id="s06bfe45ffef2cf60">
+  <source>Stage name: <x id="0" equiv-text="${this.challenge.name}"/></source>
+  <target>Nome fase: <x id="0" equiv-text="${this.challenge.name}"/></target>
+</trans-unit>
+<trans-unit id="s90064dd5c4dde2c6">
+  <source>Please scan the QR code above using the Microsoft Authenticator, Google Authenticator, or other authenticator apps on your device, and enter the code the device displays below to finish setting up the MFA device.</source>
+  <target>Scansiona il codice QR sopra utilizzando Microsoft Authenticator, Google Authenticator o altre app di Autenticator sul dispositivo e immettere il codice visualizzato di seguito per terminare l'impostazione del dispositivo MFA.</target>
+</trans-unit>
+<trans-unit id="s02160dc6adba3456">
+  <source>Inject an OAuth or SAML Source into the flow execution. This allows for additional user verification, or to dynamically access different sources for different user identifiers (username, email address, etc).</source>
+  <target>Iniettare una sorgente OAuth o SAML nell'esecuzione del flusso. Ciò consente una verifica dell'utente aggiuntiva o di accedere dinamicamente a fonti diverse per diversi identificatori utente (nome utente, indirizzo e -mail, ecc.).</target>
+</trans-unit>
+<trans-unit id="sc7d071fb5cc1f6bf">
+  <source>A selection is required</source>
+  <target>È richiesta una selezione</target>
+</trans-unit>
+<trans-unit id="sa64fb483becc9c2c">
+  <source>Device type restrictions</source>
+  <target>Restrizioni del tipo di dispositivo</target>
+</trans-unit>
+<trans-unit id="sbb928551c84cd63f">
+  <source>Available Device types</source>
+  <target>Tipi di dispositivi disponibili</target>
+</trans-unit>
+<trans-unit id="s6446c35d6b411e53">
+  <source>Selected Device types</source>
+  <target>Tipi di dispositivi selezionati</target>
+</trans-unit>
+<trans-unit id="s1f4df216b56de4ac">
+  <source>Optionally restrict which WebAuthn device types may be used. When no device types are selected, all devices are allowed.</source>
+  <target>Facoltativamente limitare quali tipi di dispositivi WebAuthn possono essere utilizzati. Quando non vengono selezionati tipi di dispositivi, tutti i dispositivi sono consentiti.</target>
+</trans-unit>
+<trans-unit id="s23ed998c51cbe38f">
+  <source>If the user has successfully authenticated with a device in the classes listed above within this configured duration, this stage will be skipped.</source>
+  <target>Se l'utente ha autenticato correttamente con un dispositivo nelle classi sopra elencate in questa durata configurata, questa fase verrà saltata.</target>
+</trans-unit>
+<trans-unit id="s4d4f52ccfd9d6adf">
+  <source>WebAuthn-specific settings</source>
+  <target>Impostazioni specifiche WebAuthn</target>
+</trans-unit>
+<trans-unit id="sb46d2e64f64c6284">
+  <source>WebAuthn Device type restrictions</source>
+  <target>Restrizioni del tipo di dispositivo WebAuthn</target>
+</trans-unit>
+<trans-unit id="s11274960b13cf21a">
+  <source>This restriction only applies to devices created in authentik 2024.4 or later.</source>
+  <target>Questa restrizione si applica solo ai dispositivi creati in authentik 2024.4 o versione successiva.</target>
+</trans-unit>
+<trans-unit id="s4888252cbd785175">
+  <source>Default token duration</source>
+  <target>Durata token predefinita</target>
+</trans-unit>
+<trans-unit id="s25c80a16a07871ba">
+  <source>Default duration for generated tokens</source>
+  <target>Durata predefinita dei token generati</target>
+</trans-unit>
+<trans-unit id="se5c9ffc025fdf61d">
+  <source>Default token length</source>
+  <target>Lunghezza token predefinita</target>
+</trans-unit>
+<trans-unit id="sa6b2c110466d1754">
+  <source>Default length of generated tokens</source>
+  <target>Lunghezza predefinita dei token generati</target>
+</trans-unit>
+<trans-unit id="s1f25e1e20469a9ea">
+  <source>deleted</source>
+  <target>cancellato</target>
+</trans-unit>
+<trans-unit id="s0ca04e397298bc43">
+  <source>Select permissions to assign</source>
+  <target>Selezionare le autorizzazioni da assegnare</target>
+</trans-unit>
+<trans-unit id="s676d94e7e31a8075">
+  <source>SCIM Source is in preview.</source>
+  <target>La fonte SCIM è in anteprima.</target>
+</trans-unit>
+<trans-unit id="s31f1afc0a81977c1">
+  <source>Update SCIM Source</source>
+  <target>Aggiorna sorgente SCIM</target>
+</trans-unit>
+<trans-unit id="s4bb356adc8a7f85b">
+  <source>SCIM Base URL</source>
+  <target>SCIM Base URL</target>
+</trans-unit>
+<trans-unit id="sb23304fc42c5d6d9">
+  <source>Provisioned Users</source>
+  <target>Utenti forniti</target>
+</trans-unit>
+<trans-unit id="s6a81ee82b2e5ecbb">
+  <source>Provisioned Groups</source>
+  <target>Gruppi provocatori</target>
+</trans-unit>
+<trans-unit id="s10154dbd4fbc697b">
+  <source>removed</source>
+  <target>rimosso</target>
+</trans-unit>
+<trans-unit id="s30d6ff9e15e0a40a">
+  <source>Verifying...</source>
+  <target>Verifica...</target>
+</trans-unit>
+<trans-unit id="sc1673c93148583ba">
+  <source>Request failed. Please try again later.</source>
+  <target>Richiesta non riuscita. Per favore riprova più tardi.</target>
+</trans-unit>
+<trans-unit id="s85be1f5e7a0fa3b1">
+  <source>Available Roles</source>
+  <target>Ruoli disponibili</target>
+</trans-unit>
+<trans-unit id="sa59d53ee922c08b5">
+  <source>Selected Roles</source>
+  <target>Ruoli selezionati</target>
+</trans-unit>
+<trans-unit id="s7bfbf84a8ad5883f">
+  <source>Internal Service accounts are created and managed by authentik and cannot be created manually.</source>
+  <target>Gli account di servizio interni vengono creati e gestiti da Authenk e non possono essere creati manualmente.</target>
+</trans-unit>
+<trans-unit id="sb0680e5f8782db1e">
+  <source>Private key Algorithm</source>
+  <target>Algoritmo Chiave privata</target>
+</trans-unit>
+<trans-unit id="sa03cbf19feebd249">
+  <source>RSA</source>
+  <target>RSA</target>
+</trans-unit>
+<trans-unit id="sfbfccbd3e395c147">
+  <source>ECDSA</source>
+  <target>ECDSA</target>
+</trans-unit>
+<trans-unit id="sebea299e52db4242">
+  <source>Algorithm used to generate the private key.</source>
+  <target>Algoritmo usato per generare la chiave privata.</target>
+</trans-unit>
+<trans-unit id="s21e38ec6ffa2b918">
+  <source>Added ID <x id="0" equiv-text="${item}"/></source>
+  <target>ID Aggiunto <x id="0" equiv-text="${item}"/></target>
+</trans-unit>
+<trans-unit id="s74918a09ef39ed26">
+  <source>Removed ID <x id="0" equiv-text="${item}"/></source>
+  <target>ID Rimosso <x id="0" equiv-text="${item}"/></target>
+</trans-unit>
+<trans-unit id="s3a20e5d7dd70dcd3">
+  <source>Cleared</source>
+  <target>Pulito</target>
+</trans-unit>
+<trans-unit id="s8cfd29891b2c93f0">
+  <source>Google Workspace Provider</source>
+  <target>Provider Google Workspace</target>
+</trans-unit>
+<trans-unit id="sa817aa9f6f88a991">
+  <source>Credentials</source>
+  <target>Credenziali</target>
+</trans-unit>
+<trans-unit id="sc668815044e218c2">
+  <source>Delegated Subject</source>
+  <target>Soggetto delegato</target>
+</trans-unit>
+<trans-unit id="se89a9ecf275e4343">
+  <source>Default group email domain</source>
+  <target>Dominio e -mail del gruppo predefinito</target>
+</trans-unit>
+<trans-unit id="s64a0a6da6ed6d680">
+  <source>Default domain that is used to generate a group's email address. Can be customized using property mappings.</source>
+  <target>Dominio predefinito che viene utilizzato per generare l'indirizzo e -mail di un gruppo. Può essere personalizzato utilizzando mapping di proprietà.</target>
+</trans-unit>
+<trans-unit id="sd061e65955e036ca">
+  <source>User deletion action</source>
+  <target>Azione di cancellazione dell'utente</target>
+</trans-unit>
+<trans-unit id="s87f86f65b5e19ea7">
+  <source>User is deleted</source>
+  <target>Utente cancellato</target>
+</trans-unit>
+<trans-unit id="s3906cd4a102867a3">
+  <source>Suspend</source>
+  <target>Sospendi</target>
+</trans-unit>
+<trans-unit id="s0bf5b364e2c79392">
+  <source>User is suspended, and connection to user in authentik is removed.</source>
+  <target>L'utente viene sospeso e la connessione all'utente in Autenik viene rimossa.</target>
+</trans-unit>
+<trans-unit id="s4acb0250d735c2a9">
+  <source>Do Nothing</source>
+  <target>Fai Nulla</target>
+</trans-unit>
+<trans-unit id="s5fe525d19499ed47">
+  <source>The connection is removed but the user is not modified</source>
+  <target>La connessione viene rimossa ma l'utente non viene modificato</target>
+</trans-unit>
+<trans-unit id="s676a0127c35d240a">
+  <source>Determines what authentik will do when a User is deleted.</source>
+  <target>Determina cosa farà Authenk quando viene eliminato un utente.</target>
+</trans-unit>
+<trans-unit id="sd1aa04cc32caf2b0">
+  <source>Group deletion action</source>
+  <target>Azione di cancellazione del gruppo</target>
+</trans-unit>
+<trans-unit id="s874c788479481131">
+  <source>Group is deleted</source>
+  <target>Gruppo cancellato</target>
+</trans-unit>
+<trans-unit id="s0983fa9b84e4a9f7">
+  <source>The connection is removed but the group is not modified</source>
+  <target>La connessione viene rimossa ma il gruppo non viene modificato</target>
+</trans-unit>
+<trans-unit id="sdb872a9f425937fa">
+  <source>Determines what authentik will do when a Group is deleted.</source>
+  <target>Determina cosa farà Authenk quando viene eliminato un gruppo.</target>
+</trans-unit>
+<trans-unit id="sa5f28f1ad0bee45b">
+  <source>Google Workspace Provider is in preview.</source>
+  <target>Il provider di Google Workspace è in anteprima.</target>
+</trans-unit>
+<trans-unit id="s958928ab6208d748">
+  <source>Microsoft Entra Provider</source>
+  <target>Fornitore Microsoft Entra</target>
+</trans-unit>
+<trans-unit id="sc7d6bc4aebb58fe9">
+  <source>Google Cloud credentials file.</source>
+  <target>File di credenziali di Google Cloud.</target>
+</trans-unit>
+<trans-unit id="s2e707072d5a9615d">
+  <source>Email address of the user the actions of authentik will be delegated to.</source>
+  <target>Indirizzo e -mail dell'utente Le azioni di Authenk saranno delegate.</target>
+</trans-unit>
+<trans-unit id="s03a759e65ceb722d">
+  <source>Client ID for the app registration.</source>
+  <target>ID client per la registrazione dell'app.</target>
+</trans-unit>
+<trans-unit id="s479980cf9252628c">
+  <source>Client secret for the app registration.</source>
+  <target>Segreto del cliente per la registrazione dell'app.</target>
+</trans-unit>
+<trans-unit id="s25c2392ffcb78df2">
+  <source>Tenant ID</source>
+  <target>Tenant ID</target>
+</trans-unit>
+<trans-unit id="s89e4e698cdb1187f">
+  <source>ID of the tenant accounts will be synced into.</source>
+  <target>ID dei conti degli inquilini verrà sincronizzato.</target>
+</trans-unit>
+<trans-unit id="sf341f5dfc7a11633">
+  <source>Microsoft Entra Provider is in preview.</source>
+  <target>Microsoft Entra Provider è in anteprima.</target>
+</trans-unit>
+<trans-unit id="s79dd6df244c05ae9">
+  <source>Update Microsoft Entra Provider</source>
+  <target>Aggiorna Frontiore Microsoft Entra</target>
+</trans-unit>
+<trans-unit id="saf4b498d81141878">
+  <source>Finished successfully</source>
+  <target>Finito con successo</target>
+</trans-unit>
+<trans-unit id="s46f1d86ffec6223c">
+  <source>Finished with errors</source>
+  <target>Finito con errori</target>
+</trans-unit>
+<trans-unit id="sbd12ed8a1053a108">
+  <source>Finished <x id="0" equiv-text="${getRelativeTime(task.finishTimestamp)}"/> (<x id="1" equiv-text="${task.finishTimestamp.toLocaleString()}"/>)</source>
+  <target>Finito <x id="0" equiv-text="${getRelativeTime(task.finishTimestamp)}"/> (<x id="1" equiv-text="${task.finishTimestamp.toLocaleString()}"/>)</target>
+</trans-unit>
+<trans-unit id="sc3c334d642866997">
+  <source>Sync currently running</source>
+  <target>Sincronizzazione attualmente in esecuzione</target>
+</trans-unit>
+<trans-unit id="sd520a4089006ca93">
+  <source>Update Google Workspace Provider</source>
+  <target>Aggiorna fornitore Google Workspace</target>
+</trans-unit>
+<trans-unit id="sfdfa5bb4ddd99d70">
+  <source>Enterprise only</source>
+  <target>Solo Enterprise</target>
+</trans-unit>
+<trans-unit id="scffa59cfac1951f2">
+  <source><x id="0" equiv-text="${type.name}"/> Icon</source>
+  <target><x id="0" equiv-text="${type.name}"/> Icona</target>
+</trans-unit>
+<trans-unit id="s1da3499258024860">
+  <source><x id="0" equiv-text="${versionString}"/> (build <x id="1" equiv-text="${this.outpostHealth.buildHash.substring(0, 8)}"/>)</source>
+  <target><x id="0" equiv-text="${versionString}"/> (build <x id="1" equiv-text="${this.outpostHealth.buildHash.substring(0, 8)}"/>)</target>
+</trans-unit>
+<trans-unit id="s001fd928369d4ddc">
+  <source><x id="0" equiv-text="${versionString}"/> (FIPS)</source>
+  <target><x id="0" equiv-text="${versionString}"/> (FIPS)</target>
+</trans-unit>
+<trans-unit id="sce17c2bdea3e6ace">
+  <source>Score minimum threshold</source>
+  <target>Soglia minima punteggio</target>
+</trans-unit>
+<trans-unit id="sf2fcb974c62625fc">
+  <source>Minimum required score to allow continuing</source>
+  <target>Punteggio minimo per permettere la continuazione</target>
+</trans-unit>
+<trans-unit id="s7452199a73ce8b78">
+  <source>Score maximum threshold</source>
+  <target>Soglia massima punteggio</target>
+</trans-unit>
+<trans-unit id="s2d3a6cd50b46b44d">
+  <source>Maximum allowed score to allow continuing</source>
+  <target>Punteggio massimo per permettere la continuazione</target>
+</trans-unit>
+<trans-unit id="s9d6e40d9a9a58fbf">
+  <source>Error on invalid score</source>
+  <target>Errore al punteggio invalido</target>
+</trans-unit>
+<trans-unit id="s2af59e2f9f12847a">
+  <source>When enabled and the resultant score is outside the threshold, the user will not be able to continue. When disabled, the user will be able to continue and the score can be used in policies to customize further stages.</source>
+  <target>Se abilitato e il punteggio risultante non rientra nella soglia, l'utente non sarà in grado di continuare. Una volta disabilitato, l'utente potrà continuare e il punteggio potrà essere utilizzato nelle policy per personalizzare ulteriori fasi.</target>
+</trans-unit>
+<trans-unit id="s10092327ad833090">
+  <source>Microsoft Entra Group(s)</source>
+  <target>Gruppo(i) Microsoft Entra</target>
+</trans-unit>
+<trans-unit id="s811c45ad24a5feae">
+  <source>Microsoft Entra User(s)</source>
+  <target>Utente(i) Microsoft Entra</target>
+</trans-unit>
+<trans-unit id="s7d2d3d298fdccfc8">
+  <source>Google Workspace Group(s)</source>
+  <target>Gruppo(i) Google Workspace</target>
+</trans-unit>
+<trans-unit id="s8c9cf2c004755526">
+  <source>Google Workspace User(s)</source>
+  <target>Utente(i) Google Workspace</target>
+</trans-unit>
+<trans-unit id="sd000b42fea07c34a">
+  <source>SCIM Group(s)</source>
+  <target>Gruppo(i) SCIM</target>
+</trans-unit>
+<trans-unit id="s146769fb55f1ee50">
+  <source>SCIM User(s)</source>
+  <target>Utente(i) SCIM</target>
+</trans-unit>
+<trans-unit id="s35f47dbd321aaf15">
+  <source>FIPS compliance: passing</source>
+  <target>Conformità FIPS: superata</target>
+</trans-unit>
+<trans-unit id="sc94578030c702562">
+  <source>Unverified</source>
+  <target>Non verificato</target>
+</trans-unit>
+<trans-unit id="s16749cce7c4c1589">
+  <source>FIPS compliance: unverified</source>
+  <target>Conformità FIPS: non verificata</target>
+</trans-unit>
+<trans-unit id="s0b2ad58c3deaa8dd">
+  <source>FIPS Status</source>
+  <target>Stato FIPS</target>
+</trans-unit>
+<trans-unit id="s4facec1106c91cf9">
+  <source>Search returned no results.</source>
+  <target>La ricerca non ha restituito risultati.</target>
+</trans-unit>
+<trans-unit id="s23446284b56ca0cc">
+  <source>Reputation score(s)</source>
+  <target>Punteggio della reputazione</target>
+</trans-unit>
+<trans-unit id="s7a64ac07061f85b2">
+  <source>See documentation</source>
+  <target>Vedi documentazione</target>
+</trans-unit>
+<trans-unit id="se166e95fe447ebcd">
+  <source>Close dialog</source>
+  <target>Chiudere dialogo</target>
+</trans-unit>
+<trans-unit id="s3dc14a4b8129f989">
+  <source>Pagination</source>
+  <target>Impaginazione</target>
+</trans-unit>
+<trans-unit id="s6d46b842e227be57">
+  <source>Application Details</source>
+  <target>Dettagli dell'applicazione</target>
+</trans-unit>
+<trans-unit id="s76415a60e548cafe">
+  <source>Provider Configuration</source>
+  <target>Configurazione del provider</target>
+</trans-unit>
+<trans-unit id="sde59c64619570b57">
+  <source>Submit Application</source>
+  <target>Invia domanda</target>
+</trans-unit>
+<trans-unit id="sf2da0e95c78f2cb7">
+  <source>Restore Application Wizard Hint</source>
+  <target>Ripristina il suggerimento per la procedura guidata dell'applicazione</target>
+</trans-unit>
+<trans-unit id="s76dc6d0d1a7db8e2">
+  <source>Your authentik password</source>
+  <target>La tua password Authenk</target>
+</trans-unit>
+<trans-unit id="se3a34af2a05c5c98">
+  <source>Internal Service account</source>
+  <target>Conto di servizio interno</target>
+</trans-unit>
+<trans-unit id="s681c086b8f7afcae">
+  <source>Global</source>
+  <target>Globale</target>
+</trans-unit>
+<trans-unit id="s1b85e6ac2978a2c0">
+  <source>Outpost integrations</source>
+  <target>Integrazioni di avamposto</target>
+</trans-unit>
+<trans-unit id="sec55a3a7f18615ec">
+  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
+  <target>Le integrazioni di avamposto definiscono come Authenk si collega a piattaforme esterne per gestire e distribuire gli avamposti.</target>
+</trans-unit>
+<trans-unit id="s74d86eb7e5a10fdf">
+  <source>Operation failed to complete</source>
+  <target>L'operazione non è stata completata</target>
+</trans-unit>
+<trans-unit id="sc0448bc8a76227cb">
+  <source>Failed to fetch objects: </source>
+  <target>Impossibile recuperare gli oggetti:</target>
+</trans-unit>
+<trans-unit id="s233a0201fde4a38d">
+  <source>Available Scopes</source>
+  <target>Scopi disponibili</target>
+</trans-unit>
+<trans-unit id="s631b3419f6dfd031">
+  <source>Selected Scopes</source>
+  <target>Scopi selezionati</target>
+</trans-unit>
+<trans-unit id="s81d76cccf339a43c">
+  <source>Available Property Mappings</source>
+  <target>Mapping di proprietà disponibili</target>
+</trans-unit>
+<trans-unit id="se9195c05c61d8ef8">
+  <source>Selected Property Mappings</source>
+  <target>Mapping di proprietà selezionati</target>
+</trans-unit>
+<trans-unit id="s0619413371f33083">
+  <source>Available User Property Mappings</source>
+  <target>Mapping di proprietà utente disponibili</target>
+</trans-unit>
+<trans-unit id="sbb46aed99e712337">
+  <source>Selected User Property Mappings</source>
+  <target>Mapping di proprietà utente selezionati</target>
+</trans-unit>
+<trans-unit id="se84ebf32648e6a63">
+  <source>Available Group Property Mappings</source>
+  <target>Mapping di proprietà del gruppo disponibili</target>
+</trans-unit>
+<trans-unit id="seaf9f9ecb99568c7">
+  <source>Selected Group Property Mappings</source>
+  <target>Mapping di proprietà del gruppo selezionati</target>
+</trans-unit>
+<trans-unit id="sc362f1f1e4044878">
+  <source>Ensure the user satisfies requirements of geography or network topology, based on IP address. If any of the configured values match, the policy passes.</source>
+  <target>Assicurarsi che l'utente soddisfi i requisiti di geografia o topologia di rete, in base all'indirizzo IP. Se uno qualsiasi dei valori configurati corrisponde, la politica passa.</target>
+</trans-unit>
+<trans-unit id="s26c2828bf8db525e">
+  <source>ASNs</source>
+  <target>Asns</target>
+</trans-unit>
+<trans-unit id="s72ee4dd6cfa6e10d">
+  <source>List of autonomous system numbers. Comma separated. E.g. 13335, 15169, 20940</source>
+  <target>Elenco dei numeri di sistema autonomi. Virgola separata. Per esempio. 13335, 15169, 20940</target>
+</trans-unit>
+<trans-unit id="s77fbb0a6d145442d">
+  <source>Countries</source>
+  <target>Paesi</target>
+</trans-unit>
+<trans-unit id="sdd277e10884a7272">
+  <source>Available Countries</source>
+  <target>Paesi disponibili</target>
+</trans-unit>
+<trans-unit id="s7a93139fb12ebf96">
+  <source>Selected Countries</source>
+  <target>Paesi selezionati</target>
+</trans-unit>
+<trans-unit id="s375a13497266db93">
+  <source>Bind existing policy/group/user</source>
+  <target>Associa la politica/gruppo/utente esistente</target>
+</trans-unit>
+<trans-unit id="s8e2de27afeb78e5a">
+  <source>Property mappings for user creation.</source>
+  <target>Mapping di proprietà per la creazione dell'utente.</target>
+</trans-unit>
+<trans-unit id="s045cf2d851164d5a">
+  <source>Property mappings for group creation.</source>
+  <target>Mapping di proprietà per la creazione di gruppo.</target>
+</trans-unit>
+<trans-unit id="s9642f1d8ee6e787d">
+  <source>Link to a group with identical name. Can have security implications when a group is used with another source</source>
+  <target>Collegamento a un gruppo con nome identico. Può avere implicazioni di sicurezza quando un gruppo viene utilizzato con un'altra fonte</target>
+</trans-unit>
+<trans-unit id="s485964f83b5ed044">
+  <source>Use the group's name, but deny enrollment when the name already exists</source>
+  <target>Usa il nome del gruppo, ma nega l'iscrizione quando esiste già il nome</target>
+</trans-unit>
+<trans-unit id="s2b1b532c5271b296">
+  <source>Group matching mode</source>
+  <target>Modalità di abbinamento di gruppo</target>
+</trans-unit>
+<trans-unit id="s704381cea57e5a12">
+  <source>OAuth Attribute mapping</source>
+  <target>Mappatura degli attributi OAuth</target>
+</trans-unit>
+<trans-unit id="s4b9501c321dc4922">
+  <source>Plex Attribute mapping</source>
+  <target>Mappatura degli attributi plex</target>
+</trans-unit>
+<trans-unit id="s6135938c50ad8a4b">
+  <source>Encryption Certificate</source>
+  <target>Certificato di crittografia</target>
+</trans-unit>
+<trans-unit id="s37b8d48b9416fc25">
+  <source>When selected, encrypted assertions will be decrypted using this keypair.</source>
+  <target>Quando selezionati, le asserzioni crittografate verranno decrittografate usando questo tasto.</target>
+</trans-unit>
+<trans-unit id="s924a87f37bc0201e">
+  <source>SAML Attribute mapping</source>
+  <target>Mappatura degli attributi SAML</target>
+</trans-unit>
+<trans-unit id="sf0532ddee3b4e977">
+  <source>SCIM Attribute mapping</source>
+  <target>Mappatura degli attributi SCIM</target>
+</trans-unit>
+<trans-unit id="sd61a4f736ac0a98e">
+  <source>External user settings</source>
+  <target>Impostazioni utente esterne</target>
+</trans-unit>
+<trans-unit id="sdc4f72f6a46ae2c8">
+  <source>Default application</source>
+  <target>Applicazione predefinita</target>
+</trans-unit>
+<trans-unit id="sac85801a25b7bb27">
+  <source>When configured, external users will automatically be redirected to this application when not attempting to access a different application</source>
+  <target>Se configurati, gli utenti esterni verranno automaticamente reindirizzati a questa applicazione quando non si tenta di accedere a un'applicazione diversa</target>
+</trans-unit>
+<trans-unit id="s9f4d6296b906d591">
+  <source>Warning: One or more license(s) have expired.</source>
+  <target>ATTENZIONE: una o più licenze sono scadute.</target>
+</trans-unit>
+<trans-unit id="s3b016caea59af3ef">
+  <source>Warning: One or more license(s) will expire within the next 2 weeks.</source>
+  <target>ATTENZIONE: una o più licenze scadranno entro le prossime 2 settimane.</target>
+</trans-unit>
+<trans-unit id="sd8a5f7269b7ac7a3">
+  <source>Caution: This authentik instance has entered read-only mode due to expired/exceeded licenses.</source>
+  <target>ATTENZIONE: questa istanza Authenk ha inserito la modalità di sola lettura a causa delle licenze scadute/superate.</target>
+</trans-unit>
+<trans-unit id="se8c58e65674b6847">
+  <source>This authentik instance uses a Trial license.</source>
+  <target>Questa istanza Authenk utilizza una licenza di prova.</target>
+</trans-unit>
+<trans-unit id="s6ee52309e586eb18">
+  <source>This authentik instance uses a Non-production license.</source>
+  <target>Questa istanza Authenk utilizza una patente di non produzione.</target>
+</trans-unit>
+<trans-unit id="s4a799b4562ab2051">
+  <source>Access Tokens(s)</source>
+  <target>Accesso a token (i)</target>
+</trans-unit>
+<trans-unit id="s4ae42fa672dd72bc">
+  <source>Created at</source>
+  <target>Creato a</target>
+</trans-unit>
+<trans-unit id="see1f8a5c8e11c5ab">
+  <source>Last updated at</source>
+  <target>Ultimo aggiornamento a</target>
+</trans-unit>
+<trans-unit id="s82dd7087cd1471ab">
+  <source>Last used at</source>
+  <target>Ultimo usato a</target>
+</trans-unit>
+<trans-unit id="s9dda0789d278f5c5">
+  <source>Provide users with a 'show password' button.</source>
+  <target>Fornisci agli utenti un pulsante &quot;Mostra password&quot;.</target>
+</trans-unit>
+<trans-unit id="s2f7f35f6a5b733f5">
+  <source>Show password</source>
+  <target>Mostra password</target>
+</trans-unit>
+<trans-unit id="s452f791e0ff6a13e">
+  <source>Hide password</source>
+  <target>Nascondi password</target>
+</trans-unit>
+<trans-unit id="s08272eeeddfd244e">
+  <source>An outpost is on an incorrect version!</source>
+  <target>Un avamposto è su una versione errata!</target>
+</trans-unit>
+<trans-unit id="sa30c12014e955946">
+  <source>Russian</source>
+  <target>Russo</target>
+</trans-unit>
+<trans-unit id="s354405ae02cb262d">
+  <source>Last seen: <x id="0" equiv-text="${getRelativeTime(lastSeen)}"/> (<x id="1" equiv-text="${lastSeen.toLocaleTimeString()}"/>)</source>
+  <target>Ultimo visto:
+             (
+            )</target>
+</trans-unit>
+<trans-unit id="s5aebe06e3ddf6ca9">
+  <source>Sign assertions</source>
+  <target>Segnale</target>
+</trans-unit>
+<trans-unit id="s4e2329ffa0ef6b74">
+  <source>When enabled, the assertion element of the SAML response will be signed.</source>
+  <target>Se abilitato, verrà firmato l'elemento di asserzione della risposta SAML.</target>
+</trans-unit>
+<trans-unit id="s2ad1b968b37ded68">
+  <source>Sign responses</source>
+  <target>Risposte dei segni</target>
+</trans-unit>
+<trans-unit id="sb416d07987093cd5">
+  <source>When selected, assertions will be encrypted using this keypair.</source>
+  <target>Quando selezionati, le asserzioni verranno crittografate usando questo tasto.</target>
+</trans-unit>
+<trans-unit id="sa42be520242dec2a">
+  <source>Available Sources</source>
+  <target>Fonti disponibili</target>
+</trans-unit>
+<trans-unit id="s876e75cf2c07b38e">
+  <source>Selected Sources</source>
+  <target>Fonti selezionate</target>
+</trans-unit>
+<trans-unit id="s3b579c4bb6b447ae">
+  <source>Successfully triggered sync.</source>
+  <target>Sincronizzazione attivata con successo.</target>
+</trans-unit>
+<trans-unit id="s05073d2537b45d1a">
+  <source>Sync</source>
+  <target>Sincronizzazione</target>
+</trans-unit>
+<trans-unit id="se9da93aa2e6cce21">
+  <source>Sync User</source>
+  <target>Sincronizzazione utente</target>
+</trans-unit>
+<trans-unit id="s7bd456df0becbbff">
+  <source>Available Stages</source>
+  <target>Fasi disponibili</target>
+</trans-unit>
+<trans-unit id="sf80798d2f56b540b">
+  <source>Selected Stages</source>
+  <target>Fasi selezionate</target>
+</trans-unit>
+<trans-unit id="sf651943c3ddff635">
+  <source>Available Fields</source>
+  <target>Campi disponibili</target>
+</trans-unit>
+<trans-unit id="s80ba9c5ebb7826a9">
+  <source>Selected Fields</source>
+  <target>Campi selezionati</target>
+</trans-unit>
+<trans-unit id="s26733a6289ca6f1a">
+  <source>Available Transports</source>
+  <target>Trasporti disponibili</target>
+</trans-unit>
+<trans-unit id="sa65f772cfc5aa67e">
+  <source>Selected Transports</source>
+  <target>Trasporti selezionati</target>
+</trans-unit>
+<trans-unit id="sd923f95605fed7b2">
+  <source>Expired</source>
+  <target>Scaduta</target>
+</trans-unit>
+<trans-unit id="s86959994f28077dc">
+  <source>Expiring soon</source>
+  <target>In scadenza presto</target>
+</trans-unit>
+<trans-unit id="sc60a5fba70bf5a53">
+  <source>Unlicensed</source>
+  <target>Senza licenza</target>
+</trans-unit>
+<trans-unit id="s4f9880ce82953741">
+  <source>Read Only</source>
+  <target>Solo lettura</target>
+</trans-unit>
+<trans-unit id="s4220dda46d622211">
+  <source>Valid</source>
+  <target>Valida</target>
+</trans-unit>
+<trans-unit id="sdc94711a2eb66a45">
+  <source>Current license status</source>
+  <target>Stato di licenza corrente</target>
+</trans-unit>
+<trans-unit id="se10fb73c1f1039c5">
+  <source>Overall license status</source>
+  <target>Stato complessivo della licenza</target>
+</trans-unit>
+<trans-unit id="sc4804358f202968c">
+  <source>Internal user usage</source>
+  <target>Utilizzo degli utenti interni</target>
+</trans-unit>
+<trans-unit id="s087d6f07b52b30ec">
+  <source><x id="0" equiv-text="${internalUserPercentage &lt; Infinity ? internalUserPercentage : &quot;∞&quot;}"/>%</source>
+  <target>%</target>
+</trans-unit>
+<trans-unit id="sae72e1569d34fb02">
+  <source>External user usage</source>
+  <target>Utilizzo dell'utente esterno</target>
+</trans-unit>
+<trans-unit id="sa82f8948649d0989">
+  <source>Matches Event's Client IP (strict matching, for network matching use an Expression Policy).</source>
+  <target>Corrisponde all'IP client di evento (corrispondenza rigorosa, per la corrispondenza della rete utilizza una politica di espressione).</target>
+</trans-unit>
+<trans-unit id="s6506b7c69456b0d6">
+  <source>Invalid update request.</source>
+  <target>Richiesta di aggiornamento non valida.</target>
+</trans-unit>
+<trans-unit id="s3819162efec77de1">
+  <source>Sync Group</source>
+  <target>Gruppo di sincronizzazione</target>
+</trans-unit>
+<trans-unit id="s2d5f69929bb7221d">
+  <source><x id="0" equiv-text="${prompt.name}"/> (&quot;<x id="1" equiv-text="${prompt.fieldKey}"/>&quot;, of type <x id="2" equiv-text="${prompt.type}"/>)</source>
+  <target>(&quot;
+            &quot;, di tipo
+            )</target>
+</trans-unit>
+<trans-unit id="sa38c5a2731be3a46">
+  <source>authentik was unable to save this application:</source>
+  <target>Authenk non è stato in grado di salvare questa applicazione:</target>
+</trans-unit>
+<trans-unit id="s25bacc19d98b444e">
+  <source>Parent Group</source>
+  <target>Gruppo genitore</target>
+</trans-unit>
+<trans-unit id="s0159c800f16ee1a5">
+  <source>Flow used when logging out of this provider.</source>
+  <target>Flusso usato quando si disconnette questo provider.</target>
+</trans-unit>
+<trans-unit id="s821d70ef9496e6f7">
+  <source>Unbind flow</source>
+  <target>Sblind Flow</target>
+</trans-unit>
+<trans-unit id="s6773ec2a233bbf41">
+  <source>Flow used for unbinding users.</source>
+  <target>Flusso utilizzato per gli utenti che non si muovono.</target>
+</trans-unit>
+<trans-unit id="s99060120f626df5b">
+  <source>Verify SCIM server's certificates</source>
+  <target>Verifica i certificati del server Scim</target>
+</trans-unit>
+<trans-unit id="sac88482c48453fc8">
+  <source>You've logged out of <x id="0" equiv-text="${this.challenge.applicationName}"/>. You can go back to the overview to launch another application, or log out of your authentik account.</source>
+  <target>Hai disconnesso
+            . Puoi tornare alla panoramica per avviare un'altra applicazione o disconnettersi dal tuo account Authenk.</target>
+</trans-unit>
+<trans-unit id="s3108167b562674e2">
+  <source>Go back to overview</source>
+  <target>Torna alla panoramica</target>
+</trans-unit>
+<trans-unit id="sdb749e793de55478">
+  <source>Log out of <x id="0" equiv-text="${this.challenge.brandName}"/></source>
+  <target>Disconnettersi da</target>
+</trans-unit>
+<trans-unit id="s521681ed1d5ff814">
+  <source>Log back into <x id="0" equiv-text="${this.challenge.applicationName}"/></source>
+  <target>Restituire a</target>
+</trans-unit>
+<trans-unit id="sc991a35f5e88d1d3">
+  <source>Encryption Key</source>
+  <target>Chiave di crittografia</target>
+</trans-unit>
+<trans-unit id="s8a598f7aef81c3bc">
+  <source>Key used to encrypt the tokens.</source>
+  <target>Chiave utilizzato per crittografare i token.</target>
+</trans-unit>
+<trans-unit id="sbfee780fa0a2c83e">
+  <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be deleted</source>
+  <target>Tipo di dispositivo
+            non può essere eliminato</target>
+</trans-unit>
+<trans-unit id="s336936629cdeb3e5">
+  <source>Stage used to verify users' browsers using Google Chrome Device Trust. This stage can be used in authentication/authorization flows.</source>
+  <target>Fase utilizzata per verificare i browser degli utenti utilizzando la fiducia del dispositivo Google Chrome. Questa fase può essere utilizzata nei flussi di autenticazione/autorizzazione.</target>
+</trans-unit>
+<trans-unit id="s85fe794c71b4ace8">
+  <source>Google Verified Access API</source>
+  <target>Google Verified Access API</target>
+</trans-unit>
+<trans-unit id="s013620384af7c8b4">
+  <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be edited</source>
+  <target>Tipo di dispositivo
+            non può essere modificato</target>
+</trans-unit>
+<trans-unit id="s4347135696fc7cde">
+  <source>Advanced flow settings</source>
+  <target>Impostazioni di flusso avanzate</target>
+</trans-unit>
+<trans-unit id="sf52ff57fd136cc2f">
+  <source>Enable this option to write password changes made in authentik back to Kerberos. Ignored if sync is disabled.</source>
+  <target>Abilita questa opzione di scrivere le modifiche alla password apportate in Autencik a Kerberos. Ignorato se la sincronizzazione è disabilitata.</target>
+</trans-unit>
+<trans-unit id="s14a16542f956e11d">
+  <source>Realm settings</source>
+  <target>Impostazioni Realm</target>
+</trans-unit>
+<trans-unit id="s9c2eae548d3c1c30">
+  <source>Realm</source>
+  <target>Regno</target>
+</trans-unit>
+<trans-unit id="s6b032212997e2491">
+  <source>Kerberos 5 configuration</source>
+  <target>Configurazione Kerberos 5</target>
+</trans-unit>
+<trans-unit id="sbf50181022f47de3">
+  <source>Kerberos 5 configuration. See man krb5.conf(5) for configuration format. If left empty, a default krb5.conf will be used.</source>
+  <target>Configurazione Kerberos 5. Vedi Man KRB5.CONF (5) per il formato di configurazione. Se lasciato vuoto, verrà utilizzato un KRB5.conf predefinito.</target>
+</trans-unit>
+<trans-unit id="s2386539a0bd62fab">
+  <source>Sync connection settings</source>
+  <target>Impostazioni di connessione sincronizzate</target>
+</trans-unit>
+<trans-unit id="s0d1a6f3fe81351f8">
+  <source>Sync principal</source>
+  <target>Principal di sincronizzazione</target>
+</trans-unit>
+<trans-unit id="sa691d6e1974295fa">
+  <source>Principal used to authenticate to the KDC for syncing.</source>
+  <target>Principal utilizzato per autenticare il KDC per la sincronizzazione.</target>
+</trans-unit>
+<trans-unit id="s977b9c629eed3d33">
+  <source>Sync password</source>
+  <target>Sincronizzazione della password</target>
+</trans-unit>
+<trans-unit id="s77772860385de948">
+  <source>Password used to authenticate to the KDC for syncing. Optional if Sync keytab or Sync credentials cache is provided.</source>
+  <target>Password utilizzata per autenticare il KDC per la sincronizzazione. Viene fornita una cache di sync keytab o sync di sincronizzazione opzionale.</target>
+</trans-unit>
+<trans-unit id="sc59ec59c3d5e74dc">
+  <source>Sync keytab</source>
+  <target>Sincronizzazione keytab</target>
+</trans-unit>
+<trans-unit id="scd42997958453f05">
+  <source>Keytab used to authenticate to the KDC for syncing. Optional if Sync password or Sync credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>Keytab utilizzato per autenticare il KDC per la sincronizzazione. Viene fornita una cache di sincronizzazione di sincronizzazione o sincronizzazione. Deve essere codificato da base64 o nel tipo di forma: residuo.</target>
+</trans-unit>
+<trans-unit id="s60eaf439ccdca1f2">
+  <source>Sync credentials cache</source>
+  <target>Sincronizza le credenziali cache</target>
+</trans-unit>
+<trans-unit id="s95722900b0c9026f">
+  <source>Credentials cache used to authenticate to the KDC for syncing. Optional if Sync password or Sync keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>Credenziali Cache utilizzata per autenticarsi nel KDC per la sincronizzazione. Viene fornito la password di sincronizzazione se Sync o Sync KeyTab. Deve essere nel tipo di forma: residuo.</target>
+</trans-unit>
+<trans-unit id="sf9c055db98d7994a">
+  <source>SPNEGO settings</source>
+  <target>Impostazioni spnego</target>
+</trans-unit>
+<trans-unit id="sab580a45dc46937f">
+  <source>SPNEGO server name</source>
+  <target>Nome server Spnego</target>
+</trans-unit>
+<trans-unit id="s7a79d6174d17ab2d">
+  <source>Force the use of a specific server name for SPNEGO. Must be in the form HTTP@domain</source>
+  <target>Forzare l'uso di un nome server specifico per spnego. Deve essere nel modulo http@dominio</target>
+</trans-unit>
+<trans-unit id="sa4ba2b2081472ccd">
+  <source>SPNEGO keytab</source>
+  <target>Spnego keytab</target>
+</trans-unit>
+<trans-unit id="s64adda975c1106c0">
+  <source>Keytab used for SPNEGO. Optional if SPNEGO credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>Keytab usato per spnego. Opzionale se viene fornita credenziali di spnego. Deve essere codificato da base64 o nel tipo di forma: residuo.</target>
+</trans-unit>
+<trans-unit id="s92247825b92587b5">
+  <source>SPNEGO credentials cache</source>
+  <target>Credenziali di spnego cache</target>
+</trans-unit>
+<trans-unit id="sd9757c345e4062f8">
+  <source>Credentials cache used for SPNEGO. Optional if SPNEGO keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>Credenziali Cache utilizzata per Spnego. Facoltativo se viene fornito SPNEGO keytab. Deve essere nel tipo di forma: residuo.</target>
+</trans-unit>
+<trans-unit id="s734ab8fbcae0b69e">
+  <source>Kerberos Attribute mapping</source>
+  <target>Mappatura degli attributi Kerberos</target>
+</trans-unit>
+<trans-unit id="s2c378e86e025fdb2">
+  <source>Update Kerberos Source</source>
+  <target>Aggiorna la fonte Kerberos</target>
+</trans-unit>
+<trans-unit id="s03e4044abe0b556c">
+  <source>User database + Kerberos password</source>
+  <target>Database utente + password Kerberos</target>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+  <target>Seleziona un altro metodo di autenticazione</target>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+  <target>Immettere un codice di recupero una tantum per questo utente.</target>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+  <target>Immettere il codice dal dispositivo di autenticazione.</target>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+  <target>La fonte di Kerberos è in anteprima.</target>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+  <target>Captcha Stage</target>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+  <target>Se impostato, aggiunge funzionalità come un captcha, ma nella fase di identificazione.</target>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
+  <target>anteprima dell'Endpoint Google Chrome Device Trust</target>
+</trans-unit>
+    </body>
+  </file>
+</xliff>
\ No newline at end of file
diff --git a/web/xliff/ko.xlf b/web/xliff/ko.xlf
index 2caaf0ff33..50b913657f 100644
--- a/web/xliff/ko.xlf
+++ b/web/xliff/ko.xlf
@@ -6590,11 +6590,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
         <target>코드를 입력하세요.</target>
 
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>디바이스 선택기로 돌아가기</target>
-
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7621,10 +7616,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>루트 도메인 당 Nginx의 auth_request 또는 Traefik의 forwardAuth 경우</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC 는 현재 프리뷰입니다.</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>새로 생성된 사용자에 사용되는 사용자 유형입니다.</target>
@@ -7819,9 +7810,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -8849,6 +8837,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/nl.xlf b/web/xliff/nl.xlf
index 26ee9d5583..880440b19c 100644
--- a/web/xliff/nl.xlf
+++ b/web/xliff/nl.xlf
@@ -6575,11 +6575,6 @@ Bindingen naar groepen/gebruikers worden gecontroleerd tegen de gebruiker van de
         <source>Please enter your code</source>
         <target>Voer uw code in</target>
 
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Terug naar apparaatkeuze</target>
-
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7401,9 +7396,6 @@ Bindingen naar groepen/gebruikers worden gecontroleerd tegen de gebruiker van de
 <trans-unit id="sf79f8681e5ffaee2">
   <source>Assign to new user</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="saabeb4cab074b0b9">
   <source>User Object Permissions</source>
 </trans-unit>
@@ -7491,9 +7483,6 @@ Bindingen naar groepen/gebruikers worden gecontroleerd tegen de gebruiker van de
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -8695,6 +8684,27 @@ Bindingen naar groepen/gebruikers worden gecontroleerd tegen de gebruiker van de
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/pl.xlf b/web/xliff/pl.xlf
index e12e27ea45..0746b955cf 100644
--- a/web/xliff/pl.xlf
+++ b/web/xliff/pl.xlf
@@ -6620,11 +6620,6 @@ Powiązania z grupami/użytkownikami są sprawdzane względem użytkownika zdarz
         <source>Please enter your code</source>
         <target>Proszę wprowadź swój kod</target>
         
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Wróć do wyboru urządzeń</target>
-        
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7655,10 +7650,6 @@ Powiązania z grupami/użytkownikami są sprawdzane względem użytkownika zdarz
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>Dla nginx's auth_request lub traefik's forwardAuth dla domeny głównej</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC jest w fazie zapoznawczej.</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>Typ użytkownika używany dla nowo utworzonych użytkowników.</target>
@@ -7851,10 +7842,6 @@ Powiązania z grupami/użytkownikami są sprawdzane względem użytkownika zdarz
   <source>Create Endpoint</source>
   <target>Utwórz punkt końcowy</target>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-  <target>RAC jest w fazie zapoznawczej.</target>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
   <target>Aktualizuj dostawcę RAC</target>
@@ -9114,6 +9101,27 @@ Powiązania z grupami/użytkownikami są sprawdzane względem użytkownika zdarz
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/pseudo-LOCALE.xlf b/web/xliff/pseudo-LOCALE.xlf
index f48c709c47..cd6e4f48d1 100644
--- a/web/xliff/pseudo-LOCALE.xlf
+++ b/web/xliff/pseudo-LOCALE.xlf
@@ -6578,11 +6578,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
   <target>Ƥĺēàśē ēńţēŕ ŷōũŕ ćōďē</target>
 
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-  <target>Ŕēţũŕń ţō ďēvĩćē ƥĩćķēŕ</target>
-
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7599,10 +7594,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>Ƒōŕ ńĝĩńx'ś àũţĥ_ŕēǫũēśţ ōŕ ţŕàēƒĩķ'ś ƒōŕŵàŕďÀũţĥ ƥēŕ ŕōōţ ďōḿàĩń</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>ŔßÀĆ ĩś ĩń ƥŕēvĩēŵ.</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>Ũśēŕ ţŷƥē ũśēď ƒōŕ ńēŵĺŷ ćŕēàţēď ũśēŕś.</target>
@@ -7795,10 +7786,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>Create Endpoint</source>
   <target>Ćŕēàţē Ēńďƥōĩńţ</target>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-  <target>ŔÀĆ ĩś ĩń ƥŕēvĩēŵ.</target>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
   <target>Ũƥďàţē ŔÀĆ Ƥŕōvĩďēŕ</target>
@@ -9154,4 +9141,25 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
 </trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
+</trans-unit>
 </body></file></xliff>
diff --git a/web/xliff/ru.xlf b/web/xliff/ru.xlf
index 77fe00d706..9af013b1aa 100644
--- a/web/xliff/ru.xlf
+++ b/web/xliff/ru.xlf
@@ -6619,11 +6619,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
         <target>Пожалуйста, введите ваш код</target>
         
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Вернуться к выбору устройства</target>
-        
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7654,10 +7649,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>Для nginx's auth_request или traefik's forwardAuth для корневого домена</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC находится в предварительной версии.</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>Тип пользователя, используемый для вновь созданных пользователей.</target>
@@ -7850,10 +7841,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>Create Endpoint</source>
   <target>Создать конечную точку</target>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-  <target>RAC находится в предварительной версии.</target>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
   <target>Обновить RAC провайдера</target>
@@ -9177,6 +9164,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/tr.xlf b/web/xliff/tr.xlf
index 5dd3da263d..353c972a88 100644
--- a/web/xliff/tr.xlf
+++ b/web/xliff/tr.xlf
@@ -4955,10 +4955,6 @@ Bindings to groups/users are checked against the user of the event.</source>
       <trans-unit id="s3cd84e82e83e35ad">
         <source>Please enter your code</source>
       </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>Aygıt seçiciye geri dön</target>
-      </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
         <target>Kimlik doğrulamayı yeniden deneyin</target>
@@ -5733,9 +5729,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="sfc31264ef7ff86ef">
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
 </trans-unit>
@@ -5880,9 +5873,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -6925,6 +6915,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/zh-CN.xlf b/web/xliff/zh-CN.xlf
index 391c35a696..2898bea017 100644
--- a/web/xliff/zh-CN.xlf
+++ b/web/xliff/zh-CN.xlf
@@ -1375,9 +1375,6 @@
 <trans-unit id="s9fb28be12e2c6317">
   <source>Superuser</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="sa1db89262360550b">
   <source>Send us feedback!</source>
 </trans-unit>
@@ -1914,9 +1911,6 @@ doesn't pass when either or both of the selected options are equal or above the
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -4712,9 +4706,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s3cd84e82e83e35ad">
   <source>Please enter your code</source>
 </trans-unit>
-<trans-unit id="s18b910437b73e8e8">
-  <source>Return to device picker</source>
-</trans-unit>
 <trans-unit id="se409d01b52c4e12f">
   <source>Retry authentication</source>
 </trans-unit>
@@ -5863,6 +5854,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
 </trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
+</trans-unit>
 </body>
 </file>
 </xliff>
diff --git a/web/xliff/zh-Hans.xlf b/web/xliff/zh-Hans.xlf
index 75f8ac1428..de693043ab 100644
--- a/web/xliff/zh-Hans.xlf
+++ b/web/xliff/zh-Hans.xlf
@@ -6618,11 +6618,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
         <target>请输入您的代码</target>
         
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>返回设备选择器</target>
-        
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7653,10 +7648,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>适用于按根域名配置的 nginx 的 auth_request 或 traefik 的 forwardAuth</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC 目前处于预览状态。</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>新创建用户使用的用户类型。</target>
@@ -7849,10 +7840,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>Create Endpoint</source>
   <target>创建端点</target>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-  <target>RAC 目前处于预览状态。</target>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
   <target>更新 RAC 提供程序</target>
@@ -9133,90 +9120,147 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="sbfee780fa0a2c83e">
   <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be deleted</source>
+  <target>设备类型 <x id="0" equiv-text="${device.verboseName}"/> 无法被删除</target>
 </trans-unit>
 <trans-unit id="s336936629cdeb3e5">
   <source>Stage used to verify users' browsers using Google Chrome Device Trust. This stage can be used in authentication/authorization flows.</source>
+  <target>通过 Google Chrome 设备信任来验证用户浏览器的阶段。此阶段可在身份验证/授权流程中使用。</target>
 </trans-unit>
 <trans-unit id="s85fe794c71b4ace8">
   <source>Google Verified Access API</source>
+  <target>Google Verified Access API</target>
 </trans-unit>
 <trans-unit id="s013620384af7c8b4">
   <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be edited</source>
+  <target>设备类型 <x id="0" equiv-text="${device.verboseName}"/> 无法被编辑</target>
 </trans-unit>
 <trans-unit id="s4347135696fc7cde">
   <source>Advanced flow settings</source>
+  <target>高级流程设置</target>
 </trans-unit>
 <trans-unit id="sf52ff57fd136cc2f">
   <source>Enable this option to write password changes made in authentik back to Kerberos. Ignored if sync is disabled.</source>
+  <target>启用此选项会将 authentik 作出的密码修改写入回 Kerberos。如果未启用同步则忽略。</target>
 </trans-unit>
 <trans-unit id="s14a16542f956e11d">
   <source>Realm settings</source>
+  <target>领域设置</target>
 </trans-unit>
 <trans-unit id="s9c2eae548d3c1c30">
   <source>Realm</source>
+  <target>领域</target>
 </trans-unit>
 <trans-unit id="s6b032212997e2491">
   <source>Kerberos 5 configuration</source>
+  <target>Kerberos 5 配置</target>
 </trans-unit>
 <trans-unit id="sbf50181022f47de3">
   <source>Kerberos 5 configuration. See man krb5.conf(5) for configuration format. If left empty, a default krb5.conf will be used.</source>
+  <target>Kerberos 5 配置。请阅读 man krb5.conf(5) 了解配置格式。如果留空，则使用默认的 krb5.conf。</target>
 </trans-unit>
 <trans-unit id="s2386539a0bd62fab">
   <source>Sync connection settings</source>
+  <target>同步连接设置</target>
 </trans-unit>
 <trans-unit id="s0d1a6f3fe81351f8">
   <source>Sync principal</source>
+  <target>同步主体</target>
 </trans-unit>
 <trans-unit id="sa691d6e1974295fa">
   <source>Principal used to authenticate to the KDC for syncing.</source>
+  <target>向 KDC 进行身份验证以进行同步的主体。</target>
 </trans-unit>
 <trans-unit id="s977b9c629eed3d33">
   <source>Sync password</source>
+  <target>同步密码</target>
 </trans-unit>
 <trans-unit id="s77772860385de948">
   <source>Password used to authenticate to the KDC for syncing. Optional if Sync keytab or Sync credentials cache is provided.</source>
+  <target>向 KDC 进行身份验证以进行同步的密码。如果提供了同步 Keytab 或同步凭据缓存，则此选项是可选的。</target>
 </trans-unit>
 <trans-unit id="sc59ec59c3d5e74dc">
   <source>Sync keytab</source>
+  <target>同步 Keytab</target>
 </trans-unit>
 <trans-unit id="scd42997958453f05">
   <source>Keytab used to authenticate to the KDC for syncing. Optional if Sync password or Sync credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>向 KDC 进行身份验证以进行同步的 Keytab。如果提供了同步密码或同步凭据缓存，则此选项是可选的。必须以 Base64 编码，或者形式为 TYPE:residual。</target>
 </trans-unit>
 <trans-unit id="s60eaf439ccdca1f2">
   <source>Sync credentials cache</source>
+  <target>同步凭据缓存</target>
 </trans-unit>
 <trans-unit id="s95722900b0c9026f">
   <source>Credentials cache used to authenticate to the KDC for syncing. Optional if Sync password or Sync keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>向 KDC 进行身份验证以进行同步的凭据缓存。如果提供了同步密码或同步 Keytab，则此选项是可选的。形式必须为 TYPE:residual。</target>
 </trans-unit>
 <trans-unit id="sf9c055db98d7994a">
   <source>SPNEGO settings</source>
+  <target>SPNEGO 设置</target>
 </trans-unit>
 <trans-unit id="sab580a45dc46937f">
   <source>SPNEGO server name</source>
+  <target>SPNEGO 服务器名称</target>
 </trans-unit>
 <trans-unit id="s7a79d6174d17ab2d">
   <source>Force the use of a specific server name for SPNEGO. Must be in the form HTTP@domain</source>
+  <target>强制为 SPNEGO 使用特定服务器名称。形式必须为 HTTP@域名</target>
 </trans-unit>
 <trans-unit id="sa4ba2b2081472ccd">
   <source>SPNEGO keytab</source>
+  <target>SPNEGO Keytab</target>
 </trans-unit>
 <trans-unit id="s64adda975c1106c0">
   <source>Keytab used for SPNEGO. Optional if SPNEGO credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>SPNEGO 使用的 Keytab。如果提供了 SPNEGO 凭据缓存，则此选项是可选的。必须以 Base64 编码，或者形式为 TYPE:residual。</target>
 </trans-unit>
 <trans-unit id="s92247825b92587b5">
   <source>SPNEGO credentials cache</source>
+  <target>SPNEGO 凭据缓存</target>
 </trans-unit>
 <trans-unit id="sd9757c345e4062f8">
   <source>Credentials cache used for SPNEGO. Optional if SPNEGO keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>SPNEGO 使用的凭据缓存。如果提供了 SPNEGO Keytab，则此选项是可选的。形式必须为 TYPE:residual。</target>
 </trans-unit>
 <trans-unit id="s734ab8fbcae0b69e">
   <source>Kerberos Attribute mapping</source>
+  <target>Kerberos 属性映射</target>
 </trans-unit>
 <trans-unit id="s2c378e86e025fdb2">
   <source>Update Kerberos Source</source>
+  <target>更新 Kerberos 源</target>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+  <target>用户数据库 + Kerberos 密码</target>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+  <target>选择另一种身份验证方法</target>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+  <target>为此用户输入一次性恢复代码。</target>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+  <target>请输入来自您身份验证设备的代码。</target>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+  <target>Kerberos 源目前处于预览状态。</target>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+  <target>验证码阶段</target>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+  <target>设置后，添加与验证码阶段完全相同的功能，但融入识别阶段。</target>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
+  <target>端点 Google Chrome 设备信任处于预览状态。</target>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/zh-Hant.xlf b/web/xliff/zh-Hant.xlf
index dece9bf789..e3a719aa34 100644
--- a/web/xliff/zh-Hant.xlf
+++ b/web/xliff/zh-Hant.xlf
@@ -4999,10 +4999,6 @@ Bindings to groups/users are checked against the user of the event.</source>
       <trans-unit id="s3cd84e82e83e35ad">
         <source>Please enter your code</source>
       </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>返回设备选择器</target>
-      </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
         <target>重试身份验证</target>
@@ -5781,9 +5777,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="sfc31264ef7ff86ef">
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
 </trans-unit>
@@ -5928,9 +5921,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -6973,6 +6963,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/zh_CN.xlf b/web/xliff/zh_CN.xlf
index 180d0fe97c..bf4a2750ce 100644
--- a/web/xliff/zh_CN.xlf
+++ b/web/xliff/zh_CN.xlf
@@ -6618,11 +6618,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
         <target>请输入您的代码</target>
         
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>返回设备选择器</target>
-        
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7653,10 +7648,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>适用于按根域名配置的 nginx 的 auth_request 或 traefik 的 forwardAuth</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC 目前处于预览状态。</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>新创建用户使用的用户类型。</target>
@@ -7849,10 +7840,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>Create Endpoint</source>
   <target>创建端点</target>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-  <target>RAC 目前处于预览状态。</target>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
   <target>更新 RAC 提供程序</target>
@@ -9130,6 +9117,150 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s8a598f7aef81c3bc">
   <source>Key used to encrypt the tokens.</source>
   <target>用于加密令牌的密钥。</target>
+</trans-unit>
+<trans-unit id="sbfee780fa0a2c83e">
+  <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be deleted</source>
+  <target>设备类型 <x id="0" equiv-text="${device.verboseName}"/> 无法被删除</target>
+</trans-unit>
+<trans-unit id="s336936629cdeb3e5">
+  <source>Stage used to verify users' browsers using Google Chrome Device Trust. This stage can be used in authentication/authorization flows.</source>
+  <target>通过 Google Chrome 设备信任来验证用户浏览器的阶段。此阶段可在身份验证/授权流程中使用。</target>
+</trans-unit>
+<trans-unit id="s85fe794c71b4ace8">
+  <source>Google Verified Access API</source>
+  <target>Google Verified Access API</target>
+</trans-unit>
+<trans-unit id="s013620384af7c8b4">
+  <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be edited</source>
+  <target>设备类型 <x id="0" equiv-text="${device.verboseName}"/> 无法被编辑</target>
+</trans-unit>
+<trans-unit id="s4347135696fc7cde">
+  <source>Advanced flow settings</source>
+  <target>高级流程设置</target>
+</trans-unit>
+<trans-unit id="sf52ff57fd136cc2f">
+  <source>Enable this option to write password changes made in authentik back to Kerberos. Ignored if sync is disabled.</source>
+  <target>启用此选项会将 authentik 作出的密码修改写入回 Kerberos。如果未启用同步则忽略。</target>
+</trans-unit>
+<trans-unit id="s14a16542f956e11d">
+  <source>Realm settings</source>
+  <target>领域设置</target>
+</trans-unit>
+<trans-unit id="s9c2eae548d3c1c30">
+  <source>Realm</source>
+  <target>领域</target>
+</trans-unit>
+<trans-unit id="s6b032212997e2491">
+  <source>Kerberos 5 configuration</source>
+  <target>Kerberos 5 配置</target>
+</trans-unit>
+<trans-unit id="sbf50181022f47de3">
+  <source>Kerberos 5 configuration. See man krb5.conf(5) for configuration format. If left empty, a default krb5.conf will be used.</source>
+  <target>Kerberos 5 配置。请阅读 man krb5.conf(5) 了解配置格式。如果留空，则使用默认的 krb5.conf。</target>
+</trans-unit>
+<trans-unit id="s2386539a0bd62fab">
+  <source>Sync connection settings</source>
+  <target>同步连接设置</target>
+</trans-unit>
+<trans-unit id="s0d1a6f3fe81351f8">
+  <source>Sync principal</source>
+  <target>同步主体</target>
+</trans-unit>
+<trans-unit id="sa691d6e1974295fa">
+  <source>Principal used to authenticate to the KDC for syncing.</source>
+  <target>向 KDC 进行身份验证以进行同步的主体。</target>
+</trans-unit>
+<trans-unit id="s977b9c629eed3d33">
+  <source>Sync password</source>
+  <target>同步密码</target>
+</trans-unit>
+<trans-unit id="s77772860385de948">
+  <source>Password used to authenticate to the KDC for syncing. Optional if Sync keytab or Sync credentials cache is provided.</source>
+  <target>向 KDC 进行身份验证以进行同步的密码。如果提供了同步 Keytab 或同步凭据缓存，则此选项是可选的。</target>
+</trans-unit>
+<trans-unit id="sc59ec59c3d5e74dc">
+  <source>Sync keytab</source>
+  <target>同步 Keytab</target>
+</trans-unit>
+<trans-unit id="scd42997958453f05">
+  <source>Keytab used to authenticate to the KDC for syncing. Optional if Sync password or Sync credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>向 KDC 进行身份验证以进行同步的 Keytab。如果提供了同步密码或同步凭据缓存，则此选项是可选的。必须以 Base64 编码，或者形式为 TYPE:residual。</target>
+</trans-unit>
+<trans-unit id="s60eaf439ccdca1f2">
+  <source>Sync credentials cache</source>
+  <target>同步凭据缓存</target>
+</trans-unit>
+<trans-unit id="s95722900b0c9026f">
+  <source>Credentials cache used to authenticate to the KDC for syncing. Optional if Sync password or Sync keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>向 KDC 进行身份验证以进行同步的凭据缓存。如果提供了同步密码或同步 Keytab，则此选项是可选的。形式必须为 TYPE:residual。</target>
+</trans-unit>
+<trans-unit id="sf9c055db98d7994a">
+  <source>SPNEGO settings</source>
+  <target>SPNEGO 设置</target>
+</trans-unit>
+<trans-unit id="sab580a45dc46937f">
+  <source>SPNEGO server name</source>
+  <target>SPNEGO 服务器名称</target>
+</trans-unit>
+<trans-unit id="s7a79d6174d17ab2d">
+  <source>Force the use of a specific server name for SPNEGO. Must be in the form HTTP@domain</source>
+  <target>强制为 SPNEGO 使用特定服务器名称。形式必须为 HTTP@域名</target>
+</trans-unit>
+<trans-unit id="sa4ba2b2081472ccd">
+  <source>SPNEGO keytab</source>
+  <target>SPNEGO Keytab</target>
+</trans-unit>
+<trans-unit id="s64adda975c1106c0">
+  <source>Keytab used for SPNEGO. Optional if SPNEGO credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
+  <target>SPNEGO 使用的 Keytab。如果提供了 SPNEGO 凭据缓存，则此选项是可选的。必须以 Base64 编码，或者形式为 TYPE:residual。</target>
+</trans-unit>
+<trans-unit id="s92247825b92587b5">
+  <source>SPNEGO credentials cache</source>
+  <target>SPNEGO 凭据缓存</target>
+</trans-unit>
+<trans-unit id="sd9757c345e4062f8">
+  <source>Credentials cache used for SPNEGO. Optional if SPNEGO keytab is provided. Must be in the form TYPE:residual.</source>
+  <target>SPNEGO 使用的凭据缓存。如果提供了 SPNEGO Keytab，则此选项是可选的。形式必须为 TYPE:residual。</target>
+</trans-unit>
+<trans-unit id="s734ab8fbcae0b69e">
+  <source>Kerberos Attribute mapping</source>
+  <target>Kerberos 属性映射</target>
+</trans-unit>
+<trans-unit id="s2c378e86e025fdb2">
+  <source>Update Kerberos Source</source>
+  <target>更新 Kerberos 源</target>
+</trans-unit>
+<trans-unit id="s03e4044abe0b556c">
+  <source>User database + Kerberos password</source>
+  <target>用户数据库 + Kerberos 密码</target>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+  <target>选择另一种身份验证方法</target>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+  <target>为此用户输入一次性恢复代码。</target>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+  <target>请输入来自您身份验证设备的代码。</target>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+  <target>Kerberos 源目前处于预览状态。</target>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+  <target>验证码阶段</target>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+  <target>设置后，添加与验证码阶段完全相同的功能，但融入识别阶段。</target>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
+  <target>端点 Google Chrome 设备信任处于预览状态。</target>
 </trans-unit>
     </body>
   </file>
diff --git a/web/xliff/zh_TW.xlf b/web/xliff/zh_TW.xlf
index 24c0e9870b..9b0ecbbc54 100644
--- a/web/xliff/zh_TW.xlf
+++ b/web/xliff/zh_TW.xlf
@@ -6566,11 +6566,6 @@ Bindings to groups/users are checked against the user of the event.</source>
         <source>Please enter your code</source>
         <target>請輸入您的認證碼</target>
 
-      </trans-unit>
-      <trans-unit id="s18b910437b73e8e8">
-        <source>Return to device picker</source>
-        <target>回到選擇裝置頁面</target>
-
       </trans-unit>
       <trans-unit id="se409d01b52c4e12f">
         <source>Retry authentication</source>
@@ -7595,10 +7590,6 @@ Bindings to groups/users are checked against the user of the event.</source>
   <source>For nginx's auth_request or traefik's forwardAuth per root domain</source>
   <target>適用於每個主網域的 nginx 的「auth_request」或 traefik 的「forwardAuth」</target>
 </trans-unit>
-<trans-unit id="sc615309d10a9228c">
-  <source>RBAC is in preview.</source>
-  <target>RBAC 正處於預覽版本。</target>
-</trans-unit>
 <trans-unit id="s32babfed740fd3c1">
   <source>User type used for newly created users.</source>
   <target>用於建立使用者的使用者類型。</target>
@@ -7765,9 +7756,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s38e7cd1a24e70faa">
   <source>Create Endpoint</source>
 </trans-unit>
-<trans-unit id="s4770c10e5b1c028c">
-  <source>RAC is in preview.</source>
-</trans-unit>
 <trans-unit id="s168565f5ac74a89f">
   <source>Update RAC Provider</source>
 </trans-unit>
@@ -8810,6 +8798,27 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s03e4044abe0b556c">
   <source>User database + Kerberos password</source>
+</trans-unit>
+<trans-unit id="s98bb2ae796f1ceef">
+  <source>Select another authentication method</source>
+</trans-unit>
+<trans-unit id="s21d95b4651ad7a1e">
+  <source>Enter a one-time recovery code for this user.</source>
+</trans-unit>
+<trans-unit id="s2e1d5a7d320c25ef">
+  <source>Enter the code from your authenticator device.</source>
+</trans-unit>
+<trans-unit id="scc1a17d28912e974">
+  <source>Kerberos Source is in preview.</source>
+</trans-unit>
+<trans-unit id="s54154a8d64a3597b">
+  <source>Captcha stage</source>
+</trans-unit>
+<trans-unit id="s0c250af62ddbf801">
+  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
+</trans-unit>
+<trans-unit id="sabf8a430d504f8c8">
+  <source>Endpoint Google Chrome Device Trust is in preview.</source>
 </trans-unit>
     </body>
   </file>
diff --git a/website/docs/add-secure-apps/flows-stages/flow/context/index.md b/website/docs/add-secure-apps/flows-stages/flow/context/index.md
index 55fd7c186f..6a66a3b8ca 100644
--- a/website/docs/add-secure-apps/flows-stages/flow/context/index.md
+++ b/website/docs/add-secure-apps/flows-stages/flow/context/index.md
@@ -112,7 +112,7 @@ An optional list of all permissions that will be given to the application by gra
 
 #### Deny stage
 
-##### `deny_message` (string) <span class="badge badge--version">authentik 2023.10+</span>
+##### `deny_message` (string) <span class="badge badge--version">authentik 2023.10+</span>
 
 Optionally overwrite the deny message shown, has a higher priority than the message configured in the stage.
 
@@ -128,7 +128,7 @@ If set, this must be a list of group objects and not group names.
 
 Path the `pending_user` will be written to. If not set in the flow, falls back to the value set in the user_write stage, and otherwise to the `users` path.
 
-##### `user_type` (string) <span class="badge badge--version">authentik 2023.10+</span>
+##### `user_type` (string) <span class="badge badge--version">authentik 2023.10+</span>
 
 Type the `pending_user` will be created as. Must be one of `internal`, `external` or `service_account`.
 
diff --git a/website/docs/add-secure-apps/flows-stages/stages/authenticator_duo/index.md b/website/docs/add-secure-apps/flows-stages/stages/authenticator_duo/index.md
index 005e0a9187..304a7f0cff 100644
--- a/website/docs/add-secure-apps/flows-stages/stages/authenticator_duo/index.md
+++ b/website/docs/add-secure-apps/flows-stages/stages/authenticator_duo/index.md
@@ -10,7 +10,7 @@ Copy all of the integration key, secret key and API hostname, and paste them in
 
 Devices created reference the stage they were created with, since the API credentials are needed to authenticate. This also means when the stage is deleted, all devices are removed.
 
-## Importing users <span class="badge badge--version">authentik 2022.9+</span>
+## Importing users <span class="badge badge--version">authentik 2022.9+</span>
 
 :::info
 Due to the way the Duo API works, authentik can only automatically import existing Duo users when a Duo MFA or higher license is active.
@@ -20,7 +20,7 @@ To import a device, open the Stages list in the authentik Admin interface. On th
 
 The Duo username can be found by navigating to your Duo Admin dashboard and selecting _Users_ in the sidebar. Optionally if you have multiple users with the same username, you can click on a User and copy their ID from the URL, and use that to import the device.
 
-### Older versions <span class="badge badge--version">authentik 2021.9.1+</span>
+### Older versions <span class="badge badge--version">authentik 2021.9.1+</span>
 
 You can call the `/api/v3/stages/authenticator/duo/{stage_uuid}/import_devices/` endpoint ([see here](https://goauthentik.io/api/#post-/stages/authenticator/duo/-stage_uuid-/import_devices/)) using the following parameters:
 
diff --git a/website/docs/add-secure-apps/flows-stages/stages/authenticator_endpoint_gdtc/index.md b/website/docs/add-secure-apps/flows-stages/stages/authenticator_endpoint_gdtc/index.md
index 0969417904..05195bce23 100644
--- a/website/docs/add-secure-apps/flows-stages/stages/authenticator_endpoint_gdtc/index.md
+++ b/website/docs/add-secure-apps/flows-stages/stages/authenticator_endpoint_gdtc/index.md
@@ -3,6 +3,7 @@ title: Endpoint Authenticator Google Device Trust Connector Stage
 ---
 
 <span class="badge badge--primary">Enterprise</span>
+<span class="badge badge--preview">Preview</span>
 <span class="badge badge--version">authentik 2024.10+</span>
 
 ---
diff --git a/website/docs/add-secure-apps/flows-stages/stages/authenticator_validate/index.md b/website/docs/add-secure-apps/flows-stages/stages/authenticator_validate/index.md
index 907a967e19..bbe7a1e7bf 100644
--- a/website/docs/add-secure-apps/flows-stages/stages/authenticator_validate/index.md
+++ b/website/docs/add-secure-apps/flows-stages/stages/authenticator_validate/index.md
@@ -5,10 +5,10 @@ title: Authenticator validation stage
 This stage validates an already configured Authenticator Device. This device has to be configured using any of the other authenticator stages:
 
 -   [Duo authenticator stage](../authenticator_duo/index.md)
--   [SMS authenticator stage](../authenticator_sms/index.md).
--   [Static authenticator stage](../authenticator_static/index.md).
+-   [SMS authenticator stage](../authenticator_sms/index.md)
+-   [Static authenticator stage](../authenticator_static/index.md)
 -   [TOTP authenticator stage](../authenticator_totp/index.md)
--   [WebAuth authenticator stage](../authenticator_webauthn/index.md).
+-   [WebAuthn authenticator stage](../authenticator_webauthn/index.md)
 
 You can select which type of device classes are allowed.
 
@@ -75,3 +75,7 @@ Optionally restrict which WebAuthn device types can be used to authenticate.
 When no restriction is set, all WebAuthn devices a user has registered are allowed.
 
 These restrictions only apply to WebAuthn devices created with authentik 2024.4 or later.
+
+#### Automatic device selection
+
+If the user has more than one device, the user is prompted to select which device they want to use for validation. After the user successfully authenticates with a certain device, that device is marked as "last used". In subsequent prompts by the Authenticator validation stage, the last used device is automatically selected for the user. Should they wish to use another device, the user can return to the device selection screen.
diff --git a/website/docs/add-secure-apps/flows-stages/stages/identification/index.md b/website/docs/add-secure-apps/flows-stages/stages/identification/index.md
index 5bbe682782..d759cbbcba 100644
--- a/website/docs/add-secure-apps/flows-stages/stages/identification/index.md
+++ b/website/docs/add-secure-apps/flows-stages/stages/identification/index.md
@@ -16,7 +16,15 @@ Select which fields the user can use to identify themselves. Multiple fields can
 
 ## Password stage
 
-To prompt users for their password on the same step as identifying themselves, a password stage can be selected here. If a password stage is selected in the Identification stage, the password stage should not be bound to the flow.
+To prompt users for their password on the same step as identifying themselves, a Password stage can be selected here. If a Password stage is selected in the Identification stage, the Password stage should not be bound to the flow.
+
+## CAPTCHA stage
+
+:::warning
+The CAPTCHA stage you use must be configured to use the "Invisible" mode, otherwise the widget will be rendered incorrectly.
+:::
+
+To run a CAPTCHA process in the background while the user is entering their identification, a CAPTCHA stage can be selected here. If a CAPTCHA stage is selected in the Identification stage, the CAPTCHA stage should not be bound to the flow.
 
 ## Enrollment/Recovery Flow
 
diff --git a/website/docs/add-secure-apps/providers/entra/add-entra-provider.md b/website/docs/add-secure-apps/providers/entra/add-entra-provider.md
index be7656bd87..fd7e99618f 100644
--- a/website/docs/add-secure-apps/providers/entra/add-entra-provider.md
+++ b/website/docs/add-secure-apps/providers/entra/add-entra-provider.md
@@ -3,15 +3,12 @@ title: Add an Entra ID provider
 ---
 
 <span class="badge badge--primary">Enterprise</span>
+<span class="badge badge--preview">Preview</span>
 
 ---
 
 For more information about using an Entra ID provider, see the [Overview](./index.md) documentation.
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
-
 ## Prerequisites
 
 To create an Entra ID provider provider in authentik, you must have already [configured Entra ID](./setup-entra.md) to integrate with authentik. You will need to obtain from Entra three values: the Application (client) ID, the Directory (tenant) ID, and the Client secret. When adding an Entra ID provider in authentik, you must provide these values.
diff --git a/website/docs/add-secure-apps/providers/entra/index.md b/website/docs/add-secure-apps/providers/entra/index.md
index 67702bab1c..eb54abb38f 100644
--- a/website/docs/add-secure-apps/providers/entra/index.md
+++ b/website/docs/add-secure-apps/providers/entra/index.md
@@ -3,13 +3,10 @@ title: Microsoft Entra ID provider
 ---
 
 <span class="badge badge--primary">Enterprise</span>
+<span class="badge badge--preview">Preview</span>
 
 ---
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
-
 With the Microsoft Entra ID provider, authentik serves as the single source of truth for all users and groups. Configuring Entra ID as a provider allows for auto-discovery of user and group accounts, on-going synchronization of user data such as email address, name, and status, and integrated data mapping of field names and values.
 
 -   For instructions to configure your Entra ID tenant to integrate with authentik, refer to [Configure Entra ID](./setup-entra.md).
diff --git a/website/docs/add-secure-apps/providers/gws/add-gws-provider.md b/website/docs/add-secure-apps/providers/gws/add-gws-provider.md
index 4e95024b90..a1f42d0758 100644
--- a/website/docs/add-secure-apps/providers/gws/add-gws-provider.md
+++ b/website/docs/add-secure-apps/providers/gws/add-gws-provider.md
@@ -3,13 +3,10 @@ title: Create a Google Workspace provider
 ---
 
 <span class="badge badge--primary">Enterprise</span>
+<span class="badge badge--preview">Preview</span>
 
 ---
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
-
 For more information about using a Google Workspace provider, see the [Overview](./index.md) documentation.
 
 ## Prerequisites
diff --git a/website/docs/add-secure-apps/providers/gws/index.md b/website/docs/add-secure-apps/providers/gws/index.md
index a1b31e1e00..b4261e71f3 100644
--- a/website/docs/add-secure-apps/providers/gws/index.md
+++ b/website/docs/add-secure-apps/providers/gws/index.md
@@ -3,13 +3,10 @@ title: Google Workspace provider
 ---
 
 <span class="badge badge--primary">Enterprise</span>
+<span class="badge badge--preview">Preview</span>
 
 ---
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
-
 With the Google Workspace provider, authentik serves as the single source of truth for all users and groups, when using Google products like Gmail.
 
 -   For instructions to configure your Google Workspace to integrate with authentik, refer to [Configure Google Workspace](./setup-gws.md).
diff --git a/website/docs/add-secure-apps/providers/proxy/server_caddy.mdx b/website/docs/add-secure-apps/providers/proxy/server_caddy.mdx
index dd05e0431a..75b115969b 100644
--- a/website/docs/add-secure-apps/providers/proxy/server_caddy.mdx
+++ b/website/docs/add-secure-apps/providers/proxy/server_caddy.mdx
@@ -1,7 +1,12 @@
+---
+title: Caddy
+hide_title: true
+---
+
 import Tabs from "@theme/Tabs";
 import TabItem from "@theme/TabItem";
 
-# Caddy <span class="badge badge--version">authentik 2022.8+</span>
+# Caddy <span class="badge badge--version">authentik 2022.8+</span>
 
 The configuration template shown below apply to both single-application and domain-level forward auth.
 
diff --git a/website/docs/add-secure-apps/providers/proxy/server_envoy.mdx b/website/docs/add-secure-apps/providers/proxy/server_envoy.mdx
index 5d76c3c9a7..62b653da62 100644
--- a/website/docs/add-secure-apps/providers/proxy/server_envoy.mdx
+++ b/website/docs/add-secure-apps/providers/proxy/server_envoy.mdx
@@ -1,7 +1,12 @@
+---
+title: Envoy
+hide_title: true
+---
+
 import Tabs from "@theme/Tabs";
 import TabItem from "@theme/TabItem";
 
-# Envoy <span class="badge badge--version">authentik 2022.6+</span>
+# Envoy <span class="badge badge--version">authentik 2022.6+</span>
 
 The configuration template shown below apply to both single-application and domain-level forward auth.
 
diff --git a/website/docs/add-secure-apps/providers/rac/how-to-rac.md b/website/docs/add-secure-apps/providers/rac/how-to-rac.md
index fedcc95715..c378b2cbe9 100644
--- a/website/docs/add-secure-apps/providers/rac/how-to-rac.md
+++ b/website/docs/add-secure-apps/providers/rac/how-to-rac.md
@@ -2,17 +2,13 @@
 title: Create a Remote Access Control (RAC) provider
 ---
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
-
 The RAC provider is a highly flexible feature for accessing remote machines. This document provides instructions for the basic creation and configuration of a RAC provider within a defined scenario.
 
 Fow more information about using a RAC provider, see the [Overview](./index.md) documentation. You can also view our video on YouTube for setting up RAC.
 
 <iframe width="560" height="315" src="https://www.youtube.com/embed/9wahIBRV6Ts;start=22" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
 
-## Prereqisites
+## Prerequisites
 
 The RAC provider requires the deployment of the [RAC Outpost](../../outposts/index.mdx).
 
diff --git a/website/docs/add-secure-apps/providers/rac/index.md b/website/docs/add-secure-apps/providers/rac/index.md
index 5a88a658d2..56a0781f0d 100644
--- a/website/docs/add-secure-apps/providers/rac/index.md
+++ b/website/docs/add-secure-apps/providers/rac/index.md
@@ -6,10 +6,6 @@ title: Remote Access Control (RAC) Provider
 
 ---
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
-
 :::info
 This provider requires the deployment of the [RAC Outpost](../../outposts/index.mdx).
 :::
diff --git a/website/docs/customize/blueprints/index.md b/website/docs/customize/blueprints/index.md
index 7e36832ce1..949a28b185 100644
--- a/website/docs/customize/blueprints/index.md
+++ b/website/docs/customize/blueprints/index.md
@@ -2,7 +2,7 @@
 title: Blueprints
 ---
 
-<span class="badge badge--version">authentik 2022.8+</span>
+<span class="badge badge--version">authentik 2022.8+</span>
 
 ---
 
diff --git a/website/docs/customize/blueprints/v1/models.md b/website/docs/customize/blueprints/v1/models.md
index 6c2a28ffc6..37033739aa 100644
--- a/website/docs/customize/blueprints/v1/models.md
+++ b/website/docs/customize/blueprints/v1/models.md
@@ -26,7 +26,7 @@ For example:
 
 ## `authentik_core.user`
 
-### `password` <span class="badge badge--version">authentik 2023.6+</span>
+### `password` <span class="badge badge--version">authentik 2023.6+</span>
 
 Via the standard API, a user's password can only be set via the separate `/api/v3/core/users/<id>/set_password/` endpoint. In blueprints, the password of a user can be set using the `password` field.
 
@@ -45,7 +45,7 @@ For example:
       password: this-should-be-a-long-value
 ```
 
-### `permissions` <span class="badge badge--version">authentik 2024.8+</span>
+### `permissions` <span class="badge badge--version">authentik 2024.8+</span>
 
 The `permissions` field can be used to set global permissions for a user. A full list of possible permissions is included in the JSON schema for blueprints.
 
@@ -63,7 +63,7 @@ For example:
 
 ## `authentik_core.application`
 
-### `icon` <span class="badge badge--version">authentik 2023.5+</span>
+### `icon` <span class="badge badge--version">authentik 2023.5+</span>
 
 Application icons can be directly set to URLs with the `icon` field.
 
@@ -81,7 +81,7 @@ For example:
 
 ## `authentik_sources_oauth.oauthsource`, `authentik_sources_saml.samlsource`, `authentik_sources_plex.plexsource`
 
-### `icon` <span class="badge badge--version">authentik 2023.5+</span>
+### `icon` <span class="badge badge--version">authentik 2023.5+</span>
 
 Source icons can be directly set to URLs with the `icon` field.
 
@@ -99,7 +99,7 @@ For example:
 
 ## `authentik_flows.flow`
 
-### `icon` <span class="badge badge--version">authentik 2023.5+</span>
+### `icon` <span class="badge badge--version">authentik 2023.5+</span>
 
 Flow backgrounds can be directly set to URLs with the `background` field.
 
@@ -119,7 +119,7 @@ For example:
 
 ## `authentik_rbac.role`
 
-### `permissions` <span class="badge badge--version">authentik 2024.8+</span>
+### `permissions` <span class="badge badge--version">authentik 2024.8+</span>
 
 The `permissions` field can be used to set global permissions for a role. A full list of possible permissions is included in the JSON schema for blueprints.
 
diff --git a/website/docs/expressions/_functions.md b/website/docs/expressions/_functions.md
index d065cc2a1e..7b1f350037 100644
--- a/website/docs/expressions/_functions.md
+++ b/website/docs/expressions/_functions.md
@@ -29,7 +29,7 @@ user = list_flatten(["foo"])
 # user = "foo"
 ```
 
-### `ak_call_policy(name: str, **kwargs) -> PolicyResult` <span class="badge badge--version">authentik 2021.12+</span>
+### `ak_call_policy(name: str, **kwargs) -> PolicyResult` <span class="badge badge--version">authentik 2021.12+</span>
 
 Call another policy with the name _name_. Current request is passed to policy. Key-word arguments
 can be used to modify the request's context.
@@ -70,7 +70,7 @@ Example:
 other_user = ak_user_by(username="other_user")
 ```
 
-### `ak_user_has_authenticator(user: User, device_type: Optional[str] = None) -> bool` <span class="badge badge--version">authentik 2022.9+</span>
+### `ak_user_has_authenticator(user: User, device_type: Optional[str] = None) -> bool` <span class="badge badge--version">authentik 2022.9+</span>
 
 Check if a user has any authenticator devices. Only fully validated devices are counted.
 
@@ -87,7 +87,7 @@ Example:
 return ak_user_has_authenticator(request.user)
 ```
 
-### `ak_create_event(action: str, **kwargs) -> None` <span class="badge badge--version">authentik 2022.9+</span>
+### `ak_create_event(action: str, **kwargs) -> None` <span class="badge badge--version">authentik 2022.9+</span>
 
 Create a new event with the action set to `action`. Any additional key-word parameters will be saved in the event context. Additionally, `context` will be set to the context in which this function is called.
 
@@ -112,7 +112,7 @@ ip_address('192.0.2.1') in ip_network('192.0.2.0/24')
 # evaluates to True
 ```
 
-## DNS resolution and reverse DNS lookups <span class="badge badge--version">authentik 2023.3+</span>
+## DNS resolution and reverse DNS lookups <span class="badge badge--version">authentik 2023.3+</span>
 
 To resolve a hostname to a list of IP addresses, use the functions `resolve_dns(hostname)` and `resolve_dns(hostname, ip_version)`.
 
diff --git a/website/docs/install-config/automated-install.md b/website/docs/install-config/automated-install.md
index 071d2a8a4d..98e2978281 100644
--- a/website/docs/install-config/automated-install.md
+++ b/website/docs/install-config/automated-install.md
@@ -8,11 +8,11 @@ To install authentik automatically (skipping the Out-of-box experience), you can
 
 Configure the default password for the `akadmin` user. Only read on the first startup. Can be used for any flow executor.
 
-### `AUTHENTIK_BOOTSTRAP_TOKEN` <span class="badge badge--version">authentik 2021.8+</span>
+### `AUTHENTIK_BOOTSTRAP_TOKEN` <span class="badge badge--version">authentik 2021.8+</span>
 
 Create a token for the default `akadmin` user. Only read on the first startup. The string you specify for this variable is the token key you can use to authenticate yourself to the API.
 
-### `AUTHENTIK_BOOTSTRAP_EMAIL` <span class="badge badge--version">authentik 2023.3+</span>
+### `AUTHENTIK_BOOTSTRAP_EMAIL` <span class="badge badge--version">authentik 2023.3+</span>
 
 Set the email address for the default `akadmin` user.
 
diff --git a/website/docs/install-config/configuration/configuration.mdx b/website/docs/install-config/configuration/configuration.mdx
index fe17de340b..1bf72fa6b8 100644
--- a/website/docs/install-config/configuration/configuration.mdx
+++ b/website/docs/install-config/configuration/configuration.mdx
@@ -299,47 +299,47 @@ Disable the inbuilt update-checker. Defaults to `false`.
     -   Kubeconfig
     -   Existence of a docker socket
 
-### `AUTHENTIK_LDAP__TASK_TIMEOUT_HOURS` <span class="badge badge--version">authentik 2023.1+</span>
+### `AUTHENTIK_LDAP__TASK_TIMEOUT_HOURS` <span class="badge badge--version">authentik 2023.1+</span>
 
 Timeout in hours for LDAP synchronization tasks.
 
 Defaults to `2`.
 
-### `AUTHENTIK_LDAP__PAGE_SIZE` <span class="badge badge--version">authentik 2023.6.1+</span>
+### `AUTHENTIK_LDAP__PAGE_SIZE` <span class="badge badge--version">authentik 2023.6.1+</span>
 
 Page size for LDAP synchronization. Controls the number of objects created in a single task.
 
 Defaults to `50`.
 
-### `AUTHENTIK_LDAP__TLS__CIPHERS` <span class="badge badge--version">authentik 2022.7+</span>
+### `AUTHENTIK_LDAP__TLS__CIPHERS` <span class="badge badge--version">authentik 2022.7+</span>
 
 Allows configuration of TLS Cliphers for LDAP connections used by LDAP sources. Setting applies to all sources.
 
 Defaults to `null`.
 
-### `AUTHENTIK_REPUTATION__EXPIRY` <span class="badge badge--version">authentik 2023.8.2+</span>
+### `AUTHENTIK_REPUTATION__EXPIRY` <span class="badge badge--version">authentik 2023.8.2+</span>
 
 Configure how long reputation scores should be saved for in seconds. Note that this is different than [`AUTHENTIK_REDIS__CACHE_TIMEOUT_REPUTATION`](#redis-settings), as reputation is saved to the database every 5 minutes.
 
 Defaults to `86400`.
 
-### `AUTHENTIK_SESSION_STORAGE` <span class="badge badge--version">authentik 2024.4+</span>
+### `AUTHENTIK_SESSION_STORAGE` <span class="badge badge--version">authentik 2024.4+</span>
 
 Configure if the sessions are stored in the cache or the database. Defaults to `cache`. Allowed values are `cache` and `db`. Note that changing this value will invalidate all previous sessions.
 
-### `AUTHENTIK_WEB__WORKERS` <span class="badge badge--version">authentik 2022.9+</span>
+### `AUTHENTIK_WEB__WORKERS` <span class="badge badge--version">authentik 2022.9+</span>
 
 Configure how many gunicorn worker processes should be started (see https://docs.gunicorn.org/en/stable/design.html).
 
 Defaults to 2. A value below 2 workers is not recommended. In environments where scaling with multiple replicas of the authentik server is not possible, this number can be increased to handle higher loads.
 
-### `AUTHENTIK_WEB__THREADS` <span class="badge badge--version">authentik 2022.9+</span>
+### `AUTHENTIK_WEB__THREADS` <span class="badge badge--version">authentik 2022.9+</span>
 
 Configure how many gunicorn threads a worker processes should have (see https://docs.gunicorn.org/en/stable/design.html).
 
 Defaults to 4.
 
-### `AUTHENTIK_WORKER__CONCURRENCY` <span class="badge badge--version">authentik 2023.9+</span>
+### `AUTHENTIK_WORKER__CONCURRENCY` <span class="badge badge--version">authentik 2023.9+</span>
 
 Configure Celery worker concurrency for authentik worker (see https://docs.celeryq.dev/en/latest/userguide/configuration.html#worker-concurrency). This essentially defines the number of worker processes spawned for a single worker.
 
diff --git a/website/docs/releases/2024/v2024.10.md b/website/docs/releases/2024/v2024.10.md
index 08defac33a..070f9ce376 100644
--- a/website/docs/releases/2024/v2024.10.md
+++ b/website/docs/releases/2024/v2024.10.md
@@ -9,14 +9,43 @@ slug: "/releases/2024.10"
 To try out the release candidate, replace your Docker image tag with the latest release candidate number, such as 2024.10.0-rc1. You can find the latest one in [the latest releases on GitHub](https://github.com/goauthentik/authentik/releases). If you don't find any, it means we haven't released one yet.
 :::::
 
-<!-- ## Breaking changes -->
+## Highlights
+
+-   **Chrome Device Trust** <span class="badge badge--primary">Enterprise</span> <span class="badge badge--info">Preview</span>: Verify that your users are logging in from managed devices and validate the devices' compliance with company policies.
+-   **FIPS/FAL3 for FedRAMP "very high" compliance** <span class="badge badge--primary">Enterprise+</span>: with support for SAML encryption and now JWE (JSON Web Encryption) support, authentik can now be configured for FIPS compliance at Federal Assurance Level (FAL) 3.
+-   **Captcha on Identification stage**: Run a CAPTCHA process in the background while the user is entering their identification.
+-   **Kerberos source**: authentik can now integrate with existing Kerberos environments by allowing users to log in with their Kerberos credentials, SPNEGO or syncing users into authentik.
+
+## Breaking changes
+
+We have no breaking changes this release!
 
 ## New features
 
+-   **Chrome Device Trust** <span class="badge badge--primary">Enterprise</span> <span class="badge badge--info">Preview</span>
+
+    This is a new stage for Enterprise clients that verifies the user through the Chrome Verified Access API. This stage only works with Google Chrome. You'll need to bring your own [Verified Access API instance](https://developers.google.com/chrome/verified-access/overview) via Google Cloud.
+
+-   **JWE support for OAuth**
+
+    You can now configure JSON Web Encryption with the OAuth 2.0 Provider, which will encrypt all the tokens created by authentik, using the configured encryption key.
+
+-   **Captcha on identification stage**
+
+    We've added an optional Captcha stage baked into an Identification stage to run in the background while the user inputs their information. Using this will hopefully result in lower total time per flow for the end user.
+
 -   **Invalidation flows for providers**
 
     The sign-out experience when the session in an application ends can be configured now. Previously where this was always a static page, any flow can be used now. This can be used for additional validation, or redirecting the user to a custom URL.
 
+-   **Autoselect 2FA device**
+
+    Users who configure multiple 2FA devices will now land on their last used device's prompt, skipping the device picker. This will hopefually result in lower total average time per flow for the end user.
+
+-   **New structure for authentik's technical documentation**
+
+    We've restructured the documentation in authentik to be more task-based, with sections, titles, and headings that follow the workflow of installing, configuring, and using the product. Previously, our docs were organized by components. This new focus on tasks increases findability within the Table of Contents, and provide a high-level guide of the typical workflows with authentik.
+
 ## Upgrading
 
 This release does not introduce any new requirements. You can follow the upgrade instructions below; for more detailed information about upgrading authentik, refer to our [Upgrade documentation](../../install-config/upgrade.mdx).
@@ -47,8 +76,1988 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2024.10
 
 ## Minor changes/fixes
 
-<!-- _Insert the output of `make gen-changelog` here_ -->
+-   \*: fix deprecated calls to sentry start_span (#11655)
+-   admin: refactor update check (#11272)
+-   admin: store version history (#11520)
+-   blueprints: fix validation error when using internal storage (#11654)
+-   core: ensure all providers have correct priority (#11280)
+-   core: ensure proxy provider is correctly looked up (#11267)
+-   core: extract object matching from flow manager (#11458)
+-   core: fix change_user_type always requiring usernames (#11177)
+-   core: fix missing argument name escaping for property mapping (#11231)
+-   core: fix permission check for scoped impersonation (#11315)
+-   core: fix permission check for scoped impersonation (#11603)
+-   enterprise: fix API mixin license validity check (#11331)
+-   enterprise: fix incorrect comparison for latest validity date (#11109)
+-   enterprise: show specific error if Install ID is invalid in license (#11317)
+-   events: always use expiry from current tenant for events, not only when creating from HTTP request (#11415)
+-   events: optimise marking events as seen (#11297)
+-   fix: proxy provider - docker traefik label (#11460)
+-   flows: include Outpost instance in flow context and save in login event (#11318)
+-   flows: provider invalidation (#5048)
+-   internal: fix go paginator not setting page correctly (#11253)
+-   internal: restore /ping behaviour for embedded outpost (#11568)
+-   policies/event_matcher: fix inconsistent behaviour (#11724)
+-   providers/ldap: fix incorrect permission check for search access (#11217)
+-   providers/ldap: fix migration assuming search group is set (#11170)
+-   providers/ldap: rework search_group migration to work with read replicas (#11228)
+-   providers/oauth2: add indexes on tokens (#11524)
+-   providers/oauth2: add initial JWE support (#11344)
+-   providers/oauth2: audit_ignore last_login change for generated service account (#11085)
+-   providers/oauth2: don't overwrite attributes when updating service account (#11709)
+-   providers/oauth2: improve indexes on tokens (#11543)
+-   providers/proxy: fix URL path getting lost when partial URL is given to rd= (#11354)
+-   providers/proxy: fix panic, keep session storages open (#11439)
+-   providers/saml: fix incorrect ds:Reference URI (#11699)
+-   providers/scim: add option to ignore SCIM server cert (#11437)
+-   root: fix ensure `outpost_connection_discovery runs on worker startup (#11260)
+-   schemas: fix XML Schema loading...for some reason?
+-   security: fix CVE-2024-47070 (#11536)
+-   security: fix CVE-2024-47077 (#11535)
+-   sources/ldap: fix mapping check, fix debug endpoint (#11442)
+-   sources/ldap: fix missing search attribute (#11125)
+-   sources/ldap: fix ms_ad userAccountControl not checking for lockout (#11532)
+-   sources/saml: fix NameIDFormat descriptor in metadata generation (#11614)
+-   stages/authenticator: use RBAC for devices API (#11482)
+-   stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#11138)
+-   stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#11383)
+-   stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#11578)
+-   stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#11683)
+-   stages/identification: dynamically find login challenges (#11571)
+-   stages/password: add error message when exceeding maximum tries (#11679)
+-   tests/e2e: add forward auth e2e test (#11374)
+-   web/admin: display webauthn device type (#11481)
+-   web/admin: fix Authentication flow being required (#11496)
+-   web/admin: fix duplicate flow labels (#11689)
+-   web/admin: fix error in Outpost creation form (#11173)
+-   web/admin: fix invalid create date shown for MFA registered before date was saved (#11728)
+-   web/admin: fix misc dual select on different forms (#11203)
+-   web/admin: fix missing Sync object button SCIM Provider (#11211)
+-   web/admin: fix notification property mapping forms (#11298)
+-   web/admin: fix sync single button throwing error (#11727)
+-   web/admin: improve error handling (#11212)
+-   web/users: show - if device was registered before we started saving the time (#11256)
+-   web: Adjust Wdio MaxInstances, add Knip (#11089)
+-   web: Fix css loading in unit tests, remove unneeded dot paths (#11629)
+-   web: add missing id attribute for button in ak-flow-input-password (#11413)
+-   web: audit and update package.json and associated test harness, with upgrade to WebdriverIO 9 (#11596)
+-   web: fix dual-select with dynamic selection (#11133)
+-   web: fix e2e tests to work with latest WebdriverIO and authentik 2024.8 (#11105)
+-   web: fix readonly fields appearing white in dark theme (#11271)
+-   web: provide simple tables for API-less displays (#11028)
+-   web: provide storybook demos and docs for existing tests (#11651)
+-   web: revert lockfile lint, re-add integrity (#11380)
+-   web: small fixes for elements and forms (#11546)
 
 ## API Changes
 
-<!-- _Insert output of `make gen-diff` here_ -->
+#### What's New
+
+---
+
+##### `GET` /admin/version/history/
+
+##### `GET` /admin/version/history/{#123;id}#125;/
+
+#### What's Changed
+
+---
+
+##### `GET` /authenticators/admin/all/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    Changed items (object): > Serializer for Duo authenticator devices
+
+    New required properties:
+
+    -   `extra_description`
+
+    *   Added property `extra_description` (string)
+        > Get extra description
+
+##### `GET` /authenticators/all/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    Changed items (object): > Serializer for Duo authenticator devices
+
+    New required properties:
+
+    -   `extra_description`
+
+    *   Added property `extra_description` (string)
+        > Get extra description
+
+##### `GET` /providers/all/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/oauth2/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+
+        > Flow used ending the session from a provider.
+
+    *   Added property `encryption_key` (string)
+
+        > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+    *   Changed property `signing_key` (string)
+        > Key used to sign the tokens.
+
+##### `PUT` /providers/oauth2/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+
+    > Flow used ending the session from a provider.
+
+*   Added property `encryption_key` (string)
+
+    > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+*   Changed property `signing_key` (string)
+    > Key used to sign the tokens.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+
+        > Flow used ending the session from a provider.
+
+    *   Added property `encryption_key` (string)
+
+        > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+    *   Changed property `signing_key` (string)
+        > Key used to sign the tokens.
+
+##### `PATCH` /providers/oauth2/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `invalidation_flow` (string)
+
+    > Flow used ending the session from a provider.
+
+-   Added property `encryption_key` (string)
+
+    > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+-   Changed property `signing_key` (string)
+    > Key used to sign the tokens.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+
+        > Flow used ending the session from a provider.
+
+    *   Added property `encryption_key` (string)
+
+        > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+    *   Changed property `signing_key` (string)
+        > Key used to sign the tokens.
+
+##### `GET` /providers/proxy/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PUT` /providers/proxy/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PATCH` /providers/proxy/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/rac/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PUT` /providers/rac/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PATCH` /providers/rac/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/radius/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PUT` /providers/radius/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PATCH` /providers/radius/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `POST` /providers/saml/import_metadata/
+
+###### Request:
+
+Changed content type : `multipart/form-data`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+
+##### `GET` /providers/scim/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `verify_certificates` (boolean)
+
+##### `PUT` /providers/scim/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `verify_certificates` (boolean)
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `verify_certificates` (boolean)
+
+##### `PATCH` /providers/scim/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `verify_certificates` (boolean)
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `verify_certificates` (boolean)
+
+##### `GET` /core/applications/{#123;slug}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `backchannel_providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `PUT` /core/applications/{#123;slug}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `backchannel_providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `PATCH` /core/applications/{#123;slug}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `backchannel_providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /outposts/instances/{#123;uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `PUT` /outposts/instances/{#123;uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `PATCH` /outposts/instances/{#123;uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /providers/all/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /providers/ldap/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PUT` /providers/ldap/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PATCH` /providers/ldap/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `POST` /providers/oauth2/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+
+    > Flow used ending the session from a provider.
+
+*   Added property `encryption_key` (string)
+
+    > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+*   Changed property `signing_key` (string)
+    > Key used to sign the tokens.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+
+        > Flow used ending the session from a provider.
+
+    *   Added property `encryption_key` (string)
+
+        > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+    *   Changed property `signing_key` (string)
+        > Key used to sign the tokens.
+
+##### `GET` /providers/oauth2/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > OAuth2Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+
+            > Flow used ending the session from a provider.
+
+        *   Added property `encryption_key` (string)
+
+            > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+        *   Changed property `signing_key` (string)
+            > Key used to sign the tokens.
+
+##### `POST` /providers/proxy/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/proxy/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > ProxyProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `POST` /providers/rac/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/rac/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `POST` /providers/radius/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/radius/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > RadiusProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /providers/saml/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PUT` /providers/saml/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `PATCH` /providers/saml/{#123;id}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `POST` /providers/scim/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `verify_certificates` (boolean)
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Added property `verify_certificates` (boolean)
+
+##### `GET` /providers/scim/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > SCIMProvider Serializer
+
+        -   Added property `verify_certificates` (boolean)
+
+##### `GET` /rac/connection_tokens/{#123;connection_token_uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `endpoint_obj` (object)
+
+        > Endpoint Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > RACProvider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `PUT` /rac/connection_tokens/{#123;connection_token_uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `endpoint_obj` (object)
+
+        > Endpoint Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > RACProvider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `PATCH` /rac/connection_tokens/{#123;connection_token_uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `endpoint_obj` (object)
+
+        > Endpoint Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > RACProvider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `GET` /rac/endpoints/{#123;pbm_uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `PUT` /rac/endpoints/{#123;pbm_uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `PATCH` /rac/endpoints/{#123;pbm_uuid}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /sources/saml/{#123;slug}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `name_id_policy` (string)
+
+        > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+        Added enum value:
+
+        -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+            Removed enum value:
+
+        -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+##### `PUT` /sources/saml/{#123;slug}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `name_id_policy` (string)
+
+    > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+    Added enum value:
+
+    -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+        Removed enum value:
+
+    -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `name_id_policy` (string)
+
+        > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+        Added enum value:
+
+        -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+            Removed enum value:
+
+        -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+##### `PATCH` /sources/saml/{#123;slug}#125;/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `name_id_policy` (string)
+
+    > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+    Added enum value:
+
+    -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+        Removed enum value:
+
+    -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `name_id_policy` (string)
+
+        > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+        Added enum value:
+
+        -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+            Removed enum value:
+
+        -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+##### `POST` /core/applications/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+    -   Changed property `backchannel_providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /core/applications/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Application Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+        -   Changed property `backchannel_providers_obj` (array)
+
+            Changed items (object): > Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `GET` /core/user_consent/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `application` (object)
+
+        > Application Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+        -   Changed property `backchannel_providers_obj` (array)
+
+            Changed items (object): > Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `GET` /oauth2/access_tokens/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider` (object)
+
+        > OAuth2Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+
+            > Flow used ending the session from a provider.
+
+        *   Added property `encryption_key` (string)
+
+            > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+        *   Changed property `signing_key` (string)
+            > Key used to sign the tokens.
+
+##### `GET` /oauth2/authorization_codes/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider` (object)
+
+        > OAuth2Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+
+            > Flow used ending the session from a provider.
+
+        *   Added property `encryption_key` (string)
+
+            > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+        *   Changed property `signing_key` (string)
+            > Key used to sign the tokens.
+
+##### `GET` /oauth2/refresh_tokens/{#123;id}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider` (object)
+
+        > OAuth2Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+
+            > Flow used ending the session from a provider.
+
+        *   Added property `encryption_key` (string)
+
+            > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+        *   Changed property `signing_key` (string)
+            > Key used to sign the tokens.
+
+##### `POST` /outposts/instances/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `providers_obj` (array)
+
+        Changed items (object): > Provider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /outposts/instances/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Outpost Serializer
+
+        -   Changed property `providers_obj` (array)
+
+            Changed items (object): > Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `GET` /outposts/ldap/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > LDAPProvider Serializer
+
+        New required properties:
+
+        -   `unbind_flow_slug`
+
+        *   Added property `unbind_flow_slug` (string)
+            > Get slug for unbind flow, defaulting to brand's default flow.
+
+##### `POST` /providers/ldap/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/ldap/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > LDAPProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `POST` /providers/saml/
+
+###### Request:
+
+Changed content type : `application/json`
+
+New required properties:
+
+-   `invalidation_flow`
+
+*   Added property `invalidation_flow` (string)
+    > Flow used ending the session from a provider.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /providers/saml/
+
+###### Parameters:
+
+Added: `invalidation_flow` in `query`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > SAMLProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /rac/connection_tokens/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > ConnectionToken Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > RACProvider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+        -   Changed property `endpoint_obj` (object)
+
+            > Endpoint Serializer
+
+            -   Changed property `provider_obj` (object)
+
+                > RACProvider Serializer
+
+                New required properties:
+
+                -   `invalidation_flow`
+
+                *   Added property `invalidation_flow` (string)
+                    > Flow used ending the session from a provider.
+
+##### `POST` /rac/endpoints/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `provider_obj` (object)
+
+        > RACProvider Serializer
+
+        New required properties:
+
+        -   `invalidation_flow`
+
+        *   Added property `invalidation_flow` (string)
+            > Flow used ending the session from a provider.
+
+##### `GET` /rac/endpoints/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Endpoint Serializer
+
+        -   Changed property `provider_obj` (object)
+
+            > RACProvider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+                > Flow used ending the session from a provider.
+
+##### `POST` /sources/saml/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `name_id_policy` (string)
+
+    > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+    Added enum value:
+
+    -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+        Removed enum value:
+
+    -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `name_id_policy` (string)
+
+        > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+        Added enum value:
+
+        -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+            Removed enum value:
+
+        -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+##### `GET` /sources/saml/
+
+###### Parameters:
+
+Changed: `name_id_policy` in `query`
+
+> NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > SAMLSource Serializer
+
+        -   Changed property `name_id_policy` (string)
+
+            > NameID Policy sent to the IdP. Can be unset, in which case no Policy is sent.
+
+            Added enum value:
+
+            -   `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName`
+                Removed enum value:
+
+            -   `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName`
+
+##### `PUT` /core/transactional/applications/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `provider` (object)
+
+    Updated `authentik_providers_oauth2.oauth2provider` provider_model:
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+
+        > Flow used ending the session from a provider.
+
+    *   Added property `encryption_key` (string)
+
+        > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+    *   Changed property `signing_key` (string)
+        > Key used to sign the tokens.
+
+    Updated `authentik_providers_radius.radiusprovider` provider_model:
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+    Updated `authentik_providers_scim.scimprovider` provider_model:
+
+    -   Added property `verify_certificates` (boolean)
+
+    Updated `authentik_providers_proxy.proxyprovider` provider_model:
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+    Updated `authentik_providers_rac.racprovider` provider_model:
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+    Updated `authentik_providers_saml.samlprovider` provider_model:
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+    Updated `authentik_providers_ldap.ldapprovider` provider_model:
+    New required properties:
+
+    -   `invalidation_flow`
+
+    *   Added property `invalidation_flow` (string)
+        > Flow used ending the session from a provider.
+
+##### `GET` /core/user_consent/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > UserConsent Serializer
+
+        -   Changed property `application` (object)
+
+            > Application Serializer
+
+            -   Changed property `provider_obj` (object)
+
+                > Provider Serializer
+
+                New required properties:
+
+                -   `invalidation_flow`
+
+                *   Added property `invalidation_flow` (string)
+                    > Flow used ending the session from a provider.
+
+            -   Changed property `backchannel_providers_obj` (array)
+
+                Changed items (object): > Provider Serializer
+
+                New required properties:
+
+                -   `invalidation_flow`
+
+                *   Added property `invalidation_flow` (string)
+                    > Flow used ending the session from a provider.
+
+##### `GET` /flows/executor/{#123;flow_slug}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    Added 'ak-stage-session-end' component:
+
+    -   Property `flow_info` (object)
+
+        > Contextual flow information for a challenge
+
+        -   Property `title` (string)
+
+        -   Property `background` (string)
+
+        -   Property `cancel_url` (string)
+
+        -   Property `layout` (string)
+
+            Enum values:
+
+            -   `stacked`
+            -   `content_left`
+            -   `content_right`
+            -   `sidebar_left`
+            -   `sidebar_right`
+
+    -   Property `component` (string)
+
+    -   Property `response_errors` (object)
+
+    -   Property `pending_user` (string)
+
+    -   Property `pending_user_avatar` (string)
+
+    -   Property `application_name` (string)
+
+    -   Property `application_launch_url` (string)
+
+    -   Property `invalidation_flow_url` (string)
+
+    -   Property `brand_name` (string)
+
+##### `POST` /flows/executor/{#123;flow_slug}#125;/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    Added 'ak-stage-session-end' component:
+
+##### `GET` /oauth2/access_tokens/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Serializer for BaseGrantModel and RefreshToken
+
+        -   Changed property `provider` (object)
+
+            > OAuth2Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+
+                > Flow used ending the session from a provider.
+
+            *   Added property `encryption_key` (string)
+
+                > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+            *   Changed property `signing_key` (string)
+                > Key used to sign the tokens.
+
+##### `GET` /oauth2/authorization_codes/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Serializer for BaseGrantModel and ExpiringBaseGrant
+
+        -   Changed property `provider` (object)
+
+            > OAuth2Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+
+                > Flow used ending the session from a provider.
+
+            *   Added property `encryption_key` (string)
+
+                > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+            *   Changed property `signing_key` (string)
+                > Key used to sign the tokens.
+
+##### `GET` /oauth2/refresh_tokens/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Serializer for BaseGrantModel and RefreshToken
+
+        -   Changed property `provider` (object)
+
+            > OAuth2Provider Serializer
+
+            New required properties:
+
+            -   `invalidation_flow`
+
+            *   Added property `invalidation_flow` (string)
+
+                > Flow used ending the session from a provider.
+
+            *   Added property `encryption_key` (string)
+
+                > Key used to encrypt the tokens. When set, tokens will be encrypted and returned as JWEs.
+
+            *   Changed property `signing_key` (string)
+                > Key used to sign the tokens.
diff --git a/website/docs/users-sources/sources/protocols/kerberos/index.md b/website/docs/users-sources/sources/protocols/kerberos/index.md
index 8ceb2741e7..1a52688d60 100644
--- a/website/docs/users-sources/sources/protocols/kerberos/index.md
+++ b/website/docs/users-sources/sources/protocols/kerberos/index.md
@@ -2,6 +2,11 @@
 title: Kerberos
 ---
 
+<span class="badge badge--preview">Preview</span>
+<span class="badge badge--version">authentik 2024.10+</span>
+
+---
+
 This source allows users to enroll themselves with an existing Kerberos identity.
 
 ## Preparation
diff --git a/website/docs/users-sources/sources/protocols/scim/index.md b/website/docs/users-sources/sources/protocols/scim/index.md
index 97738551c5..37d3fbea0a 100644
--- a/website/docs/users-sources/sources/protocols/scim/index.md
+++ b/website/docs/users-sources/sources/protocols/scim/index.md
@@ -2,9 +2,9 @@
 title: SCIM Source
 ---
 
-:::info
-This feature is in technical preview, so please report any bugs on [GitHub](https://github.com/goauthentik/authentik/issues).
-:::
+<span class="badge badge--preview">Preview</span>
+
+---
 
 The SCIM source allows other applications to directly create users and groups within authentik. SCIM provides predefined schema for users and groups, with a RESTful API, to enable automatic user provisioning and deprovisioning, SCIM is supported by applications such as Microsoft Entra ID, Google Workspace, and Okta.
 
diff --git a/website/docs/users-sources/sources/social-logins/github/index.md b/website/docs/users-sources/sources/social-logins/github/index.md
index c43419868b..7abdd70308 100644
--- a/website/docs/users-sources/sources/social-logins/github/index.md
+++ b/website/docs/users-sources/sources/social-logins/github/index.md
@@ -20,8 +20,8 @@ The following placeholders will be used:
 ![Register OAuth App](./githubdeveloper1.png)
 
 2. **Application Name:** Choose a name users will recognize ie: authentik
-3. **Homepage URL**:: www.my.company
-4. **Authorization callback URL**: https://authentik.company/source/oauth/callback/github
+3. **Homepage URL:** www.my.company
+4. **Authorization callback URL:**: https://authentik.company/source/oauth/callback/github
 5. Click **Register Application**
 
 Example screenshot
@@ -35,8 +35,8 @@ Example screenshot
 
 8. Under _Directory -> Federation & Social login_ Click **Create Github OAuth Source**
 
-9. **Name**: Choose a name (For the example I use Github)
-10. **Slug**: github (If you choose a different slug the URLs will need to be updated to reflect the change)
+9. **Name:** Choose a name (For the example I use Github)
+10. **Slug:** github (If you choose a different slug the URLs will need to be updated to reflect the change)
 11. **Consumer Key:** Client ID from step 6
 12. **Consumer Secret:** Client Secret from step 7
 
diff --git a/website/sidebars.js b/website/sidebars.js
index 811420d7ca..0fd73b6e29 100644
--- a/website/sidebars.js
+++ b/website/sidebars.js
@@ -2,13 +2,14 @@ import { generateVersionDropdown } from "./src/utils.js";
 import apiReference from "./docs/developer-docs/api/reference/sidebar";
 
 const releases = [
+    "releases/2024/v2024.10",
     "releases/2024/v2024.8",
     "releases/2024/v2024.6",
-    "releases/2024/v2024.4",
     {
         type: "category",
         label: "Previous versions",
         items: [
+            "releases/2024/v2024.4",
             "releases/2024/v2024.2",
             "releases/2023/v2023.10",
             "releases/2023/v2023.8",
diff --git a/website/src/css/custom.css b/website/src/css/custom.css
index 7b27764bf3..a04405b2e0 100644
--- a/website/src/css/custom.css
+++ b/website/src/css/custom.css
@@ -125,3 +125,11 @@ body {
     font-size: 0.75rem;
     vertical-align: middle;
 }
+
+.badge--preview {
+    --ifm-badge-background-color: rgb(115, 188, 247);
+    color: var(--ifm-color-primary-contrast-foreground);
+    --ifm-badge-border-color: var(--ifm-badge-background-color);
+    font-size: 0.75rem;
+    vertical-align: middle;
+}
diff --git a/website/src/pages/index.tsx b/website/src/pages/index.tsx
index dba1b8dfa1..0b1dc28b24 100644
--- a/website/src/pages/index.tsx
+++ b/website/src/pages/index.tsx
@@ -1,23 +1,8 @@
 import React from "react";
-import clsx from "clsx";
-import Layout from "@theme/Layout";
-import BrowserOnly from "@docusaurus/BrowserOnly";
+import { Redirect } from "@docusaurus/router";
 
 function Home() {
-    return (
-        <Layout title={`authentik Documentation`}>
-            <BrowserOnly>
-                {() => {
-                    window.location.href = "/docs";
-                }}
-            </BrowserOnly>
-            <header className={clsx("hero hero--primary")}>
-                <div className="container">
-                    <h1 className="hero__title">authentik Documentation</h1>
-                </div>
-            </header>
-        </Layout>
-    );
+    return <Redirect to="/docs" />;
 }
 
 export default Home;