web: fixed missed internationalized strings (#10323)

* web: fix esbuild issue with style sheets

Getting ESBuild, Lit, and Storybook to all agree on how to read and parse stylesheets is a serious
pain. This fix better identifies the value types (instances) being passed from various sources in
the repo to the three *different* kinds of style processors we're using (the native one, the
polyfill one, and whatever the heck Storybook does internally).

Falling back to using older CSS instantiating techniques one era at a time seems to do the trick.
It's ugly, but in the face of the aggressive styling we use to avoid Flashes of Unstyled Content
(FLoUC), it's the logic with which we're left.

In standard mode, the following warning appears on the console when running a Flow:

```
Autofocus processing was blocked because a document already has a focused element.
```

In compatibility mode, the following **error** appears on the console when running a Flow:

```
crawler-inject.js:1106 Uncaught TypeError: Failed to execute 'observe' on 'MutationObserver': parameter 1 is not of type 'Node'.
    at initDomMutationObservers (crawler-inject.js:1106:18)
    at crawler-inject.js:1114:24
    at Array.forEach (<anonymous>)
    at initDomMutationObservers (crawler-inject.js:1114:10)
    at crawler-inject.js:1549:1
initDomMutationObservers @ crawler-inject.js:1106
(anonymous) @ crawler-inject.js:1114
initDomMutationObservers @ crawler-inject.js:1114
(anonymous) @ crawler-inject.js:1549
```

Despite this error, nothing seems to be broken and flows work as anticipated.

* web: you have no missed messages

This commit uncovers a few places where a human-readable string was not property cast into the
internationalized form and internationalizes them in order to conform to our policy of keeping the
product viable outside of the English-speaking world.

* Restored SAML spacing manually. Not sure why that was necessary.

* Restored WS spacing manually. Not sure why that was necessary.

* Restored RouteMatch spacing manually. Not sure why that was necessary.

* Restored RAC spacing manually. Not sure why that was necessary.

web/src/admin/applications/ApplicationWizardHint.ts

@@ -85,7 +85,7 @@ export class AkApplicationWizardHint extends AKElement implements ShowHintContro
                     </span>
                     <button
                         aria-disabled="false"
-                        aria-label="Restore Application Wizard Hint "
+                        aria-label=${msg("Restore Application Wizard Hint")}
                         class="pf-c-button pf-m-plain"
                         type="button"
                         data-ouia-safe="true"

web/src/admin/applications/wizard/application/ak-application-wizard-application-details.ts

@@ -67,7 +67,7 @@ export class ApplicationWizardApplicationDetails extends BasePanel {
                 .value=${this.wizard.app?.policyEngineMode}
                 .errorMessages=${this.wizard.errors.app?.policyEngineMode ?? []}
             ></ak-radio-input>
-            <ak-form-group aria-label="UI Settings">
+            <ak-form-group aria-label=${msg("UI Settings")}>
                 <span slot="header"> ${msg("UI Settings")} </span>
                 <div slot="body" class="pf-c-form">
                     <ak-text-input

web/src/admin/applications/wizard/steps.ts

@@ -7,6 +7,7 @@ import {
     SubmitStep,
 } from "@goauthentik/components/ak-wizard-main/commonWizardButtons";
 
+import { msg } from "@lit/localize";
 import { html } from "lit";
 
 import "./application/ak-application-wizard-application-details";
@@ -23,7 +24,7 @@ import { ApplicationStep as ApplicationStepType } from "./types";
 
 class ApplicationStep implements ApplicationStepType {
     id = "application";
-    label = "Application Details";
+    label = msg("Application Details");
     disabled = false;
     valid = false;
     get buttons() {
@@ -36,7 +37,7 @@ class ApplicationStep implements ApplicationStepType {
 
 class ProviderMethodStep implements ApplicationStepType {
     id = "provider-method";
-    label = "Provider Type";
+    label = msg("Provider Type");
     disabled = false;
     valid = false;
 
@@ -53,7 +54,7 @@ class ProviderMethodStep implements ApplicationStepType {
 
 class ProviderStepDetails implements ApplicationStepType {
     id = "provider-details";
-    label = "Provider Configuration";
+    label = msg("Provider Configuration");
     disabled = true;
     valid = false;
     get buttons() {
@@ -67,7 +68,7 @@ class ProviderStepDetails implements ApplicationStepType {
 
 class SubmitApplicationStep implements ApplicationStepType {
     id = "submit";
-    label = "Submit Application";
+    label = msg("Submit Application");
     disabled = true;
     valid = false;
 

web/src/admin/outposts/OutpostForm.ts

@@ -230,7 +230,7 @@ export class OutpostForm extends ModelForm<Outpost, string> {
                     selected-label="${msg("Selected Applications")}"
                 ></ak-dual-select-provider>
             </ak-form-element-horizontal>
-            <ak-form-group aria-label="Advanced settings">
+            <ak-form-group aria-label=${msg("Advanced settings")}>
                 <span slot="header"> ${msg("Advanced settings")} </span>
                 <div slot="body" class="pf-c-form">
                     <ak-form-element-horizontal label=${msg("Configuration")} name="config">

web/src/admin/outposts/ServiceConnectionListPage.ts

@@ -26,10 +26,12 @@ import { OutpostsApi, ServiceConnection, ServiceConnectionState } from "@goauthe
 @customElement("ak-outpost-service-connection-list")
 export class OutpostServiceConnectionListPage extends TablePage<ServiceConnection> {
     pageTitle(): string {
-        return "Outpost integrations";
+        return msg("Outpost integrations");
     }
     pageDescription(): string | undefined {
-        return "Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.";
+        return msg(
+            "Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.",
+        );
     }
     pageIcon(): string {
         return "pf-icon pf-icon-integration";

web/src/admin/providers/ldap/LDAPProviderViewPage.ts

@@ -219,7 +219,7 @@ export class LDAPProviderViewPage extends AKElement {
                                     class="pf-c-form-control"
                                     readonly
                                     type="text"
-                                    value="Your authentik password"
+                                    value=${msg("Your authentik password")}
                                 />
                             </div>
                             <div class="pf-c-form__group">

web/src/admin/providers/saml/SAMLProviderViewPage.ts

@@ -512,7 +512,7 @@ export class SAMLProviderViewPage extends AKElement {
                 <div class="pf-c-card__body">
                     ${renderDescriptionList([
                         [
-                            "Preview for user",
+                            msg("Preview for user"),
                             html`
                                 <ak-search-select
                                     .fetchObjects=${async (query?: string): Promise<User[]> => {

web/src/admin/roles/RoleAssignedGlobalPermissionsTable.ts

@@ -42,8 +42,8 @@ export class RoleAssignedGlobalPermissionsTable extends Table<Permission> {
 
     columns(): TableColumn[] {
         return [
-            new TableColumn("Model", "model"),
+            new TableColumn(msg("Model"), "model"),
-            new TableColumn("Permission", ""),
+            new TableColumn(msg("Permission"), ""),
             new TableColumn(""),
         ];
     }

web/src/admin/roles/RoleAssignedObjectPermissionTable.ts

@@ -39,9 +39,9 @@ export class RoleAssignedObjectPermissionTable extends Table<ExtraRoleObjectPerm
 
     columns(): TableColumn[] {
         return [
-            new TableColumn("Model", "model"),
+            new TableColumn(msg("Model"), "model"),
-            new TableColumn("Permission", ""),
+            new TableColumn(msg("Permission"), ""),
-            new TableColumn("Object", ""),
+            new TableColumn(msg("Object"), ""),
             new TableColumn(""),
         ];
     }

web/src/admin/stages/user_write/UserWriteStageForm.ts

@@ -114,7 +114,7 @@ export class UserWriteStageForm extends BaseStageForm<UserWriteStage> {
                         <ak-radio
                             .options=${[
                                 {
-                                    label: "Internal",
+                                    label: msg("Internal"),
                                     value: UserTypeEnum.Internal,
                                     default: true,
                                     description: html`${msg(
@@ -122,14 +122,14 @@ export class UserWriteStageForm extends BaseStageForm<UserWriteStage> {
                                     )}`,
                                 },
                                 {
-                                    label: "External",
+                                    label: msg("External"),
                                     value: UserTypeEnum.External,
                                     description: html`${msg(
                                         "External users might be external consultants or B2C customers. These users don't get access to enterprise features.",
                                     )}`,
                                 },
                                 {
-                                    label: "Service account",
+                                    label: msg("Service account"),
                                     value: UserTypeEnum.ServiceAccount,
                                     description: html`${msg(
                                         "Service accounts should be used for machine-to-machine authentication or other automations.",

web/src/admin/users/UserAssignedGlobalPermissionsTable.ts

@@ -38,8 +38,8 @@ export class UserAssignedGlobalPermissionsTable extends Table<Permission> {
 
     columns(): TableColumn[] {
         return [
-            new TableColumn("Model", "model"),
+            new TableColumn(msg("Model"), "model"),
-            new TableColumn("Permission", ""),
+            new TableColumn(msg("Permission"), ""),
             new TableColumn(""),
         ];
     }

web/src/admin/users/UserAssignedObjectPermissionsTable.ts

@@ -35,9 +35,9 @@ export class UserAssignedObjectPermissionsTable extends Table<ExtraUserObjectPer
 
     columns(): TableColumn[] {
         return [
-            new TableColumn("Model", "model"),
+            new TableColumn(msg("Model"), "model"),
-            new TableColumn("Permission", ""),
+            new TableColumn(msg("Permission"), ""),
-            new TableColumn("Object", ""),
+            new TableColumn(msg("Object"), ""),
             new TableColumn(""),
         ];
     }

web/src/admin/users/UserForm.ts

@@ -107,7 +107,7 @@ export class UserForm extends ModelForm<User, number> {
                 <ak-radio
                     .options=${[
                         {
-                            label: "Internal",
+                            label: msg("Internal"),
                             value: UserTypeEnum.Internal,
                             default: true,
                             description: html`${msg(
@@ -115,21 +115,21 @@ export class UserForm extends ModelForm<User, number> {
                             )}`,
                         },
                         {
-                            label: "External",
+                            label: msg("External"),
                             value: UserTypeEnum.External,
                             description: html`${msg(
                                 "External users might be external consultants or B2C customers. These users don't get access to enterprise features.",
                             )}`,
                         },
                         {
-                            label: "Service account",
+                            label: msg("Service account"),
                             value: UserTypeEnum.ServiceAccount,
                             description: html`${msg(
                                 "Service accounts should be used for machine-to-machine authentication or other automations.",
                             )}`,
                         },
                         {
-                            label: "Internal Service account",
+                            label: msg("Internal Service account"),
                             value: UserTypeEnum.InternalServiceAccount,
                             disabled: true,
                             description: html`${msg(

web/src/elements/ak-dual-select/components/ak-pagination.ts

@@ -59,7 +59,7 @@ export class AkPagination extends CustomEmitterElement(AKElement) {
                               </span>
                           </div>
                       </div>
-                      <nav class="pf-c-pagination__nav" aria-label="Pagination">
+                      <nav class="pf-c-pagination__nav" aria-label=${msg("Pagination")}>
                           <div class="pf-c-pagination__nav-control pf-m-prev">
                               <button
                                   class="pf-c-button pf-m-plain"

web/src/elements/buttons/ModalButton.ts

@@ -5,6 +5,7 @@ import {
     ModalShowEvent,
 } from "@goauthentik/elements/controllers/ModalOrchestrationController.js";
 
+import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, css, html, nothing } from "lit";
 import { customElement, property } from "lit/decorators.js";
 
@@ -115,7 +116,7 @@ export class ModalButton extends AKElement {
                         }}
                         class="pf-c-button pf-m-plain"
                         type="button"
-                        aria-label="Close dialog"
+                        aria-label=${msg("Close dialog")}
                     >
                         <i class="fas fa-times" aria-hidden="true"></i>
                     </button>

web/src/elements/forms/FormGroup.ts

@@ -1,5 +1,6 @@
 import { AKElement } from "@goauthentik/elements/Base";
 
+import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, css, html } from "lit";
 import { customElement, property } from "lit/decorators.js";
 
@@ -26,7 +27,7 @@ export class FormGroup extends AKElement {
     expanded = false;
 
     @property({ type: String, attribute: "aria-label", reflect: true })
-    ariaLabel = "Details";
+    ariaLabel = msg("Details");
 
     static get styles(): CSSResult[] {
         return [

web/src/elements/notifications/APIDrawer.ts

@@ -101,7 +101,7 @@ export class APIDrawer extends AKElement {
                                 }}
                                 class="pf-c-button pf-m-plain"
                                 type="button"
-                                aria-label="Close"
+                                aria-label=${msg("Close")}
                             >
                                 <i class="fas fa-times" aria-hidden="true"></i>
                             </button>

web/src/elements/rbac/RoleObjectPermissionTable.ts

@@ -52,7 +52,7 @@ export class RoleAssignedObjectPermissionTable extends Table<RoleAssignedObjectP
     }
 
     columns(): TableColumn[] {
-        const baseColumns = [new TableColumn("User", "user")];
+        const baseColumns = [new TableColumn(msg("User"), "user")];
         // We don't check pagination since models shouldn't need to have that many permissions?
         this.modelPermissions?.results.forEach((perm) => {
             baseColumns.push(new TableColumn(perm.name, perm.codename));

web/src/elements/rbac/UserObjectPermissionTable.ts

@@ -52,7 +52,7 @@ export class UserAssignedObjectPermissionTable extends Table<UserAssignedObjectP
     }
 
     columns(): TableColumn[] {
-        const baseColumns = [new TableColumn("User", "user")];
+        const baseColumns = [new TableColumn(msg("User"), "user")];
         // We don't check pagination since models shouldn't need to have that many permissions?
         this.modelPermissions?.results.forEach((perm) => {
             baseColumns.push(new TableColumn(perm.name, perm.codename));

web/src/elements/sidebar/Sidebar.ts

@@ -2,6 +2,7 @@ import { AKElement } from "@goauthentik/elements/Base";
 import "@goauthentik/elements/sidebar/SidebarBrand";
 import "@goauthentik/elements/sidebar/SidebarUser";
 
+import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, css, html } from "lit";
 import { customElement } from "lit/decorators.js";
 
@@ -68,7 +69,7 @@ export class Sidebar extends AKElement {
     render(): TemplateResult {
         return html`<nav
             class="pf-c-nav ${this.activeTheme === UiThemeEnum.Light ? "pf-m-light" : ""}"
-            aria-label="Global"
+            aria-label=${msg("Global")}
         >
             <ak-sidebar-brand></ak-sidebar-brand>
             <ul class="pf-c-nav__list">

web/src/elements/table/TableModal.ts

@@ -4,6 +4,7 @@ import { MODAL_BUTTON_STYLES } from "@goauthentik/elements/buttons/ModalButton";
 import { ModalShowEvent } from "@goauthentik/elements/controllers/ModalOrchestrationController.js";
 import { Table } from "@goauthentik/elements/table/Table";
 
+import { msg } from "@lit/localize";
 import { CSSResult } from "lit";
 import { TemplateResult, html } from "lit";
 import { property } from "lit/decorators.js";
@@ -92,7 +93,7 @@ export abstract class TableModal<T> extends Table<T> {
                         @click=${() => (this.open = false)}
                         class="pf-c-button pf-m-plain"
                         type="button"
-                        aria-label="Close dialog"
+                        aria-label=${msg("Close dialog")}
                     >
                         <i class="fas fa-times" aria-hidden="true"></i>
                     </button>

web/src/elements/table/TablePagination.ts

@@ -52,7 +52,7 @@ export class TablePagination extends AKElement {
                         </span>
                     </div>
                 </div>
-                <nav class="pf-c-pagination__nav" aria-label="Pagination">
+                <nav class="pf-c-pagination__nav" aria-label=${msg("Pagination")}>
                     <div class="pf-c-pagination__nav-control pf-m-prev">
                         <button
                             class="pf-c-button pf-m-plain"

web/src/user/LibraryApplication/RACLaunchEndpointModal.ts

@@ -43,7 +43,7 @@ export class RACLaunchEndpointModal extends TableModal<Endpoint> {
     }
 
     columns(): TableColumn[] {
-        return [new TableColumn("Name")];
+        return [new TableColumn(msg("Name"))];
     }
 
     row(item: Endpoint): TemplateResult[] {

web/xliff/pseudo-LOCALE.xlf

@@ -8347,312 +8347,459 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="s00bcaadd620a11f8">
   <source>Latest version unknown</source>
+  <target>Ĺàţēśţ vēŕśĩōń ũńķńōŵń</target>
 </trans-unit>
 <trans-unit id="s10fedec3a779ea63">
   <source>Timestamp</source>
+  <target>Ţĩmēśţàmƥ</target>
 </trans-unit>
 <trans-unit id="s48e186fb300e5464">
   <source>Time</source>
+  <target>Ţĩmē</target>
 </trans-unit>
 <trans-unit id="saa8aa81ad6f055fd">
   <source>Level</source>
+  <target>Ĺēvēĺ</target>
 </trans-unit>
 <trans-unit id="sd0ea7366ebc403ff">
   <source>Event</source>
+  <target>Ēvēńţ</target>
 </trans-unit>
 <trans-unit id="s225f3e57c6a0d635">
   <source>Logger</source>
+  <target>Ĺōĝĝēŕ</target>
 </trans-unit>
 <trans-unit id="s39d6971531a270b6">
   <source>Update internal password on login</source>
+  <target>Ũƥďàţē ĩńţēŕńàĺ ƥàśśŵōŕď ōń ĺōĝĩń</target>
 </trans-unit>
 <trans-unit id="sefe04e319223a3d6">
   <source>When the user logs in to authentik using this source password backend, update their credentials in authentik.</source>
+  <target>Ŵĥēń ţĥē ũśēŕ ĺōĝś ĩń ţō àũţĥēńţĩķ ũśĩńĝ ţĥĩś śōũŕćē ƥàśśŵōŕď ƀàćķēńď, ũƥďàţē ţĥēĩŕ ćŕēďēńţĩàĺś ĩń àũţĥēńţĩķ.</target>
 </trans-unit>
 <trans-unit id="s5f43af3669b1e098">
   <source>Source</source>
+  <target>Śōũŕćē</target>
 </trans-unit>
 <trans-unit id="sd9f752de8448bcc9">
   <source>Resume timeout</source>
+  <target>Ŕēśũmē ţĩmēōũţ</target>
 </trans-unit>
 <trans-unit id="s517954806d7610f2">
   <source>Amount of time a user can take to return from the source to continue the flow.</source>
+  <target>Àmōũńţ ōƒ ţĩmē à ũśēŕ ćàń ţàķē ţō ŕēţũŕń ƒŕōm ţĥē śōũŕćē ţō ćōńţĩńũē ţĥē ƒĺōŵ.</target>
 </trans-unit>
 <trans-unit id="s8c4bc6e515949112">
   <source>Your Install ID</source>
+  <target>Ŷōũŕ Ĩńśţàĺĺ ĨĎ</target>
 </trans-unit>
 <trans-unit id="s8cc0075913c67566">
   <source>Enter the email associated with your account, and we'll send you a link to reset your password.</source>
+  <target>Ēńţēŕ ţĥē ēmàĩĺ àśśōćĩàţēď ŵĩţĥ ŷōũŕ àććōũńţ, àńď ŵē'ĺĺ śēńď ŷōũ à ĺĩńķ ţō ŕēśēţ ŷōũŕ ƥàśśŵōŕď.</target>
 </trans-unit>
 <trans-unit id="s06bfe45ffef2cf60">
   <source>Stage name: <x id="0" equiv-text="${this.challenge.name}"/></source>
+  <target>Śţàĝē ńàmē: <x id="0" equiv-text="${this.challenge.name}"/></target>
 </trans-unit>
 <trans-unit id="s90064dd5c4dde2c6">
   <source>Please scan the QR code above using the Microsoft Authenticator, Google Authenticator, or other authenticator apps on your device, and enter the code the device displays below to finish setting up the MFA device.</source>
+  <target>Ƥĺēàśē śćàń ţĥē ǪŔ ćōďē àƀōvē ũśĩńĝ ţĥē Mĩćŕōśōƒţ Àũţĥēńţĩćàţōŕ, Ĝōōĝĺē Àũţĥēńţĩćàţōŕ, ōŕ ōţĥēŕ àũţĥēńţĩćàţōŕ àƥƥś ōń ŷōũŕ ďēvĩćē, àńď ēńţēŕ ţĥē ćōďē ţĥē ďēvĩćē ďĩśƥĺàŷś ƀēĺōŵ ţō ƒĩńĩśĥ śēţţĩńĝ ũƥ ţĥē MƑÀ ďēvĩćē.</target>
 </trans-unit>
 <trans-unit id="s02160dc6adba3456">
   <source>Inject an OAuth or SAML Source into the flow execution. This allows for additional user verification, or to dynamically access different sources for different user identifiers (username, email address, etc).</source>
+  <target>ĨńĴēćţ àń ŌÀũţĥ ōŕ ŚÀMĹ Śōũŕćē ĩńţō ţĥē ƒĺōŵ ēxēćũţĩōń. Ţĥĩś àĺĺōŵś ƒōŕ àďďĩţĩōńàĺ ũśēŕ vēŕĩƒĩćàţĩōń, ōŕ ţō ďŷńàmĩćàĺĺŷ àććēśś ďĩƒƒēŕēńţ śōũŕćēś ƒōŕ ďĩƒƒēŕēńţ ũśēŕ ĩďēńţĩƒĩēŕś (ũśēŕńàmē, ēmàĩĺ àďďŕēśś, ēţć).</target>
 </trans-unit>
 <trans-unit id="sc7d071fb5cc1f6bf">
   <source>A selection is required</source>
+  <target>À śēĺēćţĩōń ĩś ŕēǫũĩŕēď</target>
 </trans-unit>
 <trans-unit id="sa64fb483becc9c2c">
   <source>Device type restrictions</source>
+  <target>Ďēvĩćē ţŷƥē ŕēśţŕĩćţĩōńś</target>
 </trans-unit>
 <trans-unit id="sbb928551c84cd63f">
   <source>Available Device types</source>
+  <target>Àvàĩĺàƀĺē Ďēvĩćē ţŷƥēś</target>
 </trans-unit>
 <trans-unit id="s6446c35d6b411e53">
   <source>Selected Device types</source>
+  <target>Śēĺēćţēď Ďēvĩćē ţŷƥēś</target>
 </trans-unit>
 <trans-unit id="s1f4df216b56de4ac">
   <source>Optionally restrict which WebAuthn device types may be used. When no device types are selected, all devices are allowed.</source>
+  <target>Ōƥţĩōńàĺĺŷ ŕēśţŕĩćţ ŵĥĩćĥ ŴēƀÀũţĥń ďēvĩćē ţŷƥēś màŷ ƀē ũśēď. Ŵĥēń ńō ďēvĩćē ţŷƥēś àŕē śēĺēćţēď, àĺĺ ďēvĩćēś àŕē àĺĺōŵēď.</target>
 </trans-unit>
 <trans-unit id="s23ed998c51cbe38f">
   <source>If the user has successfully authenticated with a device in the classes listed above within this configured duration, this stage will be skipped.</source>
+  <target>Ĩƒ ţĥē ũśēŕ ĥàś śũććēśśƒũĺĺŷ àũţĥēńţĩćàţēď ŵĩţĥ à ďēvĩćē ĩń ţĥē ćĺàśśēś ĺĩśţēď àƀōvē ŵĩţĥĩń ţĥĩś ćōńƒĩĝũŕēď ďũŕàţĩōń, ţĥĩś śţàĝē ŵĩĺĺ ƀē śķĩƥƥēď.</target>
 </trans-unit>
 <trans-unit id="s4d4f52ccfd9d6adf">
   <source>WebAuthn-specific settings</source>
+  <target>ŴēƀÀũţĥń-śƥēćĩƒĩć śēţţĩńĝś</target>
 </trans-unit>
 <trans-unit id="sb46d2e64f64c6284">
   <source>WebAuthn Device type restrictions</source>
+  <target>ŴēƀÀũţĥń Ďēvĩćē ţŷƥē ŕēśţŕĩćţĩōńś</target>
 </trans-unit>
 <trans-unit id="s11274960b13cf21a">
   <source>This restriction only applies to devices created in authentik 2024.4 or later.</source>
+  <target>Ţĥĩś ŕēśţŕĩćţĩōń ōńĺŷ àƥƥĺĩēś ţō ďēvĩćēś ćŕēàţēď ĩń àũţĥēńţĩķ 2024.4 ōŕ ĺàţēŕ.</target>
 </trans-unit>
 <trans-unit id="s4888252cbd785175">
   <source>Default token duration</source>
+  <target>Ďēƒàũĺţ ţōķēń ďũŕàţĩōń</target>
 </trans-unit>
 <trans-unit id="s25c80a16a07871ba">
   <source>Default duration for generated tokens</source>
+  <target>Ďēƒàũĺţ ďũŕàţĩōń ƒōŕ ĝēńēŕàţēď ţōķēńś</target>
 </trans-unit>
 <trans-unit id="se5c9ffc025fdf61d">
   <source>Default token length</source>
+  <target>Ďēƒàũĺţ ţōķēń ĺēńĝţĥ</target>
 </trans-unit>
 <trans-unit id="sa6b2c110466d1754">
   <source>Default length of generated tokens</source>
+  <target>Ďēƒàũĺţ ĺēńĝţĥ ōƒ ĝēńēŕàţēď ţōķēńś</target>
 </trans-unit>
 <trans-unit id="s1f25e1e20469a9ea">
   <source>deleted</source>
+  <target>ďēĺēţēď</target>
 </trans-unit>
 <trans-unit id="s0ca04e397298bc43">
   <source>Select permissions to assign</source>
+  <target>Śēĺēćţ ƥēŕmĩśśĩōńś ţō àśśĩĝń</target>
 </trans-unit>
 <trans-unit id="s676d94e7e31a8075">
   <source>SCIM Source is in preview.</source>
+  <target>ŚĆĨM Śōũŕćē ĩś ĩń ƥŕēvĩēŵ.</target>
 </trans-unit>
 <trans-unit id="s31f1afc0a81977c1">
   <source>Update SCIM Source</source>
+  <target>Ũƥďàţē ŚĆĨM Śōũŕćē</target>
 </trans-unit>
 <trans-unit id="s4bb356adc8a7f85b">
   <source>SCIM Base URL</source>
+  <target>ŚĆĨM ßàśē ŨŔĹ</target>
 </trans-unit>
 <trans-unit id="sb23304fc42c5d6d9">
   <source>Provisioned Users</source>
+  <target>Ƥŕōvĩśĩōńēď Ũśēŕś</target>
 </trans-unit>
 <trans-unit id="s6a81ee82b2e5ecbb">
   <source>Provisioned Groups</source>
+  <target>Ƥŕōvĩśĩōńēď Ĝŕōũƥś</target>
 </trans-unit>
 <trans-unit id="s10154dbd4fbc697b">
   <source>removed</source>
+  <target>ŕēmōvēď</target>
 </trans-unit>
 <trans-unit id="s30d6ff9e15e0a40a">
   <source>Verifying...</source>
+  <target>Vēŕĩƒŷĩńĝ...</target>
 </trans-unit>
 <trans-unit id="sc1673c93148583ba">
   <source>Request failed. Please try again later.</source>
+  <target>Ŕēǫũēśţ ƒàĩĺēď. Ƥĺēàśē ţŕŷ àĝàĩń ĺàţēŕ.</target>
 </trans-unit>
 <trans-unit id="s85be1f5e7a0fa3b1">
   <source>Available Roles</source>
+  <target>Àvàĩĺàƀĺē Ŕōĺēś</target>
 </trans-unit>
 <trans-unit id="sa59d53ee922c08b5">
   <source>Selected Roles</source>
+  <target>Śēĺēćţēď Ŕōĺēś</target>
 </trans-unit>
 <trans-unit id="s7bfbf84a8ad5883f">
   <source>Internal Service accounts are created and managed by authentik and cannot be created manually.</source>
+  <target>Ĩńţēŕńàĺ Śēŕvĩćē àććōũńţś àŕē ćŕēàţēď àńď màńàĝēď ƀŷ àũţĥēńţĩķ àńď ćàńńōţ ƀē ćŕēàţēď màńũàĺĺŷ.</target>
 </trans-unit>
 <trans-unit id="sb0680e5f8782db1e">
   <source>Private key Algorithm</source>
+  <target>Ƥŕĩvàţē ķēŷ Àĺĝōŕĩţĥm</target>
 </trans-unit>
 <trans-unit id="sa03cbf19feebd249">
   <source>RSA</source>
+  <target>ŔŚÀ</target>
 </trans-unit>
 <trans-unit id="sfbfccbd3e395c147">
   <source>ECDSA</source>
+  <target>ĒĆĎŚÀ</target>
 </trans-unit>
 <trans-unit id="sebea299e52db4242">
   <source>Algorithm used to generate the private key.</source>
+  <target>Àĺĝōŕĩţĥm ũśēď ţō ĝēńēŕàţē ţĥē ƥŕĩvàţē ķēŷ.</target>
 </trans-unit>
 <trans-unit id="s21e38ec6ffa2b918">
   <source>Added ID <x id="0" equiv-text="${item}"/></source>
+  <target>Àďďēď ĨĎ <x id="0" equiv-text="${item}"/></target>
 </trans-unit>
 <trans-unit id="s74918a09ef39ed26">
   <source>Removed ID <x id="0" equiv-text="${item}"/></source>
+  <target>Ŕēmōvēď ĨĎ <x id="0" equiv-text="${item}"/></target>
 </trans-unit>
 <trans-unit id="s3a20e5d7dd70dcd3">
   <source>Cleared</source>
+  <target>Ćĺēàŕēď</target>
 </trans-unit>
 <trans-unit id="s8cfd29891b2c93f0">
   <source>Google Workspace Provider</source>
+  <target>Ĝōōĝĺē Ŵōŕķśƥàćē Ƥŕōvĩďēŕ</target>
 </trans-unit>
 <trans-unit id="sa817aa9f6f88a991">
   <source>Credentials</source>
+  <target>Ćŕēďēńţĩàĺś</target>
 </trans-unit>
 <trans-unit id="sc668815044e218c2">
   <source>Delegated Subject</source>
+  <target>Ďēĺēĝàţēď ŚũƀĴēćţ</target>
 </trans-unit>
 <trans-unit id="se89a9ecf275e4343">
   <source>Default group email domain</source>
+  <target>Ďēƒàũĺţ ĝŕōũƥ ēmàĩĺ ďōmàĩń</target>
 </trans-unit>
 <trans-unit id="s64a0a6da6ed6d680">
   <source>Default domain that is used to generate a group's email address. Can be customized using property mappings.</source>
+  <target>Ďēƒàũĺţ ďōmàĩń ţĥàţ ĩś ũśēď ţō ĝēńēŕàţē à ĝŕōũƥ'ś ēmàĩĺ àďďŕēśś. Ćàń ƀē ćũśţōmĩźēď ũśĩńĝ ƥŕōƥēŕţŷ màƥƥĩńĝś.</target>
 </trans-unit>
 <trans-unit id="sd061e65955e036ca">
   <source>User deletion action</source>
+  <target>Ũśēŕ ďēĺēţĩōń àćţĩōń</target>
 </trans-unit>
 <trans-unit id="s87f86f65b5e19ea7">
   <source>User is deleted</source>
+  <target>Ũśēŕ ĩś ďēĺēţēď</target>
 </trans-unit>
 <trans-unit id="s3906cd4a102867a3">
   <source>Suspend</source>
+  <target>Śũśƥēńď</target>
 </trans-unit>
 <trans-unit id="s0bf5b364e2c79392">
   <source>User is suspended, and connection to user in authentik is removed.</source>
+  <target>Ũśēŕ ĩś śũśƥēńďēď, àńď ćōńńēćţĩōń ţō ũśēŕ ĩń àũţĥēńţĩķ ĩś ŕēmōvēď.</target>
 </trans-unit>
 <trans-unit id="s4acb0250d735c2a9">
   <source>Do Nothing</source>
+  <target>Ďō Ńōţĥĩńĝ</target>
 </trans-unit>
 <trans-unit id="s5fe525d19499ed47">
   <source>The connection is removed but the user is not modified</source>
+  <target>Ţĥē ćōńńēćţĩōń ĩś ŕēmōvēď ƀũţ ţĥē ũśēŕ ĩś ńōţ mōďĩƒĩēď</target>
 </trans-unit>
 <trans-unit id="s676a0127c35d240a">
   <source>Determines what authentik will do when a User is deleted.</source>
+  <target>Ďēţēŕmĩńēś ŵĥàţ àũţĥēńţĩķ ŵĩĺĺ ďō ŵĥēń à Ũśēŕ ĩś ďēĺēţēď.</target>
 </trans-unit>
 <trans-unit id="sd1aa04cc32caf2b0">
   <source>Group deletion action</source>
+  <target>Ĝŕōũƥ ďēĺēţĩōń àćţĩōń</target>
 </trans-unit>
 <trans-unit id="s874c788479481131">
   <source>Group is deleted</source>
+  <target>Ĝŕōũƥ ĩś ďēĺēţēď</target>
 </trans-unit>
 <trans-unit id="s0983fa9b84e4a9f7">
   <source>The connection is removed but the group is not modified</source>
+  <target>Ţĥē ćōńńēćţĩōń ĩś ŕēmōvēď ƀũţ ţĥē ĝŕōũƥ ĩś ńōţ mōďĩƒĩēď</target>
 </trans-unit>
 <trans-unit id="sdb872a9f425937fa">
   <source>Determines what authentik will do when a Group is deleted.</source>
+  <target>Ďēţēŕmĩńēś ŵĥàţ àũţĥēńţĩķ ŵĩĺĺ ďō ŵĥēń à Ĝŕōũƥ ĩś ďēĺēţēď.</target>
 </trans-unit>
 <trans-unit id="sa5f28f1ad0bee45b">
   <source>Google Workspace Provider is in preview.</source>
+  <target>Ĝōōĝĺē Ŵōŕķśƥàćē Ƥŕōvĩďēŕ ĩś ĩń ƥŕēvĩēŵ.</target>
 </trans-unit>
 <trans-unit id="s958928ab6208d748">
   <source>Microsoft Entra Provider</source>
+  <target>Mĩćŕōśōƒţ Ēńţŕà Ƥŕōvĩďēŕ</target>
 </trans-unit>
 <trans-unit id="sc7d6bc4aebb58fe9">
   <source>Google Cloud credentials file.</source>
+  <target>Ĝōōĝĺē Ćĺōũď ćŕēďēńţĩàĺś ƒĩĺē.</target>
 </trans-unit>
 <trans-unit id="s2e707072d5a9615d">
   <source>Email address of the user the actions of authentik will be delegated to.</source>
+  <target>Ēmàĩĺ àďďŕēśś ōƒ ţĥē ũśēŕ ţĥē àćţĩōńś ōƒ àũţĥēńţĩķ ŵĩĺĺ ƀē ďēĺēĝàţēď ţō.</target>
 </trans-unit>
 <trans-unit id="s03a759e65ceb722d">
   <source>Client ID for the app registration.</source>
+  <target>Ćĺĩēńţ ĨĎ ƒōŕ ţĥē àƥƥ ŕēĝĩśţŕàţĩōń.</target>
 </trans-unit>
 <trans-unit id="s479980cf9252628c">
   <source>Client secret for the app registration.</source>
+  <target>Ćĺĩēńţ śēćŕēţ ƒōŕ ţĥē àƥƥ ŕēĝĩśţŕàţĩōń.</target>
 </trans-unit>
 <trans-unit id="s25c2392ffcb78df2">
   <source>Tenant ID</source>
+  <target>Ţēńàńţ ĨĎ</target>
 </trans-unit>
 <trans-unit id="s89e4e698cdb1187f">
   <source>ID of the tenant accounts will be synced into.</source>
+  <target>ĨĎ ōƒ ţĥē ţēńàńţ àććōũńţś ŵĩĺĺ ƀē śŷńćēď ĩńţō.</target>
 </trans-unit>
 <trans-unit id="sf341f5dfc7a11633">
   <source>Microsoft Entra Provider is in preview.</source>
+  <target>Mĩćŕōśōƒţ Ēńţŕà Ƥŕōvĩďēŕ ĩś ĩń ƥŕēvĩēŵ.</target>
 </trans-unit>
 <trans-unit id="s79dd6df244c05ae9">
   <source>Update Microsoft Entra Provider</source>
+  <target>Ũƥďàţē Mĩćŕōśōƒţ Ēńţŕà Ƥŕōvĩďēŕ</target>
 </trans-unit>
 <trans-unit id="saf4b498d81141878">
   <source>Finished successfully</source>
+  <target>Ƒĩńĩśĥēď śũććēśśƒũĺĺŷ</target>
 </trans-unit>
 <trans-unit id="s46f1d86ffec6223c">
   <source>Finished with errors</source>
+  <target>Ƒĩńĩśĥēď ŵĩţĥ ēŕŕōŕś</target>
 </trans-unit>
 <trans-unit id="sbd12ed8a1053a108">
   <source>Finished <x id="0" equiv-text="${getRelativeTime(task.finishTimestamp)}"/> (<x id="1" equiv-text="${task.finishTimestamp.toLocaleString()}"/>)</source>
+  <target>Ƒĩńĩśĥēď <x id="0" equiv-text="${getRelativeTime(task.finishTimestamp)}"/> (<x id="1" equiv-text="${task.finishTimestamp.toLocaleString()}"/>)</target>
 </trans-unit>
 <trans-unit id="sc3c334d642866997">
   <source>Sync currently running</source>
+  <target>Śŷńć ćũŕŕēńţĺŷ ŕũńńĩńĝ</target>
 </trans-unit>
 <trans-unit id="sd520a4089006ca93">
   <source>Update Google Workspace Provider</source>
+  <target>Ũƥďàţē Ĝōōĝĺē Ŵōŕķśƥàćē Ƥŕōvĩďēŕ</target>
 </trans-unit>
 <trans-unit id="sfdfa5bb4ddd99d70">
   <source>Enterprise only</source>
+  <target>Ēńţēŕƥŕĩśē ōńĺŷ</target>
 </trans-unit>
 <trans-unit id="scffa59cfac1951f2">
   <source><x id="0" equiv-text="${type.name}"/> Icon</source>
+  <target><x id="0" equiv-text="${type.name}"/> Ĩćōń</target>
 </trans-unit>
 <trans-unit id="s1da3499258024860">
   <source><x id="0" equiv-text="${versionString}"/> (build <x id="1" equiv-text="${this.outpostHealth.buildHash.substring(0, 8)}"/>)</source>
+  <target><x id="0" equiv-text="${versionString}"/> (ƀũĩĺď <x id="1" equiv-text="${this.outpostHealth.buildHash.substring(0, 8)}"/>)</target>
 </trans-unit>
 <trans-unit id="s001fd928369d4ddc">
   <source><x id="0" equiv-text="${versionString}"/> (FIPS)</source>
+  <target><x id="0" equiv-text="${versionString}"/> (ƑĨƤŚ)</target>
 </trans-unit>
 <trans-unit id="sce17c2bdea3e6ace">
   <source>Score minimum threshold</source>
+  <target>Śćōŕē mĩńĩmũm ţĥŕēśĥōĺď</target>
 </trans-unit>
 <trans-unit id="sf2fcb974c62625fc">
   <source>Minimum required score to allow continuing</source>
+  <target>Mĩńĩmũm ŕēǫũĩŕēď śćōŕē ţō àĺĺōŵ ćōńţĩńũĩńĝ</target>
 </trans-unit>
 <trans-unit id="s7452199a73ce8b78">
   <source>Score maximum threshold</source>
+  <target>Śćōŕē màxĩmũm ţĥŕēśĥōĺď</target>
 </trans-unit>
 <trans-unit id="s2d3a6cd50b46b44d">
   <source>Maximum allowed score to allow continuing</source>
+  <target>Màxĩmũm àĺĺōŵēď śćōŕē ţō àĺĺōŵ ćōńţĩńũĩńĝ</target>
 </trans-unit>
 <trans-unit id="s9d6e40d9a9a58fbf">
   <source>Error on invalid score</source>
+  <target>Ēŕŕōŕ ōń ĩńvàĺĩď śćōŕē</target>
 </trans-unit>
 <trans-unit id="s2af59e2f9f12847a">
   <source>When enabled and the resultant score is outside the threshold, the user will not be able to continue. When disabled, the user will be able to continue and the score can be used in policies to customize further stages.</source>
+  <target>Ŵĥēń ēńàƀĺēď àńď ţĥē ŕēśũĺţàńţ śćōŕē ĩś ōũţśĩďē ţĥē ţĥŕēśĥōĺď, ţĥē ũśēŕ ŵĩĺĺ ńōţ ƀē àƀĺē ţō ćōńţĩńũē. Ŵĥēń ďĩśàƀĺēď, ţĥē ũśēŕ ŵĩĺĺ ƀē àƀĺē ţō ćōńţĩńũē àńď ţĥē śćōŕē ćàń ƀē ũśēď ĩń ƥōĺĩćĩēś ţō ćũśţōmĩźē ƒũŕţĥēŕ śţàĝēś.</target>
 </trans-unit>
 <trans-unit id="s10092327ad833090">
   <source>Microsoft Entra Group(s)</source>
+  <target>Mĩćŕōśōƒţ Ēńţŕà Ĝŕōũƥ(ś)</target>
 </trans-unit>
 <trans-unit id="s811c45ad24a5feae">
   <source>Microsoft Entra User(s)</source>
+  <target>Mĩćŕōśōƒţ Ēńţŕà Ũśēŕ(ś)</target>
 </trans-unit>
 <trans-unit id="s7d2d3d298fdccfc8">
   <source>Google Workspace Group(s)</source>
+  <target>Ĝōōĝĺē Ŵōŕķśƥàćē Ĝŕōũƥ(ś)</target>
 </trans-unit>
 <trans-unit id="s8c9cf2c004755526">
   <source>Google Workspace User(s)</source>
+  <target>Ĝōōĝĺē Ŵōŕķśƥàćē Ũśēŕ(ś)</target>
 </trans-unit>
 <trans-unit id="sd000b42fea07c34a">
   <source>SCIM Group(s)</source>
+  <target>ŚĆĨM Ĝŕōũƥ(ś)</target>
 </trans-unit>
 <trans-unit id="s146769fb55f1ee50">
   <source>SCIM User(s)</source>
+  <target>ŚĆĨM Ũśēŕ(ś)</target>
 </trans-unit>
 <trans-unit id="s35f47dbd321aaf15">
   <source>FIPS compliance: passing</source>
+  <target>ƑĨƤŚ ćōmƥĺĩàńćē: ƥàśśĩńĝ</target>
 </trans-unit>
 <trans-unit id="sc94578030c702562">
   <source>Unverified</source>
+  <target>Ũńvēŕĩƒĩēď</target>
 </trans-unit>
 <trans-unit id="s16749cce7c4c1589">
   <source>FIPS compliance: unverified</source>
+  <target>ƑĨƤŚ ćōmƥĺĩàńćē: ũńvēŕĩƒĩēď</target>
 </trans-unit>
 <trans-unit id="s0b2ad58c3deaa8dd">
   <source>FIPS Status</source>
+  <target>ƑĨƤŚ Śţàţũś</target>
 </trans-unit>
 <trans-unit id="s4facec1106c91cf9">
   <source>Search returned no results.</source>
+  <target>Śēàŕćĥ ŕēţũŕńēď ńō ŕēśũĺţś.</target>
 </trans-unit>
 <trans-unit id="s11ec812e25ceef8a">
   <source>No messages found</source>
+  <target>Ńō mēśśàĝēś ƒōũńď</target>
 </trans-unit>
 <trans-unit id="s23446284b56ca0cc">
   <source>Reputation score(s)</source>
+  <target>Ŕēƥũţàţĩōń śćōŕē(ś)</target>
+</trans-unit>
+<trans-unit id="se166e95fe447ebcd">
+  <source>Close dialog</source>
+  <target>Ćĺōśē ďĩàĺōĝ</target>
+</trans-unit>
+<trans-unit id="s3dc14a4b8129f989">
+  <source>Pagination</source>
+  <target>Ƥàĝĩńàţĩōń</target>
+</trans-unit>
+<trans-unit id="s6d46b842e227be57">
+  <source>Application Details</source>
+  <target>Àƥƥĺĩćàţĩōń Ďēţàĩĺś</target>
+</trans-unit>
+<trans-unit id="s76415a60e548cafe">
+  <source>Provider Configuration</source>
+  <target>Ƥŕōvĩďēŕ Ćōńƒĩĝũŕàţĩōń</target>
+</trans-unit>
+<trans-unit id="sde59c64619570b57">
+  <source>Submit Application</source>
+  <target>Śũƀmĩţ Àƥƥĺĩćàţĩōń</target>
+</trans-unit>
+<trans-unit id="sf2da0e95c78f2cb7">
+  <source>Restore Application Wizard Hint</source>
+  <target>Ŕēśţōŕē Àƥƥĺĩćàţĩōń Ŵĩźàŕď Ĥĩńţ</target>
+</trans-unit>
+<trans-unit id="s76dc6d0d1a7db8e2">
+  <source>Your authentik password</source>
+  <target>Ŷōũŕ àũţĥēńţĩķ ƥàśśŵōŕď</target>
+</trans-unit>
+<trans-unit id="se3a34af2a05c5c98">
+  <source>Internal Service account</source>
+  <target>Ĩńţēŕńàĺ Śēŕvĩćē àććōũńţ</target>
+</trans-unit>
+<trans-unit id="s681c086b8f7afcae">
+  <source>Global</source>
+  <target>Ĝĺōƀàĺ</target>
+</trans-unit>
+<trans-unit id="s1b85e6ac2978a2c0">
+  <source>Outpost integrations</source>
+  <target>Ōũţƥōśţ ĩńţēĝŕàţĩōńś</target>
+</trans-unit>
+<trans-unit id="sec55a3a7f18615ec">
+  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
+  <target>Ōũţƥōśţ ĩńţēĝŕàţĩōńś ďēƒĩńē ĥōŵ àũţĥēńţĩķ ćōńńēćţś ţō ēxţēŕńàĺ ƥĺàţƒōŕmś ţō màńàĝē àńď ďēƥĺōŷ Ōũţƥōśţś.</target>
 </trans-unit>
 <trans-unit id="s7a64ac07061f85b2">
   <source>See documentation</source>