authentik/website/docs/releases/next.md

title

title
Next

Headline Changes

• Duo two-factor support

  You can now add the new authenticator_duo stage to configure Duo authenticators. Duo has also been added as device class to the authenticator_validation stage.

  Currently, only Duo push notifications are supported. Because no additional input is required, Duo also works with the LDAP Outpost.

• Multi-tenancy

  This version adds soft multi-tenancy. This means you can configure different branding settings and different default flows per domain.

  This also changes how a default flow is determined. Previously, for defaults flow, authentik would pick the first flow that

    - matches the required designation
    - comes first sorted by slug
    - is allowed by policies
  

  Now, authentik first checks if the current tenant has a default flow configured for the selected designation. If not, it behaves the same as before, meaning that if you want to select a default flow based on policy, you can just leave the tenant default empty.

Minor changes

• You can now specify which sources should be shown on an Identification stage.

Upgrading

This release does not introduce any new requirements.

docker-compose

Download the docker-compose file for 2021.6 from here. Afterwards, simply run docker-compose up -d.

Kubernetes

Upgrade to the latest chart version to get the new images.