Atlas docs mirror
Headless
  • Index
    • Index
    • Index
    • Manage Apps
    • Index
    • Work With Bindings
    • Collect User Attributes
    • Index
    • Default Flows
    • Headless
    • If Flow
    • Sfe
    • User Settings
    • Defaultflowlist
    • Flows
    • Index
    • Inspector
    • Planner
    • Snippets
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Config
    • Embedded
    • Index
    • Docker
    • Kubernetes
    • Manual Deploy Docker Compose
    • Manual Deploy Kubernetes
    • Upgrading
    • Configure Entra
    • Create Entra Provider
    • Index
    • Configure Gws
    • Create Gws Provider
    • Index
    • Index
    • Create Ldap Provider
    • Index
    • Create Oauth2 Provider
    • Device Code
    • Dynamic Client Registration
    • Frontchannel And Backchannel Logout
    • Github Compatibility
    • Index
    • Key Binding
    • Machine To Machine
    • Token Exchange
    • Verify Email Address
    • Webfinger Support
    • Expression
    • Index
    • Placeholders
    • Caddy Standalone
    • Envoy Istio
    • Haproxy Standalone
    • Nginx Ingress
    • Nginx Proxy Manager
    • Nginx Standalone
    • Traefik Compose
    • Traefik Ingress
    • Traefik Standalone
    • Create Proxy Provider
    • Custom Headers
    • Forward Auth
    • Header Authentication
    • Index
    • Server Caddy
    • Server Envoy
    • Server Haproxy
    • Server Nginx
    • Server Traefik
    • Create Rac Provider
    • Index
    • Rac Public Key
    • Rac Credentials Prompt
    • Index
    • Create Saml Provider
    • Index
    • Saml Single Logout
    • Create Scim Provider
    • Index
    • Index
    • Create Ssf Provider
    • Index
    • Create Wsfed Provider
    • Index
    • Architecture
    • Export
    • Index
    • Example
    • Meta
    • Models
    • Structure
    • Tags
    • Working With Blueprints
    • Custom Css
    • Design Language
    • Index
    • File Picker
    • Files
    • Index
    • Enabledfeatureslist
    • Generalattributes
    • Global
    • Index
    • Index
    • Index
    • Bindings
    • Index
    • Event Matcher
    • Index
    • Managing Flow Context Keys
    • Reference
    • Source Switch
    • Unique Email
    • Unique Username
    • Whitelist Email
    • Geoip
    • Index
    • Password Expiry
    • Password Uniqueness
    • Password
    • Reputation
    • Working With Policies
    • Contributing
    • Style Guide
    • Combo
    • Combo.Tmpl
    • Conceptual
    • Conceptual.Tmpl
    • Index
    • Procedural
    • Procedural.Tmpl
    • Reference
    • Reference.Tmpl
    • Index
    • Writing Documentation
    • Cascade Layers
    • Css Architecture
    • Index
    • Index
    • Install Scripts Admonition
    • Debugging
    • Frontend Dev Environment
    • Full Dev Environment
    • Index
    • Translation
    • Automated
    • Index
    • Linux
    • Macos
    • Windows
    • Authentik Cli
    • Configuration
    • Development
    • Aws
    • Index
    • K8S
    • Device Access Groups
    • Index
    • Index
    • Linux
    • Windows
    • Ssh Authentication
    • Download
    • Index
    • Index
    • Template
    • V0.35
    • V0.40
    • Browser Extension
    • Configuration
    • Authentik Agent
    • Fleetdm
    • Google Chrome
    • Index
    • Device Compliance Policy
    • Device Reporting
    • Fleet Conditional Access
    • Index
    • Index
    • Manage Devices
    • Enterprise Features
    • Enterprise Support
    • Get Started
    • Index
    • Manage Enterprise
    • Functions
    • Objects
    • User
    • Air Gapped
    • Automated Install
    • Beta
    • Configuration
    • Email
    • Blurb First Steps
    • Index
    • High Availability
    • Index
    • Aws
    • Docker Compose
    • Kubernetes
    • Reverse Proxy
    • Upgrade
    • V2021.1
    • V2021.10
    • V2021.12
    • V2021.2
    • V2021.3
    • V2021.4
    • V2021.5
    • V2021.6
    • V2021.7
    • V2021.8
    • V2021.9
    • V2022.1
    • V2022.10
    • V2022.11
    • V2022.12
    • V2022.2
    • V2022.3
    • V2022.4
    • V2022.5
    • V2022.6
    • V2022.7
    • V2022.8
    • V2022.9
    • V2023.1
    • V2023.10
    • V2023.2
    • V2023.3
    • V2023.4
    • V2023.5
    • V2023.6
    • V2023.8
    • V2024.10
    • V2024.12
    • V2024.2
    • V2024.4
    • V2024.6
    • V2024.8
    • V2025.10
    • V2025.12
    • V2025.2
    • V2025.4
    • V2025.6
    • V2025.8
    • V2026.11
    • V2026.2
    • V2026.5
    • V2026.8
    • Template
    • V0.10
    • V0.11
    • V0.12
    • V0.13
    • V0.14
    • V0.9
    • Account Lockdown
    • 2023 06 Cure53
    • 2024 11 Cobalt
    • 2025 09 Includesec
    • Cve 2022 23555
    • Cve 2022 46145
    • Cve 2022 46172
    • Cve 2023 26481
    • Cve 2023 36456
    • Cve 2023 39522
    • Cve 2023 46249
    • Cve 2023 48228
    • Cve 2024 21637
    • Cve 2024 23647
    • Cve 2024 37905
    • Cve 2024 38371
    • Cve 2024 42490
    • Cve 2024 47070
    • Cve 2024 47077
    • Cve 2024 52287
    • Cve 2024 52289
    • Cve 2024 52307
    • Cve 2025 29928
    • Cve 2025 52553
    • Cve 2025 53942
    • Cve 2025 64521
    • Cve 2025 64708
    • Cve 2026 25227
    • Cve 2026 25748
    • Cve 2026 25922
    • Cve 2026 40165
    • Cve 2026 40166
    • Cve 2026 41569
    • Cve 2026 42849
    • Cve 2026 47201
    • Cve 2026 49443
    • Cve 2026 49448
    • Cve 2026 54730
    • Cve 2026 55106
    • Cve 2026 57580
    • Ghsa 4R87 W2Cx Fr3F
    • Ghsa 5Wcc Hf24 Rf5H
    • Ghsa Cqj8 Fxxf 9Pg7
    • Ghsa Cxwx 9X59 28Qm
    • Ghsa H6C5 Mpvq J4Jc
    • Ghsa Jpx7 5Hcf W9Xp
    • Ghsa M9H4 7J9C 55X9
    • Ghsa Qgqp Xh8R V73R
    • Policy
    • Security Hardening
    • Akql
    • Background Tasks
    • Certificates
    • Data Exports
    • Event Actions
    • Index
    • Log Forwarding
    • Logging Events
    • Notification Rule Expression Policies
    • Notifications
    • Transports
    • Object Attributes
    • Object Lifecycle Management
    • Hpa
    • Index
    • Keda
    • Backup Restore
    • Geoip
    • Monitoring
    • Index
    • Providers
    • Worker
    • Settings
    • User Offboarding
    • Access
    • Csrf
    • Emails
    • Forward Auth
    • Image Upload
    • Ldap Source
    • Login
    • Logs
    • Outpost Logs
    • Missing Admin Group
    • Missing Permission
    • Slow Queries
    • Upgrade Docker
    • Upgrade Kubernetes
    • Index
    • Initial Permissions
    • Manage Permissions
    • Permissions
    • Group Ref
    • Index
    • Manage Groups
    • Index
    • Manage Roles
    • Index
    • Index
    • Index
    • Index
    • Expressions
    • Index
    • Browser
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Index
    • Agent Accounts
    • External Users
    • Index
    • Internal Users
    • Service Accounts
    • Index
    • Invitations
    • Password Reset On Login
    • User Interface
    • User Switching
    • User Basic Operations
    • User Ref

Headless

The headless flow executor is used by clients that don't have access to the web interface. It is currently used by the LDAP and Radius outposts to authenticate users.

The following stages are supported:

  • Identification stage
  • Password stage
  • Authenticator Validation Stage
Made with Material for MkDocs