You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Override Domain key in DUO pushinfo for LDAP outposts #26792
When using the Docker compose setup, DUO pushinfo shows Domain=server:9000 during push notification challenges for LDAP-based applications. This is confusing to end users who expect it to match the domain they see during login.
Describe the solution you'd like
A way to override the Domain (or more generally add/change pushinfo sent to DUO) for at least LDAP outposts. Perhaps an environment variable that is passed through to the flow or similar.
Describe alternatives that you've considered
I could change the AUTHENTIK_HOST that the ldap outpost uses to use the public hostname of the server, but that creates a lot of extra hops when the LDAP outpost and the server are in the same compose stack.
Activity
runleveldev commentedon Oct 8, 2026
It might be "cleanest" to use the brand domain instead of the host across the board. Not sure if that's too much of a breaking change.
stages/authenticator_validate: enrich DUO push info with brand domain…
stages/authenticator_validate: enrich DUO push info with brand domain…
stages/authenticator_validate: enrich DUO push info with brand domain…
stages/authenticator_validate: enrich DUO push info with brand domain (…