Replaced placeholder stub scripts with functional implementations that
configure Authentik flows using the REST API.
Changes:
- Added configure_invitation_flow.py: Creates invitation stage and binds
it to the default enrollment flow
- Added configure_recovery_flow.py: Verifies default recovery flow exists
- Added configure_2fa_enforcement.py: Configures default MFA validation
stage to force TOTP setup on login
- Updated flows.yml to call new configuration scripts
- Removed placeholder create_invitation_flow.py and create_recovery_flow.py
The scripts properly configure Authentik via API to enable:
1. User invitations via email with enrollment flow
2. Password recovery via email
3. Enforced 2FA/TOTP setup on first login
These configurations will work automatically on all future deployments.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
