Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/files
Pieter 4906b13482 fix: Remove tenant modification from enrollment flow blueprint
The enrollment flow blueprint was failing with error:
"Model authentik.tenants.models.Tenant not allowed"

This is because the tenant/brand model is restricted in Authentik's
blueprint system and cannot be modified via blueprints.

Changes:
- Removed the tenant model entry (lines 150-156)
- Added documentation comment explaining the restriction
- Enrollment flow now applies successfully
- Brand enrollment flow must be configured manually via API if needed

Note: The enrollment flow is still fully functional and accessible
via direct URL even without brand configuration:
https://auth.<domain>/if/flow/default-enrollment-flow/

Tested on: black client deployment
Blueprint status: successful (previously: error)

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-19 14:06:28 +01:00
..
authentik_api.py feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
configure_2fa_enforcement.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
configure_invitation_flow.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
custom-flows.yaml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
enrollment-flow.yaml fix: Remove tenant modification from enrollment flow blueprint 2026-01-19 14:06:28 +01:00
invitation-flow.yaml feat: Add automated invitation stage configuration for Authentik 2026-01-14 16:17:44 +01:00