Skip to main content

Invitation stage

The Invitation stage is used to invite users to enroll in authentik. It can optionally enroll users with preset values.

Overview​

This stage is typically used in enrollment flows where users should only be allowed to continue if they were invited by an administrator.

An invitation can also carry fixed data that is applied during enrollment.

Configuration options​

  • Continue flow without invitation: if enabled, the flow continues when no invitation token is present. If disabled, the flow stops when the token is missing.

Flow integration​

Add this stage near the beginning of an enrollment flow that should be invitation-gated.

Users can enter the flow with an invitation token by using a URL like:

https://authentik.example/if/flow/your-enrollment-flow/?itoken=invitation-token

You can also collect the token with a Prompt stage by using a prompt field with the key token.

Notes​

  • In policies, you can check whether an invitation is active with request.context.get("invitation_in_effect", False).
  • Invitation objects can be restricted to a specific flow and can be marked as single-use.