From 1c6b42b20b5b729472e9810183f0d9f66b081b65 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Sat, 24 Oct 2026 13:25:02 +0200 Subject: [PATCH] docs: step A of the Scouts Online login is live --- docs/immich-scouts-online.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/docs/immich-scouts-online.md b/docs/immich-scouts-online.md index a5ffcde..71a8436 100644 --- a/docs/immich-scouts-online.md +++ b/docs/immich-scouts-online.md @@ -52,9 +52,12 @@ view, and everything is shared with everyone automatically. ## Steps A. immich OAuth through authentik, next to the password login -- [ ] Vault `kv/immich-oidc`: `client_secret` (random, e.g. `openssl rand -hex 32`) -- [ ] Push the authentik and immich changes (authentik restarts once for the - new mounts, immich once for the config file) +- [x] Vault `kv/immich-oidc`: `client_secret` (random, e.g. `openssl rand -hex 32`) +- [x] Push the authentik and immich changes. Done 2026-10-24: both rolled + over without downtime. authentik only found the new blueprint after + `blueprints_discovery.send()` in `ak shell`; the claims came out as + admin/-1 for authentik Admins, user/-1 for MBG kader, user/0 for MBG + leden, and other users get no access - [ ] Test with an authentik admin account: "Link to OAuth" in immich's account settings for the existing admin