Authentik Fallback for the disabled local auth
reddit / selfhosted

----------------------------------------------------------------------
fabio_teixei · 2023-12-20 16:26

Hello

I have followed this guide to disable local auth in order to
automaticly redirect all authentication to Azure AD:
[https://blog.lrvt.de/authentik-traefik-azure-ad/#disable-local-
auth](https://blog.lrvt.de/authentik-traefik-azure-ad/#disable-local-
auth)

It's working great, when my users access an aplication, Authentik
quickly apears and they are redirected to Azure AD auth, the usres are
authenticated with Azure AD and them back to the aplication.

I just want to know if theres any way to have some kind of fall back,
moslty for me as Admin, to enter Authentik Dashboard in a case when
Azure AD is not avaliable for an reason or another? Create another
outpost maybe, i dont know.

----------------------------------------------------------------------
sk1nT7 · 2023-12-20 18:24

I once had the problem where Azure AD failed somehow but I already
disabled local auth.

After trying a few things I ended up spawning a shell into the psql
container and adjusting the source configuration directly in the
database. Not nice but you'll always find a way in again.

Since I don't like doing that again, I leave both auth methods enabled
and users are advised to click the Azure AD MS button below the login
field.

----------------------------------------------------------------------
fabio_teixei · 2023-12-20 19:20

I asked there as well.

The SQL route can work for troubleshooting purposes. It's not ideal
but I'm not afraid of SQL so I can do that.

Do you know which tables to change and the values?

Thanks

----------------------------------------------------------------------
sk1nT7 · 2023-12-20 19:25

>Do you know which tables to change and the values?

I would have to look it up again. However, the authentik database
tables are named really straight forward. Will report back if I have
them.

----------------------------------------------------------------------
fabio_teixei · 2023-12-20 21:16

Thanks