02. Configuration

This document describes briefly how to setup Authentik for the first time and how to implement 2FA for its users.

1. The first thing you need to do is create an admin account by providing an email and a password. It is recommended to use a random generated password by Bitwarden and save it in your vault.

2. We will then go to Admin Interface -> Users -> Change the akadmin username to your preferred username

3. Then finally we can already set up MFA for having access to Authentik by going to Settings -> Credentials -> Enroll. Here you select TOTP. 

4. Now, it is time to start using your Authenticator app. This can either be Aegis, Bitwarden Authenticator or Ente Auth. The last one I would recommend since it is the one that keeps all your credentials automatically backed up by your Ente instance. However, if you did not setup Ente yet I would recommend Aegis for now. You can always later transfer the credentials to Ente Auth later.

5. So now you have setup 2FA for your account but how to setup 2FA for all new users that want to create an Authentik account on your instance ?

6. For this go to Admin Interface -> Flows & Stages -> Flows -> default-authentication-flow -> Stage bindings

7.