Auto-Provisioning Pangolin using Authentik

To manage access in Pangolin via Authentik, go to Server Admin -> Identity Providers -> Edit -> Organization Policies tab and set the following fallback mappings:

Default Role Mapping:
contains(groups, 'pangolin-admin') && 'Admin' || 'Member'

Default Organization Mapping:
contains(groups, 'pangolin-org-{{orgId}}')

Then in Authentik, assign groups to users:

1. Go to Directory -> Groups and create:
   • pangolin-admin - for admin users
   • pangolin-org-{orgId} - use the org ID from your Pangolin URL (for example https://your.instance/xy/settings/sites the org ID is xy)
2. Go to Directory -> Users -> -> Groups
   • Add the user the correct pangolin-org-{orgId} group
   • Optionally add the pangolin-admin if they need admin rights.