3 docs tagged with "access-control"

Policies are reusable checks in authentik. They let you control whether a user can access an application, whether a stage in a flow should run, whether a source can be used, or whether data entered in a prompt stage is valid.

This page covers policy bindings: where they apply, how authentik evaluates them, and which options affect the result. For the broader binding model, see Bindings in authentik. For step-by-step instructions, see Working with policies.

For an overview of policies, refer to our documentation on Policies.