<?xml version="1.0" encoding="UTF-8"?>
<xliff version="1.2" xmlns="urn:oasis:names:tc:xliff:document:1.2">
<file target-language="en" source-language="en" original="lit-localize-inputs" datatype="plaintext">
<body>
<!-- #region Locales -->
<trans-unit id="en">
  <source>English</source>
</trans-unit>
<trans-unit id="ja-JP">
  <source>Japanese</source>
</trans-unit>
<trans-unit id="ko-KR">
  <source>Korean</source>
</trans-unit>
<trans-unit id="zh-Hans">
  <source>Chinese (Simplified)</source>
</trans-unit>
<trans-unit id="zh-Hant">
  <source>Chinese (Traditional)</source>
</trans-unit>
<!-- #endregion -->

<!-- #region Locale selector  -->
<trans-unit id="locale-auto-detect-option">
  <source>Auto-detect</source>
  <note from="lit-localize">Label for the auto-detect locale option in language selection dropdown</note>
</trans-unit>
<trans-unit id="language-selector-label">
  <source>Select language</source>
  <note from="lit-localize">Label for the language selection dropdown</note>
</trans-unit>
<trans-unit id="locale-option-localized-label">
  <source><x id="0" equiv-text="${relativeDisplayName}"/> (<x id="1" equiv-text="${localizedDisplayName}"/>)</source>
  <note from="lit-localize">Locale option label showing the localized language name along with the native language name in parentheses.</note>
</trans-unit>
<!-- #endregion -->

<trans-unit id="s12d6dde9b30c3093">
  <source>Dismiss</source>
</trans-unit>
<trans-unit id="sfe629863ba1338c2">
  <source>Connection error, reconnecting...</source>
</trans-unit>
<trans-unit id="sdaecc3c29a27c5c5">
  <source>An unknown error occurred</source>
</trans-unit>
<trans-unit id="se84ba7f105934495">
  <source>Please check the browser console for more details.</source>
</trans-unit>
<trans-unit id="sdea479482318489d">
  <source>Status messages</source>
</trans-unit>
<trans-unit id="s9d8b8aa2b404c2c8">
  <source>Settings</source>
</trans-unit>
<trans-unit id="s1298e361e40ee1c5">
  <source>Stop impersonation</source>
</trans-unit>
<trans-unit id="s6abff64e7ff7fde9">
  <source>Avatar image</source>
</trans-unit>
<trans-unit id="s7cfe12cd14df9950">
  <source>Sign out</source>
</trans-unit>
<trans-unit id="saae1c70e168b45b4">
  <source>Admin</source>
</trans-unit>
<trans-unit id="s6abb1cd87fe0114e">
  <source>Home</source>
</trans-unit>
<trans-unit id="s91ae4b6bf981682b">
  <source>authentik Logo</source>
</trans-unit>
<trans-unit id="se58e6ed983bf34b0">
  <source>Collapse navigation</source>
</trans-unit>
<trans-unit id="sc6ef25894ed00175">
  <source>Expand navigation</source>
</trans-unit>
<trans-unit id="s7031e6928c44cedd">
  <source>User interface</source>
</trans-unit>
<trans-unit id="s49730f3d5751a433">
  <source>Loading...</source>
</trans-unit>
<trans-unit id="sf1e9d421f35b51e5">
  <source>Application</source>
</trans-unit>
<trans-unit id="s310d8757ce319673">
  <source>Logins</source>
</trans-unit>
<trans-unit id="s3e99ea082ca5ade9">
  <source>Failed to fetch</source>
</trans-unit>
<trans-unit id="s0b2ad58c3deaa8dd">
  <source>FIPS Status</source>
</trans-unit>
<trans-unit id="s091d3d07b5b3076f">
  <source>OK</source>
</trans-unit>
<trans-unit id="s35f47dbd321aaf15">
  <source>FIPS compliance: passing</source>
</trans-unit>
<trans-unit id="sc94578030c702562">
  <source>Unverified</source>
</trans-unit>
<trans-unit id="s16749cce7c4c1589">
  <source>FIPS compliance: unverified</source>
</trans-unit>
<trans-unit id="sa50a6326530d8a0d">
  <source>Show less</source>
</trans-unit>
<trans-unit id="sb2c57b2d347203dd">
  <source>Show more</source>
</trans-unit>
<trans-unit id="s6238f519db67980d">
  <source>UID</source>
</trans-unit>
<trans-unit id="sef49aec68fd1dc66">
  <source>Name</source>
</trans-unit>
<trans-unit id="sf9f2c719a04066ec">
  <source>App</source>
</trans-unit>
<trans-unit id="sda796c87fa97ed4d">
  <source>Model Name</source>
</trans-unit>
<trans-unit id="s79e8cc71a5975b04">
  <source>Message</source>
</trans-unit>
<trans-unit id="sbbc53e0e54d7946f">
  <source>Subject</source>
</trans-unit>
<trans-unit id="sa6ab5184d6315895">
  <source>From</source>
</trans-unit>
<trans-unit id="s09353907b5c79284">
  <source>To</source>
</trans-unit>
<trans-unit id="s63e03c70f67ebf9c">
  <source>Context</source>
</trans-unit>
<trans-unit id="sa48f81f001b893d2">
  <source>User</source>
</trans-unit>
<trans-unit id="s47fb5504f693775b">
  <source>Changes made:</source>
</trans-unit>
<trans-unit id="s506b6a19d12f414c">
  <source>Key</source>
</trans-unit>
<trans-unit id="s4fc9dc73245eab09">
  <source>Previous value</source>
</trans-unit>
<trans-unit id="scb3b0671d7b7f640">
  <source>New value</source>
</trans-unit>
<trans-unit id="saf63a04c86018698">
  <source>-</source>
</trans-unit>
<trans-unit id="s21e38ec6ffa2b918">
  <source>Added ID <x id="0" equiv-text="${item}"/></source>
</trans-unit>
<trans-unit id="s74918a09ef39ed26">
  <source>Removed ID <x id="0" equiv-text="${item}"/></source>
</trans-unit>
<trans-unit id="s3a20e5d7dd70dcd3">
  <source>Cleared</source>
</trans-unit>
<trans-unit id="s119498d4e4cf59a6">
  <source>Affected model:</source>
</trans-unit>
<trans-unit id="sa3660d505e7011e0">
  <source>Authorized application:</source>
</trans-unit>
<trans-unit id="s95a032ae86881bf5">
  <source>Using flow</source>
</trans-unit>
<trans-unit id="scb5c9a7cc4ccd68d">
  <source>Email info:</source>
</trans-unit>
<trans-unit id="s677f1b675fc21bb1">
  <source>Secret:</source>
</trans-unit>
<trans-unit id="sa6905be242387f36">
  <source>Exception</source>
</trans-unit>
<trans-unit id="sd947d57c9a9b7108">
  <source>Open issue on GitHub...</source>
</trans-unit>
<trans-unit id="s6ab73c998850c5ab">
  <source>Expression</source>
</trans-unit>
<trans-unit id="s50ebe627b4bc7d02">
  <source>Binding</source>
</trans-unit>
<trans-unit id="s3c6de3f257e0c912">
  <source>Request</source>
</trans-unit>
<trans-unit id="s730182ad28374cda">
  <source>Object</source>
</trans-unit>
<trans-unit id="s890e983a7be64da4">
  <source>Result</source>
</trans-unit>
<trans-unit id="sd3a853f63f45dcb0">
  <source>Passing</source>
</trans-unit>
<trans-unit id="sbdeedc1c60306b35">
  <source>Messages</source>
</trans-unit>
<trans-unit id="s4ba4473f3d4ec896">
  <source>New version available</source>
</trans-unit>
<trans-unit id="s0a5401d4419f9958">
  <source>Using source</source>
</trans-unit>
<trans-unit id="s14622ee6de586485">
  <source>Attempted to log in as <x id="0" equiv-text="${this.event.context.username}"/></source>
</trans-unit>
<trans-unit id="sb07bf992e3d00664">
  <source>No additional data available.</source>
</trans-unit>
<trans-unit id="sb59d68ed12d46377">
  <source>Loading</source>
</trans-unit>
<trans-unit id="sf45a0d2f00bcc6ff">
  <source>no tabs defined</source>
</trans-unit>
<trans-unit id="s355b21b89ce5d9c5">
  <source>Details</source>
</trans-unit>
<trans-unit id="s0382d73823585617">
  <source><x id="0" equiv-text="${fieldName}"/>: <x id="1" equiv-text="${detail}"/></source>
</trans-unit>
<trans-unit id="sae5d87e99fe081e0">
  <source>Required</source>
</trans-unit>
<trans-unit id="s44872da71d5307c8">
  <source>There was an error submitting the form.</source>
</trans-unit>
<trans-unit id="se166e95fe447ebcd">
  <source>Close dialog</source>
</trans-unit>
<trans-unit id="s1cd198d689c66e4b">
  <source>API Access</source>
</trans-unit>
<trans-unit id="sf29883ac9ec43085">
  <source>App password</source>
</trans-unit>
<trans-unit id="s6ac670086eb137c6">
  <source>Recovery</source>
</trans-unit>
<trans-unit id="sfe211545fd02f73e">
  <source>Verification</source>
</trans-unit>
<trans-unit id="sd73b202ec04eefd9">
  <source>Unknown intent</source>
</trans-unit>
<trans-unit id="sc8da3cc71de63832">
  <source>Login</source>
</trans-unit>
<trans-unit id="sb4564c127ab8b921">
  <source>Failed login</source>
</trans-unit>
<trans-unit id="s67749057edb2586b">
  <source>Logout</source>
</trans-unit>
<trans-unit id="s7e537ad68d7c16e1">
  <source>User was written to</source>
</trans-unit>
<trans-unit id="sa0e0bdd7e244416b">
  <source>Suspicious request</source>
</trans-unit>
<trans-unit id="s7bda44013984fc48">
  <source>Password set</source>
</trans-unit>
<trans-unit id="sa1b41e334ad89d94">
  <source>Secret was viewed</source>
</trans-unit>
<trans-unit id="s92ca679592a36b35">
  <source>Secret was rotated</source>
</trans-unit>
<trans-unit id="s8a1d9403ca90989b">
  <source>Invitation used</source>
</trans-unit>
<trans-unit id="s5f496533610103f2">
  <source>Application authorized</source>
</trans-unit>
<trans-unit id="sdc9e222be9612939">
  <source>Source linked</source>
</trans-unit>
<trans-unit id="sb1c91762ae3a9bee">
  <source>Impersonation started</source>
</trans-unit>
<trans-unit id="s9c73bd29b279d26b">
  <source>Impersonation ended</source>
</trans-unit>
<trans-unit id="s1cd264012278c047">
  <source>Flow execution</source>
</trans-unit>
<trans-unit id="s32f04d33924ce8ad">
  <source>Policy execution</source>
</trans-unit>
<trans-unit id="sb6d7128df5978cee">
  <source>Policy exception</source>
</trans-unit>
<trans-unit id="s77f572257f69a8db">
  <source>Property Mapping exception</source>
</trans-unit>
<trans-unit id="s2543cffd6ebb6803">
  <source>System task execution</source>
</trans-unit>
<trans-unit id="se2f258b996f7279c">
  <source>System task exception</source>
</trans-unit>
<trans-unit id="s81eff3409d572a21">
  <source>General system exception</source>
</trans-unit>
<trans-unit id="sf8f49cdbf0036343">
  <source>Configuration error</source>
</trans-unit>
<trans-unit id="s9c6f61dc47bc4f0a">
  <source>Model created</source>
</trans-unit>
<trans-unit id="s47a4983a2c6bb749">
  <source>Model updated</source>
</trans-unit>
<trans-unit id="sc9f69360b58706c7">
  <source>Model deleted</source>
</trans-unit>
<trans-unit id="sa266303caf1bd27f">
  <source>Email sent</source>
</trans-unit>
<trans-unit id="s6c410fedda2a575f">
  <source>Update available</source>
</trans-unit>
<trans-unit id="sf1ec4acb8d744ed9">
  <source>Alert</source>
</trans-unit>
<trans-unit id="s9117fb5195e75151">
  <source>Notice</source>
</trans-unit>
<trans-unit id="s34be76c6b1eadbef">
  <source>Warning</source>
</trans-unit>
<trans-unit id="s02240309358f557c">
  <source>Unknown severity</source>
</trans-unit>
<trans-unit id="s858e7ac4b3cf955f">
  <source>Static tokens</source>
</trans-unit>
<trans-unit id="sfcfcf85a57eea78a">
  <source>TOTP Device</source>
</trans-unit>
<trans-unit id="s482bc55a78891ef7">
  <source>A code has been sent to your address: <x id="0" equiv-text="${email}"/></source>
</trans-unit>
<trans-unit id="s5afa3fc77ce8d94d">
  <source>A code has been sent to your email address.</source>
</trans-unit>
<trans-unit id="s37f47fa981493c3b">
  <source>A one-time use code has been sent to you via SMS text message.</source>
</trans-unit>
<trans-unit id="sc92a7248dba5f388">
  <source>Open your authenticator app to retrieve a one-time use code.</source>
</trans-unit>
<trans-unit id="s21d95b4651ad7a1e">
  <source>Enter a one-time recovery code for this user.</source>
</trans-unit>
<trans-unit id="s2e1d5a7d320c25ef">
  <source>Enter the code from your authenticator device.</source>
</trans-unit>
<trans-unit id="se2d65e13768468e0">
  <source>Internal</source>
</trans-unit>
<trans-unit id="s84fcddede27b8e2a">
  <source>External</source>
</trans-unit>
<trans-unit id="s1a635369edaf4dc3">
  <source>Service account</source>
</trans-unit>
<trans-unit id="sff930bf2834e2201">
  <source>Service account (internal)</source>
</trans-unit>
<trans-unit id="s08df8d0a773a3ea0">
  <source>Remove item</source>
</trans-unit>
<trans-unit id="s3633ffed92acaecb">
  <source><x id="0" equiv-text="${this.label || &quot;&quot;}"/> table pagination</source>
</trans-unit>
<trans-unit id="s04c5a637328c9b67">
  <source><x id="0" equiv-text="${startIndex}"/> - <x id="1" equiv-text="${endIndex}"/> of <x id="2" equiv-text="${pageCount}"/></source>
</trans-unit>
<trans-unit id="s6a89bb10338369b4">
  <source>Go to previous page</source>
</trans-unit>
<trans-unit id="s7edad99c6b7bfe88">
  <source>Go to next page</source>
</trans-unit>
<trans-unit id="sc57b150b53a3b9e6">
  <source>This field is required.</source>
</trans-unit>
<trans-unit id="sffa721bb6aa3128d">
  <source>Search...</source>
</trans-unit>
<trans-unit id="s5d929ff1619ac0c9">
  <source>Search</source>
</trans-unit>
<trans-unit id="sbe3756d568bb048e">
  <source>Query suggestions</source>
</trans-unit>
<trans-unit id="sf6e7447df476939f">
  <source>Query input</source>
</trans-unit>
<trans-unit id="s5638954badbd5b21">
  <source>Table Search</source>
</trans-unit>
<trans-unit id="s5f4586bc1e2740e6">
  <source>Clear search</source>
</trans-unit>
<trans-unit id="sd9b15395dd103f80">
  <source>Sort by "<x id="0" equiv-text="${label}"/>"</source>
</trans-unit>
<trans-unit id="s7bc8c327f1f7c82c">
  <source>No objects found.</source>
</trans-unit>
<trans-unit id="sfd44ce578f643145">
  <source>Failed to fetch objects.</source>
</trans-unit>
<trans-unit id="s7dd64bb0c1fa8e87">
  <source>Select "<x id="0" equiv-text="${rowLabel}"/>" row</source>
</trans-unit>
<trans-unit id="sd26f670ca5d5b0c6">
  <source>Collapse row</source>
</trans-unit>
<trans-unit id="s73f51a3532f29159">
  <source>Expand row</source>
</trans-unit>
<trans-unit id="s7b7163270e57e8b4">
  <source>Refresh</source>
</trans-unit>
<trans-unit id="sda170fd79bca1616">
  <source><x id="0" equiv-text="${this.label ?? &quot;Table&quot;}"/> actions</source>
</trans-unit>
<trans-unit id="sd09354b0220a13ce">
  <source>Select all rows on page (<x id="0" equiv-text="${selectedCount}"/> of <x id="1" equiv-text="${pageItemCount}"/> selected)</source>
</trans-unit>
<trans-unit id="s76ef34813bff563f">
  <source>Last refreshed</source>
</trans-unit>
<trans-unit id="s59c9e8f57e3a0075">
  <source><x id="0" equiv-text="${this.label}"/> table</source>
</trans-unit>
<trans-unit id="sa25b60b4fac481aa">
  <source>Table content</source>
</trans-unit>
<trans-unit id="s15a7e4227737b7c4">
  <source>Column actions</source>
</trans-unit>
<trans-unit id="sa65e7bc7ddd3484d">
  <source>Anonymous user</source>
</trans-unit>
<trans-unit id="sc35581d9c1cd67ff">
  <source>On behalf of <x id="0" equiv-text="${renderUsername(event.user.on_behalf_of)}"/></source>
</trans-unit>
<trans-unit id="s7225aacf0eee94d2">
  <source>Authenticated as <x id="0" equiv-text="${renderUsername(event.user.authenticated_as)}"/></source>
</trans-unit>
<trans-unit id="s2152f3482784705f">
  <source>Recent events</source>
</trans-unit>
<trans-unit id="sc265a3e29e1206e4">
  <source>Events</source>
</trans-unit>
<trans-unit id="sa442044b586ec8bf">
  <source>Action</source>
</trans-unit>
<trans-unit id="s02839b01844d6ca8">
  <source>Creation Date</source>
</trans-unit>
<trans-unit id="s4d00f1de1c82281b">
  <source>Client IP</source>
</trans-unit>
<trans-unit id="s1b448a4ea79d4eef">
  <source>No Events found.</source>
</trans-unit>
<trans-unit id="s50911ec1c8aee99a">
  <source>No matching events could be found.</source>
</trans-unit>
<trans-unit id="sd2fa988f1774cfde">
  <source>System Status</source>
</trans-unit>
<trans-unit id="s113c05ef9996ca4b">
  <source>Embedded outpost is not configured correctly.</source>
</trans-unit>
<trans-unit id="seb5ba88f21937c98">
  <source>Check outposts.</source>
</trans-unit>
<trans-unit id="sd0bc94e11935ee5a">
  <source>HTTPS is not detected correctly</source>
</trans-unit>
<trans-unit id="s40bf151b56a64f51">
  <source>Server and client are further than 5 seconds apart.</source>
</trans-unit>
<trans-unit id="sae486938be80729c">
  <source>Everything is ok.</source>
</trans-unit>
<trans-unit id="sf4122b220926be97">
  <source>Version</source>
</trans-unit>
<trans-unit id="scefe482c547fb3f3">
  <source>Based on <x id="0" equiv-text="${value.versionCurrent}"/></source>
</trans-unit>
<trans-unit id="s68a50b1ee6efee7b">
  <source><x id="0" equiv-text="${value.versionLatest}"/> is available!</source>
</trans-unit>
<trans-unit id="s08272eeeddfd244e">
  <source>An outpost is on an incorrect version!</source>
</trans-unit>
<trans-unit id="s713d147e1761d0f0">
  <source>Up-to-date!</source>
</trans-unit>
<trans-unit id="s00bcaadd620a11f8">
  <source>Latest version unknown</source>
</trans-unit>
<trans-unit id="s0a63a8be0b2b422c">
  <source>Workers</source>
</trans-unit>
<trans-unit id="s341ab68d4130de20">
  <source>No workers connected. Background tasks will not run.</source>
</trans-unit>
<trans-unit id="s82cced87e15e0665">
  <source>Worker with incorrect version connected.</source>
</trans-unit>
<trans-unit id="s98327528f00365a7">
  <source>Failed to fetch data.</source>
</trans-unit>
<trans-unit id="s66f26fdcbe2101eb">
  <source>Chart</source>
</trans-unit>
<trans-unit id="s7b58d033cc5112ab">
  <source>Event volume chart</source>
</trans-unit>
<trans-unit id="s11bc220e8fa9d797">
  <source>Authorizations</source>
</trans-unit>
<trans-unit id="sc2f1e5dd74c1b7df">
  <source>Successful Logins</source>
</trans-unit>
<trans-unit id="s3ef3c252ada78076">
  <source>Failed Logins</source>
</trans-unit>
<trans-unit id="s2ceb11be2290bb1b">
  <source>Cancel</source>
</trans-unit>
<trans-unit id="s0914f91b3f985f0f">
  <source>Synchronization status chart</source>
</trans-unit>
<trans-unit id="s477de089b505a6ea">
  <source>SCIM Provider</source>
</trans-unit>
<trans-unit id="s8cfd29891b2c93f0">
  <source>Google Workspace Provider</source>
</trans-unit>
<trans-unit id="s958928ab6208d748">
  <source>Microsoft Entra Provider</source>
</trans-unit>
<trans-unit id="se085f35c8a9203a1">
  <source>LDAP Source</source>
</trans-unit>
<trans-unit id="s334b3924d2bd5d55">
  <source>Kerberos Source</source>
</trans-unit>
<trans-unit id="s8a75e83497a183a2">
  <source>Healthy</source>
</trans-unit>
<trans-unit id="sbf9c5c5a8e5efad4">
  <source>Failed</source>
</trans-unit>
<trans-unit id="se4cd073c125382af">
  <source>Unsynced / N/A</source>
</trans-unit>
<trans-unit id="s3f01dbc864d2a8b9">
  <source>Outpost status chart</source>
</trans-unit>
<trans-unit id="sfeb82261bcf99edd">
  <source>Healthy outposts</source>
</trans-unit>
<trans-unit id="s21b3058faf874368">
  <source>Outdated outposts</source>
</trans-unit>
<trans-unit id="s51f92b6fa76656ca">
  <source>Unhealthy outposts</source>
</trans-unit>
<trans-unit id="s74d86eb7e5a10fdf">
  <source>Operation failed to complete</source>
</trans-unit>
<trans-unit id="sc381422c585b867f">
  <source>Quick actions</source>
</trans-unit>
<trans-unit id="s0a11c2ffb8309d1a">
  <source>Not found</source>
</trans-unit>
<trans-unit id="saa0e2675da69651b">
  <source>The URL "<x id="0" equiv-text="${this.url}"/>" was not found.</source>
</trans-unit>
<trans-unit id="s58cd9c2fe836d9c6">
  <source>Return home</source>
</trans-unit>
<trans-unit id="sd5e9b70ffb7a8b46">
  <source>Skip to content</source>
</trans-unit>
<trans-unit id="sfd13ca8ebd857c2e">
  <source>Create a new application</source>
</trans-unit>
<trans-unit id="s079d388d3cbfa54f">
  <source>Check the logs</source>
</trans-unit>
<trans-unit id="sed8d4c3fd5f60e1f">
  <source>Explore integrations</source>
</trans-unit>
<trans-unit id="sfffb0d0958bfbc42">
  <source>Manage users</source>
</trans-unit>
<trans-unit id="s66313b45b69cfc88">
  <source>Check the release notes</source>
</trans-unit>
<trans-unit id="s3d197283cb019b5a">
  <source>Overview</source>
</trans-unit>
<trans-unit id="s8763a33c3d46aaf5">
  <source>Outpost status</source>
</trans-unit>
<trans-unit id="scc286303aa9c6cb0">
  <source>Sync status</source>
</trans-unit>
<trans-unit id="sbdc4a833de9ca502">
  <source>Logins and authorizations over the last week (per 8 hours)</source>
</trans-unit>
<trans-unit id="s6e09a19aa3952509">
  <source>Apps with most usage</source>
</trans-unit>
<trans-unit id="s85a488cacb57688b">
  <source>Welcome, <x id="0" equiv-text="${displayName}"/></source>
</trans-unit>
<trans-unit id="scdb1bac161852c73">
  <source>Welcome</source>
</trans-unit>
<trans-unit id="s41e035c4bb8d15f2">
  <source>General system status</source>
</trans-unit>
<trans-unit id="s51ea3a244c781b1f">
  <source>Objects created</source>
</trans-unit>
<trans-unit id="sfbadb77fbc61efb8">
  <source>Users created per day in the last month</source>
</trans-unit>
<trans-unit id="s4a34a6be4c68ec87">
  <source>Users created</source>
</trans-unit>
<trans-unit id="sb0669da3df95837c">
  <source>Logins per day in the last month</source>
</trans-unit>
<trans-unit id="s835da49b4dc83a51">
  <source>Failed Logins per day in the last month</source>
</trans-unit>
<trans-unit id="s275c956687e2e656">
  <source>Failed logins</source>
</trans-unit>
<trans-unit id="sb4d7bae2440d9781">
  <source>User Statistics</source>
</trans-unit>
<trans-unit id="scb489a1a173ac3f0">
  <source>Yes</source>
</trans-unit>
<trans-unit id="s09205907b5b56cda">
  <source>No</source>
</trans-unit>
<trans-unit id="s3feea7b49673bef2">
  <source>No log messages.</source>
</trans-unit>
<trans-unit id="s10fedec3a779ea63">
  <source>Timestamp</source>
</trans-unit>
<trans-unit id="s16b9446e3a70e1f4">
  <source>Attributes</source>
</trans-unit>
<trans-unit id="s48e186fb300e5464">
  <source>Time</source>
</trans-unit>
<trans-unit id="saa8aa81ad6f055fd">
  <source>Level</source>
</trans-unit>
<trans-unit id="sd0ea7366ebc403ff">
  <source>Event</source>
</trans-unit>
<trans-unit id="s225f3e57c6a0d635">
  <source>Logger</source>
</trans-unit>
<trans-unit id="se09ab93d69f7f45b">
  <source>Not used by any other object.</source>
</trans-unit>
<trans-unit id="s10922bd0ac765562">
  <source>object will be DELETED</source>
</trans-unit>
<trans-unit id="sf3981f36525b0dbd">
  <source>connection will be deleted</source>
</trans-unit>
<trans-unit id="s93cf77a59db53395">
  <source>reference will be reset to default value</source>
</trans-unit>
<trans-unit id="s3e211d29fa10f843">
  <source>reference will be set to an empty value</source>
</trans-unit>
<trans-unit id="s55fa598b754cc3cc">
  <source><x id="0" equiv-text="${ub.name}"/> (<x id="1" equiv-text="${consequence}"/>)</source>
</trans-unit>
<trans-unit id="sdc673e73b5c13aea">
  <source>Delete</source>
</trans-unit>
<trans-unit id="s1f25e1e20469a9ea">
  <source>deleted</source>
</trans-unit>
<trans-unit id="s09240e07b5b8d640">
  <source>ID</source>
</trans-unit>
<trans-unit id="se33b158a1ec02a09">
  <source>Successfully deleted <x id="0" equiv-text="${this.objects.length} ${this.objectLabel}"/></source>
</trans-unit>
<trans-unit id="sf6eb148db23d19de">
  <source>Failed to delete <x id="0" equiv-text="${this.objectLabel}"/>: <x id="1" equiv-text="${e.toString()}"/></source>
</trans-unit>
<trans-unit id="s039b6434e8a75560">
  <source>Delete <x id="0" equiv-text="${this.objectLabel}"/></source>
</trans-unit>
<trans-unit id="s5819a49638f6d7cb">
  <source>Are you sure you want to delete <x id="0" equiv-text="${this.objects.length} ${this.objectLabel}"/>?</source>
</trans-unit>
<trans-unit id="sd5903cc8de68b3fc">
  <source>No form found</source>
</trans-unit>
<trans-unit id="s7f073c746d0f6324">
  <source>Form actions</source>
</trans-unit>
<trans-unit id="sfd81bd296e2f7585">
  <source>Submit action</source>
</trans-unit>
<trans-unit id="s5baec8151f4a4433">
  <source>Cancel action</source>
</trans-unit>
<trans-unit id="sbcdf61483337948a">
  <source>Successfully updated schedule.</source>
</trans-unit>
<trans-unit id="sd372fe5b712f6b30">
  <source>Crontab</source>
</trans-unit>
<trans-unit id="s95bc8722b2708f8b">
  <source>Paused</source>
</trans-unit>
<trans-unit id="se41af830054194bc">
  <source>Pause this schedule</source>
</trans-unit>
<trans-unit id="sfefce784ec55868f">
  <source>Select an object.</source>
</trans-unit>
<trans-unit id="sc0448bc8a76227cb">
  <source>Failed to fetch objects: </source>
</trans-unit>
<trans-unit id="sf485014051ad0cf7">
  <source>Successfully assigned permission.</source>
</trans-unit>
<trans-unit id="sca7fed2bef53cb99">
  <source>Role</source>
</trans-unit>
<trans-unit id="sc92c1a54034e21cc">
  <source>Assign</source>
</trans-unit>
<trans-unit id="scd84d10ee9137070">
  <source>Assign permission to role</source>
</trans-unit>
<trans-unit id="sb923723d27df40ba">
  <source>Permission(s)</source>
</trans-unit>
<trans-unit id="sc5fb00b25c7f5a02">
  <source>Permission</source>
</trans-unit>
<trans-unit id="s9fb28be12e2c6317">
  <source>Superuser</source>
</trans-unit>
<trans-unit id="s5da52af9b083c29a">
  <source>Model</source>
</trans-unit>
<trans-unit id="s0ca04e397298bc43">
  <source>Select permissions to assign</source>
</trans-unit>
<trans-unit id="sf9aee319a006c9b4">
  <source>Add</source>
</trans-unit>
<trans-unit id="sdeb90bfd8a80b86b">
  <source>Permissions to add</source>
</trans-unit>
<trans-unit id="s36247910d67421e1">
  <source>Select permissions</source>
</trans-unit>
<trans-unit id="s7753c012594cc69e">
  <source>Assigned to role</source>
</trans-unit>
<trans-unit id="s67e136af8fc1107b">
  <source>Assign permission</source>
</trans-unit>
<trans-unit id="s14bfa8fd1bec8889">
  <source>Role doesn't have view permission so description cannot be retrieved.</source>
</trans-unit>
<trans-unit id="s37d1b74df205b528">
  <source>Permissions set on roles which affect this object.</source>
</trans-unit>
<trans-unit id="s9cc631505c17b028">
  <source>Assigned global permissions</source>
</trans-unit>
<trans-unit id="s8f85a0e678846080">
  <source>Assigned object permissions</source>
</trans-unit>
<trans-unit id="s17032e57ba222d2f">
  <source>Permissions assigned to this role which affect all object instances of a given type.</source>
</trans-unit>
<trans-unit id="s5e8250fb85d64c23">
  <source>Close</source>
</trans-unit>
<trans-unit id="sc08c153234510246">
  <source>Update "<x id="0" equiv-text="${this.label || &quot;object&quot;}"/>" Permissions</source>
</trans-unit>
<trans-unit id="s6d25eef21a9e76ba">
  <source>Open "<x id="0" equiv-text="${this.label || &quot;object&quot;}"/>" permissions modal</source>
</trans-unit>
<trans-unit id="se8dca0132c66ae03">
  <source>Permissions</source>
</trans-unit>
<trans-unit id="sd091e43d5e99dea4">
  <source>Waiting to run</source>
</trans-unit>
<trans-unit id="s2f06038e5cfd09df">
  <source>Consumed</source>
</trans-unit>
<trans-unit id="s556a7cc7c0c9f032">
  <source>Pre-processing</source>
</trans-unit>
<trans-unit id="s85994a70cd39166c">
  <source>Running</source>
</trans-unit>
<trans-unit id="sb37a630168e1e0e5">
  <source>Post-processing</source>
</trans-unit>
<trans-unit id="sbe9a51f29a4a2c5b">
  <source>Successful</source>
</trans-unit>
<trans-unit id="s5f343a43e7ea9f91">
  <source>Error</source>
</trans-unit>
<trans-unit id="sc592307ea80f16b9">
  <source>Unknown</source>
</trans-unit>
<trans-unit id="s94f08f46277af7d6">
  <source>Running tasks</source>
</trans-unit>
<trans-unit id="s8b551364b894d1ee">
  <source>Queued tasks</source>
</trans-unit>
<trans-unit id="s2139d19009989a19">
  <source>Successful tasks</source>
</trans-unit>
<trans-unit id="s0787cd9eab5aa6e3">
  <source>Error tasks</source>
</trans-unit>
<trans-unit id="s03ee3cfb0919c62c">
  <source>Task</source>
</trans-unit>
<trans-unit id="sc7637275f670c938">
  <source>Queue</source>
</trans-unit>
<trans-unit id="s84fb675fb17d4455">
  <source>Retries</source>
</trans-unit>
<trans-unit id="s1d300a2f13c19ab4">
  <source>Planned execution time</source>
</trans-unit>
<trans-unit id="sb91d1be10eb2c7da">
  <source>Last updated</source>
</trans-unit>
<trans-unit id="sad3e3c8146fc920f">
  <source>Status</source>
</trans-unit>
<trans-unit id="s8af61807443f32a4">
  <source>Actions</source>
</trans-unit>
<trans-unit id="sa3242c7021e01280">
  <source>Row Actions</source>
</trans-unit>
<trans-unit id="s911c2c952e64b223">
  <source>Show only standalone tasks</source>
</trans-unit>
<trans-unit id="s14053a4609676b8b">
  <source>Exclude successful tasks</source>
</trans-unit>
<trans-unit id="s8ff646d0515aab2a">
  <source>Retry task</source>
</trans-unit>
<trans-unit id="sac44b0f4dc14c227">
  <source>Current execution logs</source>
</trans-unit>
<trans-unit id="s5e13dff03b580216">
  <source>Previous executions logs</source>
</trans-unit>
<trans-unit id="s9b8dccb514a0e34c">
  <source>Schedule</source>
</trans-unit>
<trans-unit id="sf92789320708efed">
  <source>Next run</source>
</trans-unit>
<trans-unit id="s1aecc6c0d6cbf4ed">
  <source>Last status</source>
</trans-unit>
<trans-unit id="s6089c283e28012fb">
  <source>Show only standalone schedules</source>
</trans-unit>
<trans-unit id="s48006fb6e0b1860a">
  <source>Run scheduled task now</source>
</trans-unit>
<trans-unit id="s8b0432eecbd8b034">
  <source>Update</source>
</trans-unit>
<trans-unit id="s6492593d534108e1">
  <source>Update Schedule</source>
</trans-unit>
<trans-unit id="s64ef2a6c2dd1d3d1">
  <source>Edit</source>
</trans-unit>
<trans-unit id="sc797fd9076cc136d">
  <source>Tasks</source>
</trans-unit>
<trans-unit id="sf2d616b20d62240d">
  <source>Schedules</source>
</trans-unit>
<trans-unit id="s3b34d9930e33bd46">
  <source>System Tasks</source>
</trans-unit>
<trans-unit id="saaa3abe03c7260f9">
  <source>Long-running operations which authentik executes in the background.</source>
</trans-unit>
<trans-unit id="s0fbf6dc6a1966408">
  <source>Next</source>
</trans-unit>
<trans-unit id="sc16e00a7a8b2fde2">
  <source>Back</source>
</trans-unit>
<trans-unit id="s56e7ff6cc2abeb0d">
  <source>Wizard steps</source>
</trans-unit>
<trans-unit id="s04e09c193d15e4b4">
  <source>Wizard navigation</source>
</trans-unit>
<trans-unit id="s0c9670f429e74283">
  <source>New application</source>
</trans-unit>
<trans-unit id="s140111d464591e6b">
  <source>Create a new application and configure a provider for it.</source>
</trans-unit>
<trans-unit id="s1a0e95458b44d7f8">
  <source>Any policy must match to grant access</source>
</trans-unit>
<trans-unit id="s7fc1ace65486dc25">
  <source>All policies must match to grant access</source>
</trans-unit>
<trans-unit id="sb80507bed88545a6">
  <source>An application name is required</source>
</trans-unit>
<trans-unit id="s39c052006b2b141a">
  <source>Not a valid URL</source>
</trans-unit>
<trans-unit id="s317f3ab0da3d068a">
  <source>Not a valid slug</source>
</trans-unit>
<trans-unit id="s0268ce9f2abb84de">
  <source>Configure the Application</source>
</trans-unit>
<trans-unit id="s07b0bf005510fe29">
  <source>Type an application name...</source>
</trans-unit>
<trans-unit id="s972540f502b0f4dc">
  <source>Application Name</source>
</trans-unit>
<trans-unit id="s704091f8e3dbd721">
  <source>The name displayed in the application library.</source>
</trans-unit>
<trans-unit id="s91f70424f5d5d23e">
  <source>Slug</source>
</trans-unit>
<trans-unit id="s1cffe58249b04669">
  <source>Internal application name used in URLs.</source>
</trans-unit>
<trans-unit id="s98b1cb8fb62909ec">
  <source>Group</source>
</trans-unit>
<trans-unit id="sc22c7703fd074f5f">
  <source>e.g. Collaboration, Communication, Internal, etc.</source>
</trans-unit>
<trans-unit id="sdae55084f6cb2662">
  <source>Optionally enter a group name. Applications with identical groups are shown grouped together.</source>
</trans-unit>
<trans-unit id="s0639662111324466">
  <source>Policy engine mode</source>
</trans-unit>
<trans-unit id="se2b29e6cfe59414c">
  <source>UI Settings</source>
</trans-unit>
<trans-unit id="s427f788ff333f45b">
  <source>Launch URL</source>
</trans-unit>
<trans-unit id="s71e967b36e080e3c">
  <source>https://...</source>
</trans-unit>
<trans-unit id="s992f8d1a776e763c">
  <source>If left empty, authentik will try to extract the launch URL based on the selected provider.</source>
</trans-unit>
<trans-unit id="s2348f46ebf436671">
  <source>Open in new tab</source>
</trans-unit>
<trans-unit id="s8655c52824caac63">
  <source>If checked, the launch URL will open in a new browser tab or window from the user's application library.</source>
</trans-unit>
<trans-unit id="s909e876731a8febb">
  <source>Select all rows</source>
</trans-unit>
<trans-unit id="s375a13497266db93">
  <source>Bind existing policy/group/user</source>
</trans-unit>
<trans-unit id="s2ba5f4d8f3bd7c57">
  <source>Order</source>
</trans-unit>
<trans-unit id="s965c503c3e42fdfe">
  <source>Enabled</source>
</trans-unit>
<trans-unit id="se1e040b55319a0e8">
  <source>Timeout</source>
</trans-unit>
<trans-unit id="s030ed8a3f12c23ff">
  <source>Configure Bindings</source>
</trans-unit>
<trans-unit id="s030ac0829bb50a49">
  <source>Policy <x id="0" equiv-text="${v.policyObj?.name}"/></source>
</trans-unit>
<trans-unit id="s2a64d2dca3da9b0e">
  <source>Group <x id="0" equiv-text="${v.groupObj?.name}"/></source>
</trans-unit>
<trans-unit id="se5dc026819a32ff8">
  <source>User <x id="0" equiv-text="${v.userObj?.name}"/></source>
</trans-unit>
<trans-unit id="sc387b20e6d629087">
  <source>Configure Policy/User/Group Bindings</source>
</trans-unit>
<trans-unit id="s473f0143efa3f706">
  <source>These policies control which users can access this application.</source>
</trans-unit>
<trans-unit id="s71c3ec95efe723ca">
  <source>No bound policies.</source>
</trans-unit>
<trans-unit id="sc15d60377cc8aaac">
  <source>No policies are currently bound to this object.</source>
</trans-unit>
<trans-unit id="sab1786ef3c0383ba">
  <source>Bind policy/group/user</source>
</trans-unit>
<trans-unit id="s082ea0f3c0a854ff">
  <source>Configure Policy Bindings</source>
</trans-unit>
<trans-unit id="s2e422519ed38f7d8">
  <source>Pass</source>
</trans-unit>
<trans-unit id="sac315d5bd28d4efa">
  <source>Don't Pass</source>
</trans-unit>
<trans-unit id="s40b80eb4cc1f0e0c">
  <source>Edit Binding</source>
</trans-unit>
<trans-unit id="s54a37223ce938349">
  <source>Save Binding</source>
</trans-unit>
<trans-unit id="s931754aabd4a6a47">
  <source>Create a Policy/User/Group Binding</source>
</trans-unit>
<trans-unit id="s042baf59902a711f">
  <source>Policy</source>
</trans-unit>
<trans-unit id="s6b85380416964890">
  <source>Negate result</source>
</trans-unit>
<trans-unit id="s3bfa0258999fb629">
  <source>Negates the outcome of the binding. Messages are unaffected.</source>
</trans-unit>
<trans-unit id="s6b1ed7507f26cb4a">
  <source>Failure result</source>
</trans-unit>
<trans-unit id="sfdfa5bb4ddd99d70">
  <source>Enterprise only</source>
</trans-unit>
<trans-unit id="s5eba8fa19126f70a">
  <source>Learn more about the enterprise license.</source>
</trans-unit>
<trans-unit id="s7181a5504472e856">
  <source>Apply changes</source>
</trans-unit>
<trans-unit id="s48a2e97afd62c35e">
  <source>Close wizard</source>
</trans-unit>
<trans-unit id="s498d08fb8f63727f">
  <source>UNNAMED</source>
</trans-unit>
<trans-unit id="s74b47e964bb82e5f">
  <source>Wizard content</source>
</trans-unit>
<trans-unit id="sad59707375956ad2">
  <source>Finish</source>
</trans-unit>
<trans-unit id="s74475586afc1fb0f">
  <source>Select type</source>
</trans-unit>
<trans-unit id="sa782d5a1919bcbb1">
  <source>Select a provider type</source>
</trans-unit>
<trans-unit id="scffa59cfac1951f2">
  <source><x id="0" equiv-text="${type.name}"/> Icon</source>
</trans-unit>
<trans-unit id="s7d4ec232535a36f0">
  <source>Choose a Provider</source>
</trans-unit>
<trans-unit id="sb7be945aa799b8d7">
  <source>Please choose a provider type before proceeding.</source>
</trans-unit>
<trans-unit id="s2289ff3b411251d8">
  <source>Choose a Provider Type</source>
</trans-unit>
<trans-unit id="sb157267c85fdff30">
  <source>Certificate</source>
</trans-unit>
<trans-unit id="s9bcd7cad5f5e2b15">
  <source>Select a certificate...</source>
</trans-unit>
<trans-unit id="sc25edca57df81461">
  <source>Authentication</source>
</trans-unit>
<trans-unit id="s6dfb7283452f78fe">
  <source>Authorization</source>
</trans-unit>
<trans-unit id="sddcfc6ab24e3a6ed">
  <source>Enrollment</source>
</trans-unit>
<trans-unit id="s1fc9c70610c4c67d">
  <source>Invalidation</source>
</trans-unit>
<trans-unit id="sdf22dcf939c27cc7">
  <source>Stage Configuration</source>
</trans-unit>
<trans-unit id="s6d5bce4321f57cda">
  <source>Unenrollment</source>
</trans-unit>
<trans-unit id="sde2bb5418562c5b2">
  <source>Unknown designation</source>
</trans-unit>
<trans-unit id="sb9834316ffd4ae3e">
  <source>Stacked</source>
</trans-unit>
<trans-unit id="s12146091b2b539a3">
  <source>Content left</source>
</trans-unit>
<trans-unit id="sa800871782eba1ac">
  <source>Content right</source>
</trans-unit>
<trans-unit id="sb4e50ca3cffdbc10">
  <source>Sidebar left</source>
</trans-unit>
<trans-unit id="s745a55f9abf9f2e5">
  <source>Sidebar right</source>
</trans-unit>
<trans-unit id="sb3182a87ded1bc91">
  <source>Unknown layout</source>
</trans-unit>
<trans-unit id="sd939185840181160">
  <source>Select a flow...</source>
</trans-unit>
<trans-unit id="s0db494ff61b48438">
  <source>Add All Available</source>
</trans-unit>
<trans-unit id="s2f68faa5b84ee9fd">
  <source>Remove All Available</source>
</trans-unit>
<trans-unit id="sea4f08110bb8f15d">
  <source>Remove</source>
</trans-unit>
<trans-unit id="s0ba85594344a5c02">
  <source>Remove All</source>
</trans-unit>
<trans-unit id="s3dc14a4b8129f989">
  <source>Pagination</source>
</trans-unit>
<trans-unit id="s1efa17e3407e0f56">
  <source>Available options</source>
</trans-unit>
<trans-unit id="s886db4d476f66522">
  <source>Selected options</source>
</trans-unit>
<trans-unit id="s4127b943d6826b8b">
  <source>Search <x id="0" equiv-text="${this.availableLabel}"/>...</source>
</trans-unit>
<trans-unit id="ha8e91858b300a3b7">
  <source>(Format: <x id="0" equiv-text="&lt;code&gt;"/>hours=-1;minutes=-2;seconds=-3)<x id="1" equiv-text="&lt;/code&gt;"/>.</source>
</trans-unit>
<trans-unit id="hbe8e6353371ecb22">
  <source>(Format: <x id="0" equiv-text="&lt;code&gt;"/>hours=1;minutes=2;seconds=3).<x id="1" equiv-text="&lt;/code&gt;"/></source>
</trans-unit>
<trans-unit id="sbb8ad22c83d375b1">
  <source>The following keywords are supported:</source>
</trans-unit>
<trans-unit id="s8915e64b8b999bfe">
  <source>Cached binding</source>
</trans-unit>
<trans-unit id="s842d690eb3c11762">
  <source>Flow is executed and session is cached in memory. Flow is executed when session expires</source>
</trans-unit>
<trans-unit id="s6a66759749bf31ed">
  <source>Direct binding</source>
</trans-unit>
<trans-unit id="se0adaf83627104fb">
  <source>Always execute the configured bind flow to authenticate the user</source>
</trans-unit>
<trans-unit id="s9065fcccd837a679">
  <source>Cached querying</source>
</trans-unit>
<trans-unit id="s30d0d0e6c626a234">
  <source>The outpost holds all users and groups in-memory and will refresh every 5 Minutes</source>
</trans-unit>
<trans-unit id="sffc14b8200a9f938">
  <source>Direct querying</source>
</trans-unit>
<trans-unit id="sdce4680288083fe3">
  <source>Always returns the latest data, but slower than cached querying</source>
</trans-unit>
<trans-unit id="s1889ba2eaeec2f1e">
  <source>When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.</source>
</trans-unit>
<trans-unit id="s4647b2c92638d6fd">
  <source>The certificate for the above configured Base DN. As a fallback, the provider uses a self-signed certificate.</source>
</trans-unit>
<trans-unit id="s2acef4f6ba39bf11">
  <source>DNS name for which the above configured certificate should be used. The certificate cannot be detected based on the base DN, as the SSL/TLS negotiation happens before such data is exchanged.</source>
</trans-unit>
<trans-unit id="s60edbcfac8ed1f90">
  <source>The start for uidNumbers, this number is added to the user.Pk to make sure that the numbers aren't too low for POSIX users. Default is 2000 to ensure that we don't collide with local users uidNumber</source>
</trans-unit>
<trans-unit id="s1c8e9816dcae6d9c">
  <source>The start for gidNumbers, this number is added to a number generated from the group.Pk to make sure that the numbers aren't too low for POSIX groups. Default is 4000 to ensure that we don't collide with local groups or users primary groups gidNumber</source>
</trans-unit>
<trans-unit id="sdb16a3d366135cef">
  <source>Provider Name</source>
</trans-unit>
<trans-unit id="s96dc816b1d1c3be0">
  <source>Type a provider name...</source>
</trans-unit>
<trans-unit id="se5973e7c8ba0fc71">
  <source>Bind mode</source>
</trans-unit>
<trans-unit id="scef3f4ad80abbd22">
  <source>Configure how the outpost authenticates requests.</source>
</trans-unit>
<trans-unit id="sbcae51a6f06e53d4">
  <source>Search mode</source>
</trans-unit>
<trans-unit id="s8b87df5664de7eb8">
  <source>Configure how the outpost queries the core authentik server's users.</source>
</trans-unit>
<trans-unit id="s254d527e3a53dbb7">
  <source>Code-based MFA Support</source>
</trans-unit>
<trans-unit id="s1cc0e66dbd2b5502">
  <source>Flow settings</source>
</trans-unit>
<trans-unit id="sff69c1a637f899a6">
  <source>Bind flow</source>
</trans-unit>
<trans-unit id="s319040353f479853">
  <source>Flow used for users to authenticate.</source>
</trans-unit>
<trans-unit id="s821d70ef9496e6f7">
  <source>Unbind flow</source>
</trans-unit>
<trans-unit id="s6773ec2a233bbf41">
  <source>Flow used for unbinding users.</source>
</trans-unit>
<trans-unit id="sfe388f0313f52da2">
  <source>Protocol settings</source>
</trans-unit>
<trans-unit id="s55d731be1ef66efe">
  <source>Base DN</source>
</trans-unit>
<trans-unit id="s0b15ff11a0049cfd">
  <source>LDAP DN under which bind requests and search requests can be made.</source>
</trans-unit>
<trans-unit id="scd247ffad6e04ac0">
  <source>TLS Server name</source>
</trans-unit>
<trans-unit id="sac43cb9690260b86">
  <source>UID start number</source>
</trans-unit>
<trans-unit id="s5acb607b40356974">
  <source>GID start number</source>
</trans-unit>
<trans-unit id="s1a711c19cda48375">
  <source>Configure LDAP Provider</source>
</trans-unit>
<trans-unit id="sf9686d31d28fcf7d">
  <source>Show field content</source>
</trans-unit>
<trans-unit id="sb1b05a7573ab618c">
  <source>Hide field content</source>
</trans-unit>
<trans-unit id="s6cee92a3b310e650">
  <source>Add entry</source>
</trans-unit>
<trans-unit id="s58bec0ecd4f3ccd4">
  <source>Strict</source>
</trans-unit>
<trans-unit id="sd27a8f54aca5d278">
  <source>Regex</source>
</trans-unit>
<trans-unit id="s61eacb19db252f5e">
  <source>URL</source>
</trans-unit>
<trans-unit id="s399cc2d67d92e957">
  <source>Confidential</source>
</trans-unit>
<trans-unit id="s95f09b229a0a0bb0">
  <source>Confidential clients are capable of maintaining the confidentiality of their credentials such as client secrets</source>
</trans-unit>
<trans-unit id="sdd1ff479d04ac140">
  <source>Public</source>
</trans-unit>
<trans-unit id="s51c6b8403c2dc5d9">
  <source>Public clients are incapable of maintaining the confidentiality and should use methods like PKCE. </source>
</trans-unit>
<trans-unit id="sa3056b3252b4b52c">
  <source>Back-channel</source>
</trans-unit>
<trans-unit id="saa3d821fc889a636">
  <source>Server-to-server logout notifications</source>
</trans-unit>
<trans-unit id="s9f448d01a0354e8e">
  <source>Front-channel</source>
</trans-unit>
<trans-unit id="s83ba71823baf9a51">
  <source>Browser iframe logout notifications</source>
</trans-unit>
<trans-unit id="sccc47f82044453f9">
  <source>Based on the User's hashed ID</source>
</trans-unit>
<trans-unit id="sbd5be4fb7442a34c">
  <source>Based on the User's ID</source>
</trans-unit>
<trans-unit id="sc9cf9ecaf9e5d67e">
  <source>Based on the User's UUID</source>
</trans-unit>
<trans-unit id="s4291727352c4f295">
  <source>Based on the User's username</source>
</trans-unit>
<trans-unit id="sd62cfc27ad4aa33b">
  <source>Based on the User's Email</source>
</trans-unit>
<trans-unit id="s55eb75bedf96be0f">
  <source>This is recommended over the UPN mode.</source>
</trans-unit>
<trans-unit id="sf80e9547166117e6">
  <source>Based on the User's UPN</source>
</trans-unit>
<trans-unit id="sde949d0ef44572eb">
  <source>Requires the user to have a 'upn' attribute set, and falls back to hashed user ID. Use this mode only if you have different UPN and Mail domains.</source>
</trans-unit>
<trans-unit id="sde56783222b527d6">
  <source>Each provider has a different issuer, based on the application slug</source>
</trans-unit>
<trans-unit id="s8d32d7b9e8ca60b1">
  <source>Same identifier is used for all providers</source>
</trans-unit>
<trans-unit id="seb411b22a8f262d6">
  <source>Valid redirect URIs after a successful authorization flow. Also specify any origins here for Implicit flows.</source>
</trans-unit>
<trans-unit id="s2a369bc2febb5d55">
  <source>If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved.</source>
</trans-unit>
<trans-unit id="s4c49d27de60a532b">
  <source>To allow any redirect URI, set the mode to Regex and the value to ".*". Be aware of the possible security implications this can have.</source>
</trans-unit>
<trans-unit id="s62f7c59b0606a8d6">
  <source>Authorization flow</source>
</trans-unit>
<trans-unit id="s69d33a50b908b96f">
  <source>Select an authorization flow...</source>
</trans-unit>
<trans-unit id="sfbaeb0de54fbfdbb">
  <source>Flow used when authorizing this provider.</source>
</trans-unit>
<trans-unit id="sc8de93a7dc0d78ba">
  <source>Client type</source>
</trans-unit>
<trans-unit id="s4d00e5de1c8213b7">
  <source>Client ID</source>
</trans-unit>
<trans-unit id="s03fb3fa232f0434a">
  <source>Client Secret</source>
</trans-unit>
<trans-unit id="sde0ad51b14f77cf6">
  <source>Redirect URIs/Origins (RegEx)</source>
</trans-unit>
<trans-unit id="s145480489b87a109">
  <source>Logout URI</source>
</trans-unit>
<trans-unit id="s37018999e29f65b3">
  <source>URI to send logout notifications to when users log out. Required for OpenID Connect Logout functionality.</source>
</trans-unit>
<trans-unit id="s2dcb6d1fd145b834">
  <source>Logout Method</source>
</trans-unit>
<trans-unit id="s2e527acc2a73da87">
  <source>The logout method determines how the logout URI is called — back-channel (server-to-server) or front-channel (browser iframe).</source>
</trans-unit>
<trans-unit id="s55787f4dfcdce52b">
  <source>Signing Key</source>
</trans-unit>
<trans-unit id="s9139b576e9944704">
  <source>Select a signing key...</source>
</trans-unit>
<trans-unit id="sc6c57419ad3a01a8">
  <source>Key used to sign the tokens.</source>
</trans-unit>
<trans-unit id="s4347135696fc7cde">
  <source>Advanced flow settings</source>
</trans-unit>
<trans-unit id="sbb3243352661428f">
  <source>Authentication flow</source>
</trans-unit>
<trans-unit id="s91675ea72a0ebe3e">
  <source>Select an authentication flow...</source>
</trans-unit>
<trans-unit id="sa72a3bd1e7e89926">
  <source>Flow used when a user access this provider and is not authenticated.</source>
</trans-unit>
<trans-unit id="s35e6e60e83a8c003">
  <source>Invalidation flow</source>
</trans-unit>
<trans-unit id="s19714b5520312d9a">
  <source>Select an invalidation flow...</source>
</trans-unit>
<trans-unit id="s0159c800f16ee1a5">
  <source>Flow used when logging out of this provider.</source>
</trans-unit>
<trans-unit id="s124f93a61ee772d6">
  <source>Advanced protocol settings</source>
</trans-unit>
<trans-unit id="s926e0ecf124fb01a">
  <source>Access code validity</source>
</trans-unit>
<trans-unit id="sa578033f134a83b6">
  <source>Configure how long access codes are valid for.</source>
</trans-unit>
<trans-unit id="sbea3db12fd799210">
  <source>Access Token validity</source>
</trans-unit>
<trans-unit id="s72559845d38bf688">
  <source>Configure how long access tokens are valid for.</source>
</trans-unit>
<trans-unit id="s821f6014c1a435b9">
  <source>Refresh Token validity</source>
</trans-unit>
<trans-unit id="s00c2db16ea9bc263">
  <source>Configure how long refresh tokens are valid for.</source>
</trans-unit>
<trans-unit id="s3e80c199c9e45456">
  <source>Refresh Token threshold</source>
</trans-unit>
<trans-unit id="sdff424992223a264">
  <source>When renewing a refresh token, if the existing refresh token's expiry is within this threshold, the refresh token will be renewed. Set to seconds=0 to always renew the refresh token.</source>
</trans-unit>
<trans-unit id="s2e3ef41a0edd8608">
  <source>Scopes</source>
</trans-unit>
<trans-unit id="s233a0201fde4a38d">
  <source>Available Scopes</source>
</trans-unit>
<trans-unit id="s631b3419f6dfd031">
  <source>Selected Scopes</source>
</trans-unit>
<trans-unit id="s3a3fae99373ce56b">
  <source>Select which scopes can be used by the client. The client still has to specify the scope to access the data.</source>
</trans-unit>
<trans-unit id="sc991a35f5e88d1d3">
  <source>Encryption Key</source>
</trans-unit>
<trans-unit id="sb52c56e87be6cd0c">
  <source>Select an encryption key...</source>
</trans-unit>
<trans-unit id="sbdab4eb1812adc78">
  <source>Key used to encrypt the tokens. Only enable this if the application using this provider supports JWE tokens.</source>
</trans-unit>
<trans-unit id="s998fea0fa7bb4188">
  <source>authentik only supports RSA-OAEP-256 for encryption.</source>
</trans-unit>
<trans-unit id="s26bf2730430efbea">
  <source>Subject mode</source>
</trans-unit>
<trans-unit id="s9f23ed1799b4d49a">
  <source>Configure what data should be used as unique User Identifier. For most cases, the default should be fine.</source>
</trans-unit>
<trans-unit id="s17d1e337f6c11c1e">
  <source>Include claims in id_token</source>
</trans-unit>
<trans-unit id="sbf41e0db12834133">
  <source>Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint.</source>
</trans-unit>
<trans-unit id="s850a58c683682809">
  <source>Issuer mode</source>
</trans-unit>
<trans-unit id="s37d9155b9f4cc7bd">
  <source>Configure how the issuer field of the ID Token should be filled.</source>
</trans-unit>
<trans-unit id="se2adaf0371ffcd65">
  <source>Machine-to-Machine authentication settings</source>
</trans-unit>
<trans-unit id="sa52bf79fe1ccb13e">
  <source>Federated OIDC Sources</source>
</trans-unit>
<trans-unit id="sa42be520242dec2a">
  <source>Available Sources</source>
</trans-unit>
<trans-unit id="s876e75cf2c07b38e">
  <source>Selected Sources</source>
</trans-unit>
<trans-unit id="s22e566052f7bec81">
  <source>JWTs signed by certificates configured in the selected sources can be used to authenticate to this provider.</source>
</trans-unit>
<trans-unit id="s555465bf6577505e">
  <source>Federated OIDC Providers</source>
</trans-unit>
<trans-unit id="s066bfb12c9032dc2">
  <source>Available Providers</source>
</trans-unit>
<trans-unit id="sa12111ca3f3e398e">
  <source>Selected Providers</source>
</trans-unit>
<trans-unit id="s4f8a3f7792e6b940">
  <source>JWTs signed by the selected providers can be used to authenticate to this provider.</source>
</trans-unit>
<trans-unit id="s89ae85c3a9df8a6f">
  <source>Configure OAuth2 Provider</source>
</trans-unit>
<trans-unit id="sdfd22a21660f6002">
  <source>Successfully updated provider.</source>
</trans-unit>
<trans-unit id="s457c639088c547c5">
  <source>Successfully created provider.</source>
</trans-unit>
<trans-unit id="sfc238215103c6162">
  <source>An error occurred while updating the provider.</source>
</trans-unit>
<trans-unit id="sc055fffc26e97237">
  <source>An error occurred while creating the provider.</source>
</trans-unit>
<trans-unit id="s072c6d12d3d37501">
  <source>HTTP-Basic Username Key</source>
</trans-unit>
<trans-unit id="sb2bb6f93773a4594">
  <source>User/Group Attribute used for the user part of the HTTP-Basic Header. If not set, the user's Email address is used.</source>
</trans-unit>
<trans-unit id="s70f6471de355b98c">
  <source>HTTP-Basic Password Key</source>
</trans-unit>
<trans-unit id="sf4de1644dcdb53d5">
  <source>User/Group Attribute used for the password part of the HTTP-Basic Header.</source>
</trans-unit>
<trans-unit id="sb8dd788adf7b907b">
  <source>Proxy</source>
</trans-unit>
<trans-unit id="s7489f76224f8120d">
  <source>Forward auth (single application)</source>
</trans-unit>
<trans-unit id="s25d0cd75377daf75">
  <source>Forward auth (domain level)</source>
</trans-unit>
<trans-unit id="s93574c03953f25dd">
  <source>This provider will behave like a transparent reverse-proxy, except requests must be authenticated. If your upstream application uses HTTPS, make sure to connect to the outpost using HTTPS as well.</source>
</trans-unit>
<trans-unit id="sa29b5680cfafacc8">
  <source>External host</source>
</trans-unit>
<trans-unit id="s764bccb30868bf62">
  <source>The external URL you'll access the application at. Include any non-standard port.</source>
</trans-unit>
<trans-unit id="scb317851cbcc6b12">
  <source>Internal host</source>
</trans-unit>
<trans-unit id="sd144a9315e8f87c1">
  <source>http(s)://...</source>
</trans-unit>
<trans-unit id="sf05e384059a0a7c1">
  <source>Upstream host that the requests are forwarded to.</source>
</trans-unit>
<trans-unit id="s3d34068a31cab30b">
  <source>Internal host SSL Validation</source>
</trans-unit>
<trans-unit id="s4a26798e1c3c37dd">
  <source>Validate SSL Certificates of upstream servers.</source>
</trans-unit>
<trans-unit id="sff0ac1ace2d90709">
  <source>Use this provider with nginx's auth_request or traefik's forwardAuth. Each application/domain needs its own provider. Additionally, on each domain, /outpost.goauthentik.io must be routed to the outpost (when using a managed outpost, this is done for you).</source>
</trans-unit>
<trans-unit id="s44c90273f08fb718">
  <source>Use this provider with nginx's auth_request or traefik's forwardAuth. Only a single provider is required per root domain. You can't do per-application authorization, but you don't have to create a provider for each application.</source>
</trans-unit>
<trans-unit id="sf55d28d4dff0e41b">
  <source>An example setup can look like this:</source>
</trans-unit>
<trans-unit id="sb4a1d1c19438e929">
  <source>authentik running on auth.example.com</source>
</trans-unit>
<trans-unit id="s68f935c9ca792016">
  <source>app1 running on app1.example.com</source>
</trans-unit>
<trans-unit id="sf813a72d8fadd765">
  <source>In this case, you'd set the Authentication URL to auth.example.com and Cookie domain to example.com.</source>
</trans-unit>
<trans-unit id="s31d15c6f16951464">
  <source>Authentication URL</source>
</trans-unit>
<trans-unit id="sa03fe48e892df2d8">
  <source>The external URL you'll authenticate at. The authentik core server should be reachable under this URL.</source>
</trans-unit>
<trans-unit id="s7def067ed3ad3ad9">
  <source>Cookie domain</source>
</trans-unit>
<trans-unit id="sf8633bb541bfb123">
  <source>domain.tld</source>
</trans-unit>
<trans-unit id="s211b75e868072162">
  <source>Set this to the domain you wish the authentication to be valid for. Must be a parent domain of the URL above. If you're running applications as app1.domain.tld, app2.domain.tld, set this to 'domain.tld'.</source>
</trans-unit>
<trans-unit id="s7c10976de6411844">
  <source>Token validity</source>
</trans-unit>
<trans-unit id="s3e87ce98ba3c4d80">
  <source>Configure how long tokens are valid for.</source>
</trans-unit>
<trans-unit id="sd539548ca4c71619">
  <source>Additional scopes</source>
</trans-unit>
<trans-unit id="s8f12575f694e85a2">
  <source>Additional scope mappings, which are passed to the proxy.</source>
</trans-unit>
<trans-unit id="s93cea6ca1f93349d">
  <source>Unauthenticated URLs</source>
</trans-unit>
<trans-unit id="sc4508175bf6b09dd">
  <source>Unauthenticated Paths</source>
</trans-unit>
<trans-unit id="sc9fc206433f67588">
  <source>Regular expressions for which authentication is not required. Each new line is interpreted as a new expression.</source>
</trans-unit>
<trans-unit id="sd503fabef9691134">
  <source>When using proxy or forward auth (single application) mode, the requested URL Path is checked against the regular expressions. When using forward auth (domain mode), the full requested URL including scheme and host is matched against the regular expressions.</source>
</trans-unit>
<trans-unit id="sb488dee0be434f7e">
  <source>Authentication settings</source>
</trans-unit>
<trans-unit id="s23cee624c735f266">
  <source>Intercept header authentication</source>
</trans-unit>
<trans-unit id="sc007cca5af67eae0">
  <source>When enabled, authentik will intercept the Authorization header to authenticate the request.</source>
</trans-unit>
<trans-unit id="s36e630ba56617556">
  <source>Send HTTP-Basic Authentication</source>
</trans-unit>
<trans-unit id="s9d5796a4b9b7560e">
  <source>Send a custom HTTP-Basic Authentication header based on values from authentik.</source>
</trans-unit>
<trans-unit id="sf5cbccdc6254c8dc">
  <source>Configure Proxy Provider</source>
</trans-unit>
<trans-unit id="s881271a499c9db98">
  <source>Configure Remote Access Provider</source>
</trans-unit>
<trans-unit id="sa2ea0fcd3ffa80e0">
  <source>Connection expiry</source>
</trans-unit>
<trans-unit id="s6dd297c217729828">
  <source>Determines how long a session lasts before being disconnected and requiring re-authorization.</source>
</trans-unit>
<trans-unit id="se6d950402810c34f">
  <source>Property mappings</source>
</trans-unit>
<trans-unit id="s81d76cccf339a43c">
  <source>Available Property Mappings</source>
</trans-unit>
<trans-unit id="se9195c05c61d8ef8">
  <source>Selected Property Mappings</source>
</trans-unit>
<trans-unit id="s9b6bf63fddc7362f">
  <source>List of CIDRs (comma-seperated) that clients can connect from. A more specific CIDR will match before a looser one. Clients connecting from a non-specified CIDR will be dropped.</source>
</trans-unit>
<trans-unit id="sb95baab425322600">
  <source>Shared secret</source>
</trans-unit>
<trans-unit id="s9e9316a6b0c16231">
  <source>Client Networks</source>
</trans-unit>
<trans-unit id="sd5746b2550ac4852">
  <source>Certificate used for EAP-TLS. Requires Mutual TLS Stage in authentication flow.</source>
</trans-unit>
<trans-unit id="s2c8c6f89089b31d4">
  <source>Configure Radius Provider</source>
</trans-unit>
<trans-unit id="sd8f220c999726151">
  <source>Redirect</source>
</trans-unit>
<trans-unit id="sb357ea19a722d827">
  <source>Post</source>
</trans-unit>
<trans-unit id="s5aebe06e3ddf6ca9">
  <source>Sign assertions</source>
</trans-unit>
<trans-unit id="s4e2329ffa0ef6b74">
  <source>When enabled, the assertion element of the SAML response will be signed.</source>
</trans-unit>
<trans-unit id="s2ad1b968b37ded68">
  <source>Sign responses</source>
</trans-unit>
<trans-unit id="sa30ba280de276758">
  <source>When enabled, the SAML response will be signed.</source>
</trans-unit>
<trans-unit id="sa4bd902fbc432ab8">
  <source>Sign logout requests</source>
</trans-unit>
<trans-unit id="sb1e6dc6d91ce352e">
  <source>When enabled, SAML logout requests will be signed.</source>
</trans-unit>
<trans-unit id="sd1ab93a011b2f1f5">
  <source>Front-channel (Iframe)</source>
</trans-unit>
<trans-unit id="s885ea9abccda30d8">
  <source>Front-channel (Native)</source>
</trans-unit>
<trans-unit id="s34cd8ae3ee828045">
  <source>Back-channel (POST)</source>
</trans-unit>
<trans-unit id="s7f7be294b1bef506">
  <source>SLS Binding</source>
</trans-unit>
<trans-unit id="s9104cd1063aa6a4a">
  <source>Determines how authentik sends the logout response back to the Service Provider.</source>
</trans-unit>
<trans-unit id="sd1fba3c745c016a8">
  <source>Method to use for logout when SLS URL is configured.</source>
</trans-unit>
<trans-unit id="s11204eeb1e27ea8f">
  <source>ACS URL</source>
</trans-unit>
<trans-unit id="s991b750e2d5c4234">
  <source>Service Provider Binding</source>
</trans-unit>
<trans-unit id="s4e28e2899e08a5f8">
  <source>Determines how authentik sends the response back to the Service Provider.</source>
</trans-unit>
<trans-unit id="sb7a30abc1dcf6c36">
  <source>Issuer</source>
</trans-unit>
<trans-unit id="sd4fd64791f73d37b">
  <source>Also known as Entity ID.</source>
</trans-unit>
<trans-unit id="sd5a4b41c6c883b03">
  <source>Audience</source>
</trans-unit>
<trans-unit id="sc71892084574cf32">
  <source>SLS URL</source>
</trans-unit>
<trans-unit id="s21658078c6fdf964">
  <source>Optional Single Logout Service URL to send logout responses to. If not set, no logout response will be sent.</source>
</trans-unit>
<trans-unit id="sc741d9ebe07ad103">
  <source>Signing Certificate</source>
</trans-unit>
<trans-unit id="sd6c3ddb62de0e8f7">
  <source>Certificate used to sign outgoing Responses going to the Service Provider.</source>
</trans-unit>
<trans-unit id="s5be3b0567172e415">
  <source>Verification Certificate</source>
</trans-unit>
<trans-unit id="s7c27e113f90a89e0">
  <source>When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default.</source>
</trans-unit>
<trans-unit id="s6135938c50ad8a4b">
  <source>Encryption Certificate</source>
</trans-unit>
<trans-unit id="sb416d07987093cd5">
  <source>When selected, assertions will be encrypted using this keypair.</source>
</trans-unit>
<trans-unit id="s0619413371f33083">
  <source>Available User Property Mappings</source>
</trans-unit>
<trans-unit id="sbb46aed99e712337">
  <source>Selected User Property Mappings</source>
</trans-unit>
<trans-unit id="s1a2797874b7fe852">
  <source>NameID Property Mapping</source>
</trans-unit>
<trans-unit id="s256b8452664ccae4">
  <source>Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected.</source>
</trans-unit>
<trans-unit id="sc838e297aa5e58ba">
  <source>AuthnContextClassRef Property Mapping</source>
</trans-unit>
<trans-unit id="sd7ba1793c3abf4fe">
  <source>Configure how the AuthnContextClassRef value will be created. When left empty, the AuthnContextClassRef will be set based on which authentication methods the user used to authenticate.</source>
</trans-unit>
<trans-unit id="s9f91cc8bcfabb40f">
  <source>Assertion valid not before</source>
</trans-unit>
<trans-unit id="s733f83ff9d50da30">
  <source>Configure the maximum allowed time drift for an assertion.</source>
</trans-unit>
<trans-unit id="s2af5754090898640">
  <source>Assertion valid not on or after</source>
</trans-unit>
<trans-unit id="s43c1f927936f0a02">
  <source>Assertion not valid on or after current time + this value.</source>
</trans-unit>
<trans-unit id="sad8550b8731518d8">
  <source>Session valid not on or after</source>
</trans-unit>
<trans-unit id="s0dd00fbaba08748a">
  <source>Session not valid on or after current time + this value.</source>
</trans-unit>
<trans-unit id="scb58b8a60cad8762">
  <source>Default relay state</source>
</trans-unit>
<trans-unit id="s6827a456c9dfc6ee">
  <source>When using IDP-initiated logins, the relay state will be set to this value.</source>
</trans-unit>
<trans-unit id="s9839619155ed2cf6">
  <source>Default NameID Policy</source>
</trans-unit>
<trans-unit id="s004e9a2c90f23900">
  <source>Persistent</source>
</trans-unit>
<trans-unit id="s38887b94b3320533">
  <source>Email address</source>
</trans-unit>
<trans-unit id="s2d34c87f67f66c6a">
  <source>Windows</source>
</trans-unit>
<trans-unit id="s1665454e31e14941">
  <source>X509 Subject</source>
</trans-unit>
<trans-unit id="s0c3ac7f9383a8cfd">
  <source>Transient</source>
</trans-unit>
<trans-unit id="s0c48c5f754275796">
  <source>Configure the default NameID Policy used by IDP-initiated logins and when an incoming assertion doesn't specify a NameID Policy (also applies when using a custom NameID Mapping).</source>
</trans-unit>
<trans-unit id="s2a0f60e74b478804">
  <source>Digest algorithm</source>
</trans-unit>
<trans-unit id="s693d975d38ff0214">
  <source>Signature algorithm</source>
</trans-unit>
<trans-unit id="sfe906cde5dddc041">
  <source>Configure SAML Provider</source>
</trans-unit>
<trans-unit id="se68398e3c2c760b2">
  <source>Token</source>
</trans-unit>
<trans-unit id="seb250c3885733522">
  <source>Token to authenticate with.</source>
</trans-unit>
<trans-unit id="scdafec223d3840e9">
  <source>OAuth Source</source>
</trans-unit>
<trans-unit id="s2111b3384e12349c">
  <source>Specify OAuth source used for authentication.</source>
</trans-unit>
<trans-unit id="s1876401267e31dd0">
  <source>OAuth Parameters</source>
</trans-unit>
<trans-unit id="sc5ca1b55a5391535">
  <source>Additional OAuth parameters, such as grant_type.</source>
</trans-unit>
<trans-unit id="sb21f33b039c86322">
  <source>SCIM base url, usually ends in /v2.</source>
</trans-unit>
<trans-unit id="s99060120f626df5b">
  <source>Verify SCIM server's certificates</source>
</trans-unit>
<trans-unit id="s6e4af789dec357dc">
  <source>Authentication Mode</source>
</trans-unit>
<trans-unit id="s24d7ac2fc280ca5e">
  <source>Authenticate SCIM requests using a static token.</source>
</trans-unit>
<trans-unit id="s0e1641692e0dac94">
  <source>OAuth</source>
</trans-unit>
<trans-unit id="s1c34cb0a4cccc041">
  <source>Authenticate SCIM requests using OAuth.</source>
</trans-unit>
<trans-unit id="s3483d693c72e412e">
  <source>Compatibility Mode</source>
</trans-unit>
<trans-unit id="s11326fd2590f4e5e">
  <source>Default</source>
</trans-unit>
<trans-unit id="se7195530fa981896">
  <source>Default behavior.</source>
</trans-unit>
<trans-unit id="sfa5ba219a0991116">
  <source>AWS</source>
</trans-unit>
<trans-unit id="s44e80dc905ab2ecc">
  <source>Altered behavior for usage with Amazon Web Services.</source>
</trans-unit>
<trans-unit id="s2f5e2bcd583fbc27">
  <source>Slack</source>
</trans-unit>
<trans-unit id="s7f40ef46b7f213ea">
  <source>Altered behavior for usage with Slack.</source>
</trans-unit>
<trans-unit id="s2ce58eab7841b342">
  <source>Salesforce</source>
</trans-unit>
<trans-unit id="s7392b5925a4803af">
  <source>Altered behavior for usage with Salesforce.</source>
</trans-unit>
<trans-unit id="s054cb3c0a84eefe5">
  <source>Alter authentik's behavior for vendor-specific SCIM implementations.</source>
</trans-unit>
<trans-unit id="s4d3933feb8dc7cee">
  <source>Enable dry-run mode</source>
</trans-unit>
<trans-unit id="s8c9ca09b5eeb5ae9">
  <source>When enabled, mutating requests will be dropped and logged instead.</source>
</trans-unit>
<trans-unit id="sfc8bb104e2c05af8">
  <source>User filtering</source>
</trans-unit>
<trans-unit id="sc0d0890fbd46ef62">
  <source>Exclude service accounts</source>
</trans-unit>
<trans-unit id="s23ab136ad85f0ad2">
  <source>Only sync users within the selected group.</source>
</trans-unit>
<trans-unit id="sfdedc3b0b2b7ce3d">
  <source>Attribute mapping</source>
</trans-unit>
<trans-unit id="saf794c74c9ea731e">
  <source>User Property Mappings</source>
</trans-unit>
<trans-unit id="s019555b5a442aa00">
  <source>Property mappings used to user mapping.</source>
</trans-unit>
<trans-unit id="s7cb9aa9ee1783f00">
  <source>Group Property Mappings</source>
</trans-unit>
<trans-unit id="se84ebf32648e6a63">
  <source>Available Group Property Mappings</source>
</trans-unit>
<trans-unit id="seaf9f9ecb99568c7">
  <source>Selected Group Property Mappings</source>
</trans-unit>
<trans-unit id="sa319e3bf44c85963">
  <source>Property mappings used to group creation.</source>
</trans-unit>
<trans-unit id="s25afe36fa73d2e5b">
  <source>Sync settings</source>
</trans-unit>
<trans-unit id="s2c859e13e182be6b">
  <source>Page size</source>
</trans-unit>
<trans-unit id="sb984354bb46c8bed">
  <source>Controls the number of objects synced in a single task.</source>
</trans-unit>
<trans-unit id="sc24408fbc7ff26b5">
  <source>Page timeout</source>
</trans-unit>
<trans-unit id="s7faa17601278029a">
  <source>Timeout for synchronization of a single page.</source>
</trans-unit>
<trans-unit id="s7ccce0ec8d228db6">
  <source>Configure SCIM Provider</source>
</trans-unit>
<trans-unit id="s19907c16eb319618">
  <source>Configure Provider</source>
</trans-unit>
<trans-unit id="sd2223afb7d6b100d">
  <source>Type</source>
</trans-unit>
<trans-unit id="s669b18c6d2d9c95b">
  <source>None</source>
</trans-unit>
<trans-unit id="s7055edd8fab866f4">
  <source>strict</source>
</trans-unit>
<trans-unit id="s5e57ca23b946c1b8">
  <source>regexp</source>
</trans-unit>
<trans-unit id="sc6e8a34361c7c272">
  <source>Forward auth (domain-level)</source>
</trans-unit>
<trans-unit id="s2345170f7e272668">
  <source>Unknown proxy mode</source>
</trans-unit>
<trans-unit id="s37cbecaec58e2192">
  <source>Mode</source>
</trans-unit>
<trans-unit id="s4a1e774ab25aa232">
  <source>Internal Host</source>
</trans-unit>
<trans-unit id="sc9c3578cce3cf7a8">
  <source>External Host</source>
</trans-unit>
<trans-unit id="s7a141f1b61074fbe">
  <source>Basic-Auth</source>
</trans-unit>
<trans-unit id="sa43153d53ae65063">
  <source>Unknown type</source>
</trans-unit>
<trans-unit id="s56806e9f63efa298">
  <source>Redirect URIs</source>
</trans-unit>
<trans-unit id="sd226dc54c414585a">
  <source>Review and Submit Application</source>
</trans-unit>
<trans-unit id="sb3d4f79d9d8b71e5">
  <source>Submit</source>
</trans-unit>
<trans-unit id="scda8dc24b561e205">
  <source>There was an error in the application.</source>
</trans-unit>
<trans-unit id="sdaca9c2c0361ed3a">
  <source>Review the application.</source>
</trans-unit>
<trans-unit id="sb50000a8fada5672">
  <source>There was an error in the provider.</source>
</trans-unit>
<trans-unit id="s21f95eaf151d4ce3">
  <source>Review the provider.</source>
</trans-unit>
<trans-unit id="s828ded9ade500ffc">
  <source>There was an error. Please go back and review the application.</source>
</trans-unit>
<trans-unit id="s9fdda682893624a1">
  <source>There was an error:</source>
</trans-unit>
<trans-unit id="s201ee6bc6d9f97da">
  <source>Please go back and review the application.</source>
</trans-unit>
<trans-unit id="s7a6b3453209e1066">
  <source>There was an error creating the application, but no error message was sent. Please review the server logs.</source>
</trans-unit>
<trans-unit id="s9c09ef16900241fa">
  <source>Review the Application and Provider</source>
</trans-unit>
<trans-unit id="s7f5869b3d14d7cbc">
  <source>Provider</source>
</trans-unit>
<trans-unit id="s848288f8c2265aad">
  <source>Your application has been saved</source>
</trans-unit>
<trans-unit id="s0a0a21f7bcf9d865">
  <source>Saving application...</source>
</trans-unit>
<trans-unit id="se669a4b939be0891">
  <source>authentik was unable to complete this process.</source>
</trans-unit>
<trans-unit id="s71c5d51d5a357dbd">
  <source>Don't show this message again.</source>
</trans-unit>
<trans-unit id="s070fdfb03034ca9b">
  <source>One hint, 'New Application Wizard', is currently hidden</source>
</trans-unit>
<trans-unit id="sf2da0e95c78f2cb7">
  <source>Restore Application Wizard Hint</source>
</trans-unit>
<trans-unit id="s8aac845c63f45ca2">
  <source>Create with wizard</source>
</trans-unit>
<trans-unit id="sd1a5560fde6f2271">
  <source>Successfully imported provider.</source>
</trans-unit>
<trans-unit id="s252a52330d32b900">
  <source>Metadata</source>
</trans-unit>
<trans-unit id="s382a2aa3984474dd">
  <source>Create</source>
</trans-unit>
<trans-unit id="s58d1eb482059da12">
  <source>New provider</source>
</trans-unit>
<trans-unit id="sa661ea7d7a50f2e9">
  <source>Create a new provider.</source>
</trans-unit>
<trans-unit id="s5d6af4c100ad321b">
  <source>Create <x id="0" equiv-text="${type.name}"/></source>
</trans-unit>
<trans-unit id="sa9a4ce20b507b232">
  <source>New Provider</source>
</trans-unit>
<trans-unit id="sf397c39bda7abfc6">
  <source>Open the wizard to create a new provider.</source>
</trans-unit>
<trans-unit id="sa817aa9f6f88a991">
  <source>Credentials</source>
</trans-unit>
<trans-unit id="sc7d6bc4aebb58fe9">
  <source>Google Cloud credentials file.</source>
</trans-unit>
<trans-unit id="sc668815044e218c2">
  <source>Delegated Subject</source>
</trans-unit>
<trans-unit id="s2e707072d5a9615d">
  <source>Email address of the user the actions of authentik will be delegated to.</source>
</trans-unit>
<trans-unit id="se89a9ecf275e4343">
  <source>Default group email domain</source>
</trans-unit>
<trans-unit id="s64a0a6da6ed6d680">
  <source>Default domain that is used to generate a group's email address. Can be customized using property mappings.</source>
</trans-unit>
<trans-unit id="sd061e65955e036ca">
  <source>User deletion action</source>
</trans-unit>
<trans-unit id="s87f86f65b5e19ea7">
  <source>User is deleted</source>
</trans-unit>
<trans-unit id="s3906cd4a102867a3">
  <source>Suspend</source>
</trans-unit>
<trans-unit id="s0bf5b364e2c79392">
  <source>User is suspended, and connection to user in authentik is removed.</source>
</trans-unit>
<trans-unit id="s4acb0250d735c2a9">
  <source>Do Nothing</source>
</trans-unit>
<trans-unit id="s5fe525d19499ed47">
  <source>The connection is removed but the user is not modified</source>
</trans-unit>
<trans-unit id="s676a0127c35d240a">
  <source>Determines what authentik will do when a User is deleted.</source>
</trans-unit>
<trans-unit id="sd1aa04cc32caf2b0">
  <source>Group deletion action</source>
</trans-unit>
<trans-unit id="s874c788479481131">
  <source>Group is deleted</source>
</trans-unit>
<trans-unit id="s0983fa9b84e4a9f7">
  <source>The connection is removed but the group is not modified</source>
</trans-unit>
<trans-unit id="sdb872a9f425937fa">
  <source>Determines what authentik will do when a Group is deleted.</source>
</trans-unit>
<trans-unit id="s03a759e65ceb722d">
  <source>Client ID for the app registration.</source>
</trans-unit>
<trans-unit id="s479980cf9252628c">
  <source>Client secret for the app registration.</source>
</trans-unit>
<trans-unit id="s25c2392ffcb78df2">
  <source>Tenant ID</source>
</trans-unit>
<trans-unit id="s89e4e698cdb1187f">
  <source>ID of the tenant accounts will be synced into.</source>
</trans-unit>
<trans-unit id="s56bc67239b9255a2">
  <source>Delete authorization on disconnect</source>
</trans-unit>
<trans-unit id="s3945449bd524d8a5">
  <source>When enabled, connection authorizations will be deleted when a client disconnects. This will force clients with flaky internet connections to re-authorize the endpoint.</source>
</trans-unit>
<trans-unit id="s3271da6c18c25b18">
  <source>Connection settings.</source>
</trans-unit>
<trans-unit id="se8dd47dfaf01d6c9">
  <source>Key used to sign the events.</source>
</trans-unit>
<trans-unit id="sd1b31f8fba05d429">
  <source>Event Retention</source>
</trans-unit>
<trans-unit id="sd760b123cced4675">
  <source>Determines how long events are stored for. If an event could not be sent correctly, its expiration is also increased by this duration.</source>
</trans-unit>
<trans-unit id="s1aa62e1bf258e88a">
  <source>OIDC Providers</source>
</trans-unit>
<trans-unit id="sb0b86b8ca6ab13bd">
  <source>Providers</source>
</trans-unit>
<trans-unit id="s3ffa320128991a45">
  <source>Provide support for protocols like SAML and OAuth to assigned applications.</source>
</trans-unit>
<trans-unit id="s0c9d1c885a69abe8">
  <source>Provider Search</source>
</trans-unit>
<trans-unit id="s9db1679f3b234d4e">
  <source>Search for providers…</source>
</trans-unit>
<trans-unit id="s10929ca568ae10bc">
  <source>Provider(s)</source>
</trans-unit>
<trans-unit id="sb2b3b281954752c4">
  <source>Assigned to application </source>
</trans-unit>
<trans-unit id="sa6c0ba4910c7ad7f">
  <source>Assigned to application (backchannel) </source>
</trans-unit>
<trans-unit id="s0fb31bb136cc353a">
  <source>Provider not assigned to any application.</source>
</trans-unit>
<trans-unit id="sc9175cb129fdc306">
  <source>Update <x id="0" equiv-text="${this.objectLabel}"/></source>
</trans-unit>
<trans-unit id="sfbb87c9ced1fde54">
  <source>Edit "<x id="0" equiv-text="${item.name}"/>" provider</source>
</trans-unit>
<trans-unit id="s3b579c4bb6b447ae">
  <source>Successfully triggered sync.</source>
</trans-unit>
<trans-unit id="s5deac600e329de1b">
  <source>Log messages</source>
</trans-unit>
<trans-unit id="sc4bf1a365af696eb">
  <source>Override dry-run mode</source>
</trans-unit>
<trans-unit id="s94a5233931be4110">
  <source>When enabled, this sync will still execute mutating requests regardless of the dry-run mode in the provider.</source>
</trans-unit>
<trans-unit id="s05073d2537b45d1a">
  <source>Sync</source>
</trans-unit>
<trans-unit id="s3819162efec77de1">
  <source>Sync Group</source>
</trans-unit>
<trans-unit id="s7d2d3d298fdccfc8">
  <source>Google Workspace Group(s)</source>
</trans-unit>
<trans-unit id="se9da93aa2e6cce21">
  <source>Sync User</source>
</trans-unit>
<trans-unit id="s8c9cf2c004755526">
  <source>Google Workspace User(s)</source>
</trans-unit>
<trans-unit id="s03f42eea72154959">
  <source>Username</source>
</trans-unit>
<trans-unit id="s3f63421908094590">
  <source>Current status</source>
</trans-unit>
<trans-unit id="s4412853e1655ebb3">
  <source>Sync is currently running.</source>
</trans-unit>
<trans-unit id="s08661004803c26b0">
  <source>Sync is not currently running.</source>
</trans-unit>
<trans-unit id="s81d16aa9ec62262c">
  <source>Last successful sync</source>
</trans-unit>
<trans-unit id="sd1eb8f8acdbcd1d3">
  <source>No successful sync found.</source>
</trans-unit>
<trans-unit id="s6b0eeb3de1789c6e">
  <source>Last sync status</source>
</trans-unit>
<trans-unit id="s6c3daaac4eed12f9">
  <source>Changelog</source>
</trans-unit>
<trans-unit id="sb23304fc42c5d6d9">
  <source>Provisioned Users</source>
</trans-unit>
<trans-unit id="s6a81ee82b2e5ecbb">
  <source>Provisioned Groups</source>
</trans-unit>
<trans-unit id="s2f0f6691de0b0388">
  <source>Warning: Provider is not assigned to an application as backchannel provider.</source>
</trans-unit>
<trans-unit id="sc2473aae093ce256">
  <source>Dry-run</source>
</trans-unit>
<trans-unit id="sd520a4089006ca93">
  <source>Update Google Workspace Provider</source>
</trans-unit>
<trans-unit id="s398f6ba74ba8943a">
  <source>Select providers to add to application</source>
</trans-unit>
<trans-unit id="sa90b7809586c35ce">
  <source>Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon "fa-test".</source>
</trans-unit>
<trans-unit id="s0410779cb47de312">
  <source>Path template for users created. Use placeholders like `%(slug)s` to insert the source slug.</source>
</trans-unit>
<trans-unit id="s58fd2aafa4261c55">
  <source>Successfully updated application.</source>
</trans-unit>
<trans-unit id="s9222ca30ae7786e4">
  <source>Successfully created application.</source>
</trans-unit>
<trans-unit id="s5e0c81c05565bf42">
  <source>Using this form will only create an Application. In order to authenticate with the application, you will have to manually pair it with a Provider.</source>
</trans-unit>
<trans-unit id="s350a616ff5e145ec">
  <source>Select a provider that this application should use.</source>
</trans-unit>
<trans-unit id="sc92ea8fbf9ba06a7">
  <source>Backchannel Providers</source>
</trans-unit>
<trans-unit id="s4c6534a118f52fdd">
  <source>Select backchannel providers which augment the functionality of the main provider.</source>
</trans-unit>
<trans-unit id="s19409e8712ddd369">
  <source>Add provider</source>
</trans-unit>
<trans-unit id="s8be4abc7ca71da6c">
  <source>UI settings</source>
</trans-unit>
<trans-unit id="s068d4dd16d9106d0">
  <source>Icon</source>
</trans-unit>
<trans-unit id="s6d3b4d0561ba1cff">
  <source>Publisher</source>
</trans-unit>
<trans-unit id="s63d894b1ddb06289">
  <source>Description</source>
</trans-unit>
<trans-unit id="sa8c45b6b92a8ba1f">
  <source>Create Application</source>
</trans-unit>
<trans-unit id="s05e395ff60af047b">
  <source>Warning: Provider is not used by any Outpost.</source>
</trans-unit>
<trans-unit id="sccbfc4dec0c8d80c">
  <source>Assigned to application</source>
</trans-unit>
<trans-unit id="s2d46e3a9ee8e0e7e">
  <source>Update LDAP Provider</source>
</trans-unit>
<trans-unit id="saf24e253b3b006d4">
  <source>How to connect</source>
</trans-unit>
<trans-unit id="s02b3fade1795d03f">
  <source>Connect to the LDAP Server on port 389:</source>
</trans-unit>
<trans-unit id="sa00cf67b54c44c71">
  <source>Check the IP of the Kubernetes service, or</source>
</trans-unit>
<trans-unit id="s28f270859c5f4d51">
  <source>The Host IP of the docker host</source>
</trans-unit>
<trans-unit id="sb7794c2910b1a9ec">
  <source>Bind DN</source>
</trans-unit>
<trans-unit id="s5694f9421c428227">
  <source>Bind Password</source>
</trans-unit>
<trans-unit id="s76dc6d0d1a7db8e2">
  <source>Your authentik password</source>
</trans-unit>
<trans-unit id="s086e1bbe7c97ea16">
  <source>Search base</source>
</trans-unit>
<trans-unit id="s10092327ad833090">
  <source>Microsoft Entra Group(s)</source>
</trans-unit>
<trans-unit id="s811c45ad24a5feae">
  <source>Microsoft Entra User(s)</source>
</trans-unit>
<trans-unit id="s79dd6df244c05ae9">
  <source>Update Microsoft Entra Provider</source>
</trans-unit>
<trans-unit id="s417b90913e05bc17">
  <source>Preview</source>
</trans-unit>
<trans-unit id="s17f3eaf3b07ece26">
  <source>Warning: Provider is not used by an Application.</source>
</trans-unit>
<trans-unit id="scbf29ce484222325">
  <source></source>
</trans-unit>
<trans-unit id="sdbc08adee233f180">
  <source>Update OAuth2 Provider</source>
</trans-unit>
<trans-unit id="s9d96eb5ca93e6473">
  <source>OpenID Configuration URL</source>
</trans-unit>
<trans-unit id="s74f809a69e030351">
  <source>OpenID Configuration Issuer</source>
</trans-unit>
<trans-unit id="s028be8989873f001">
  <source>Authorize URL</source>
</trans-unit>
<trans-unit id="sebda1d54a3f9f967">
  <source>Token URL</source>
</trans-unit>
<trans-unit id="s2fc3eb68c7ced3af">
  <source>Userinfo URL</source>
</trans-unit>
<trans-unit id="s145483489b87a622">
  <source>Logout URL</source>
</trans-unit>
<trans-unit id="s59f5eda30a904b75">
  <source>JWKS URL</source>
</trans-unit>
<trans-unit id="sb9b51124d1b3dca0">
  <source>JWT payload</source>
</trans-unit>
<trans-unit id="sbd065743a0c599e3">
  <source>Preview for user</source>
</trans-unit>
<trans-unit id="s6df42b3072a2d7e9">
  <source>Nginx (Ingress)</source>
</trans-unit>
<trans-unit id="s8e01a852c1db8d29">
  <source>Nginx (Proxy Manager)</source>
</trans-unit>
<trans-unit id="sabebdc7fa6a5bddb">
  <source>Nginx (standalone)</source>
</trans-unit>
<trans-unit id="s5d9f93f1fe1c19d3">
  <source>Traefik (Ingress)</source>
</trans-unit>
<trans-unit id="se2b62f7e9017965e">
  <source>Traefik (Compose)</source>
</trans-unit>
<trans-unit id="s4c4c504a48c3b7bd">
  <source>Traefik (Standalone)</source>
</trans-unit>
<trans-unit id="s7ba9677d069e5f02">
  <source>Caddy (Standalone)</source>
</trans-unit>
<trans-unit id="s4e474b9e2e737dd1">
  <source>Update Proxy Provider</source>
</trans-unit>
<trans-unit id="s37eb2f1b6e3c19c2">
  <source>Protocol Settings</source>
</trans-unit>
<trans-unit id="s5116b89f7db1fbec">
  <source>Allowed Redirect URIs</source>
</trans-unit>
<trans-unit id="saeff3596e1ac31b6">
  <source>Setup</source>
</trans-unit>
<trans-unit id="s1b783856ab4aaaf3">
  <source>No additional setup is required.</source>
</trans-unit>
<trans-unit id="sc93712b5fbdc6810">
  <source>Connection Token(s)</source>
</trans-unit>
<trans-unit id="s526a525cdc79bbdc">
  <source>Endpoint</source>
</trans-unit>
<trans-unit id="s2f4ca2148183d692">
  <source>Successfully updated endpoint.</source>
</trans-unit>
<trans-unit id="s5adee855dbe191d9">
  <source>Successfully created endpoint.</source>
</trans-unit>
<trans-unit id="s61e136c0658e27d5">
  <source>Protocol</source>
</trans-unit>
<trans-unit id="sa062b019ff0c8809">
  <source>RDP</source>
</trans-unit>
<trans-unit id="s97f9bf19fa5b57d1">
  <source>SSH</source>
</trans-unit>
<trans-unit id="s7c100119e9ffcc32">
  <source>VNC</source>
</trans-unit>
<trans-unit id="s6b05f9d8801fc14f">
  <source>Host</source>
</trans-unit>
<trans-unit id="s48a0d160d9e0a7be">
  <source>Hostname/IP to connect to. Optionally specify the port.</source>
</trans-unit>
<trans-unit id="sc39f6abf0daedb0f">
  <source>Maximum concurrent connections</source>
</trans-unit>
<trans-unit id="s62418cbcd2a25498">
  <source>Maximum concurrent allowed connections to this endpoint. Can be set to -1 to disable the limit.</source>
</trans-unit>
<trans-unit id="scb6620fcd5bff04c">
  <source>Advanced settings</source>
</trans-unit>
<trans-unit id="s1ec022562e3d515b">
  <source>Search for users by username or display name...</source>
</trans-unit>
<trans-unit id="s65f6a2f5e2b848e1">
  <source>Search Users</source>
</trans-unit>
<trans-unit id="sd416adae573583d5">
  <source>Select Users</source>
</trans-unit>
<trans-unit id="sa45a194b58837e4f">
  <source>Active</source>
</trans-unit>
<trans-unit id="s58c867aac77b9158">
  <source>Last login</source>
</trans-unit>
<trans-unit id="s85a91d843c3eb4ad">
  <source>Show inactive users</source>
</trans-unit>
<trans-unit id="s93d69514c94ad635">
  <source>Select users</source>
</trans-unit>
<trans-unit id="sb85774dc5d18ff0f">
  <source>Confirm</source>
</trans-unit>
<trans-unit id="s75d5ff5dd8d3c6d2">
  <source>Successfully updated group.</source>
</trans-unit>
<trans-unit id="s3079ca1184e77573">
  <source>Successfully created group.</source>
</trans-unit>
<trans-unit id="s9436f1bf4400f6a6">
  <source>Type a group name...</source>
</trans-unit>
<trans-unit id="s2d9356347ff7c77f">
  <source>Group Name</source>
</trans-unit>
<trans-unit id="sf45dac7c571f18bd">
  <source>Superuser Privileges</source>
</trans-unit>
<trans-unit id="sbf8a7af4eafa87f8">
  <source>Whether users added to this group will have superuser privileges.</source>
</trans-unit>
<trans-unit id="s25bacc19d98b444e">
  <source>Parent Group</source>
</trans-unit>
<trans-unit id="s6b2beba7ab637e9e">
  <source>Roles</source>
</trans-unit>
<trans-unit id="s85be1f5e7a0fa3b1">
  <source>Available Roles</source>
</trans-unit>
<trans-unit id="sa59d53ee922c08b5">
  <source>Selected Roles</source>
</trans-unit>
<trans-unit id="s96d2bb4be3f5e8aa">
  <source>Select roles to grant this groups' users' permissions from the selected roles.</source>
</trans-unit>
<trans-unit id="sec97cdaf7af8648b">
  <source>Set custom attributes using YAML or JSON.</source>
</trans-unit>
<trans-unit id="s1e36813d3504ed48">
  <source>Successfully updated binding.</source>
</trans-unit>
<trans-unit id="s1bf56ee106e9e711">
  <source>Successfully created binding.</source>
</trans-unit>
<trans-unit id="s95b73e0f4e47eb9a">
  <source>Result used when policy execution fails.</source>
</trans-unit>
<trans-unit id="s29ec5e7889f4787f">
  <source>Successfully updated policy.</source>
</trans-unit>
<trans-unit id="sfc400b2d71e49d28">
  <source>Successfully created policy.</source>
</trans-unit>
<trans-unit id="safc0e0656d572f4e">
  <source>A policy used for testing. Always returns the same result as specified below after waiting a random duration.</source>
</trans-unit>
<trans-unit id="s9ffa1ac03ce6fd20">
  <source>Execution logging</source>
</trans-unit>
<trans-unit id="saf31b3c610036ed6">
  <source>When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged.</source>
</trans-unit>
<trans-unit id="sa879d5ce584875cf">
  <source>Policy-specific settings</source>
</trans-unit>
<trans-unit id="s838418d1a0815157">
  <source>Pass policy?</source>
</trans-unit>
<trans-unit id="sd8c5339b82b71507">
  <source>Wait (min)</source>
</trans-unit>
<trans-unit id="sda4e78c19f5b6f35">
  <source>The policy takes a random time to execute. This controls the minimum time it will take.</source>
</trans-unit>
<trans-unit id="s1d30ff9ba938e68d">
  <source>Wait (max)</source>
</trans-unit>
<trans-unit id="s303b5e552246e613">
  <source>Matches an event against a set of criteria. If any of the configured values match, the policy passes.</source>
</trans-unit>
<trans-unit id="s890810efbe103cbc">
  <source>Match created events with this action type. When left empty, all action types will be matched.</source>
</trans-unit>
<trans-unit id="sa82f8948649d0989">
  <source>Matches Event's Client IP (strict matching, for network matching use an Expression Policy).</source>
</trans-unit>
<trans-unit id="s5a15a8f39c699273">
  <source>Match events created by selected application. When left empty, all applications are matched.</source>
</trans-unit>
<trans-unit id="s3ba9b8aeb686d9f7">
  <source>Match events created by selected model. When left empty, all models are matched.</source>
</trans-unit>
<trans-unit id="s5a13f4bbe004503f">
  <source>Checks if the request's user's password has been changed in the last x days, and denys based on settings.</source>
</trans-unit>
<trans-unit id="sfad8af8ce38104a3">
  <source>Maximum age (in days)</source>
</trans-unit>
<trans-unit id="s9307f3dbb07a73b5">
  <source>Only fail the policy, don't invalidate user's password</source>
</trans-unit>
<trans-unit id="scea1f16238093e35">
  <source>Executes the python snippet to determine whether to allow or deny a request.</source>
</trans-unit>
<trans-unit id="sabd1bc9fb7da71e7">
  <source>Expression using Python.</source>
</trans-unit>
<trans-unit id="s8d08843f397d9e81">
  <source>See documentation for a list of all variables.</source>
</trans-unit>
<trans-unit id="sc362f1f1e4044878">
  <source>Ensure the user satisfies requirements of geography or network topology, based on IP address. If any of the configured values match, the policy passes.</source>
</trans-unit>
<trans-unit id="s035bfd9c5f97e4d3">
  <source>Distance settings</source>
</trans-unit>
<trans-unit id="s207e6f8a8b3515fd">
  <source>Check historical distance of logins</source>
</trans-unit>
<trans-unit id="s8158f4b3e5c869be">
  <source>When this option enabled, the GeoIP data of the policy request is compared to the specified number of historical logins.</source>
</trans-unit>
<trans-unit id="sb8b7450c8515894c">
  <source>Maximum distance</source>
</trans-unit>
<trans-unit id="s40cdbaa532bc9899">
  <source>Maximum distance a login attempt is allowed from in kilometers.</source>
</trans-unit>
<trans-unit id="seef852b5c0f8a529">
  <source>Distance tolerance</source>
</trans-unit>
<trans-unit id="sce567ced300aeb8a">
  <source>Tolerance in checking for distances in kilometers.</source>
</trans-unit>
<trans-unit id="s9ea9cdabd74f8f97">
  <source>Historical Login Count</source>
</trans-unit>
<trans-unit id="s27aec4c2de1ae777">
  <source>Amount of previous login events to check against.</source>
</trans-unit>
<trans-unit id="s48611ce6e85874dc">
  <source>Check impossible travel</source>
</trans-unit>
<trans-unit id="s8cf926e8311f8065">
  <source>When this option enabled, the GeoIP data of the policy request is compared to the specified number of historical logins and if the travel would have been possible in the amount of time since the previous event.</source>
</trans-unit>
<trans-unit id="sa963d05af436770b">
  <source>Impossible travel tolerance</source>
</trans-unit>
<trans-unit id="s5760cd97ca42a238">
  <source>Static rule settings</source>
</trans-unit>
<trans-unit id="s26c2828bf8db525e">
  <source>ASNs</source>
</trans-unit>
<trans-unit id="s72ee4dd6cfa6e10d">
  <source>List of autonomous system numbers. Comma separated. E.g. 13335, 15169, 20940</source>
</trans-unit>
<trans-unit id="s77fbb0a6d145442d">
  <source>Countries</source>
</trans-unit>
<trans-unit id="sdd277e10884a7272">
  <source>Available Countries</source>
</trans-unit>
<trans-unit id="s7a93139fb12ebf96">
  <source>Selected Countries</source>
</trans-unit>
<trans-unit id="se2cc93bd2647baec">
  <source>Static rules</source>
</trans-unit>
<trans-unit id="sc96dd9d2e7b05fc5">
  <source>Minimum length</source>
</trans-unit>
<trans-unit id="s33d48fb745f4d4ae">
  <source>Minimum amount of Uppercase Characters</source>
</trans-unit>
<trans-unit id="s883b544e2b4aa3b5">
  <source>Minimum amount of Lowercase Characters</source>
</trans-unit>
<trans-unit id="s43be3ce2439ffe9c">
  <source>Minimum amount of Digits</source>
</trans-unit>
<trans-unit id="sb3651834cca86735">
  <source>Minimum amount of Symbols Characters</source>
</trans-unit>
<trans-unit id="sc2f116c0ea77d58a">
  <source>Error message</source>
</trans-unit>
<trans-unit id="s21d0e290c51a8ef9">
  <source>Symbol charset</source>
</trans-unit>
<trans-unit id="s545d99afa61e4095">
  <source>Characters which are considered as symbols.</source>
</trans-unit>
<trans-unit id="s1293ad87acc7a609">
  <source>HaveIBeenPwned settings</source>
</trans-unit>
<trans-unit id="sdf4e1c6a2f072600">
  <source>Allowed count</source>
</trans-unit>
<trans-unit id="scd8062ff5e1326d8">
  <source>Allow up to N occurrences in the HIBP database.</source>
</trans-unit>
<trans-unit id="s3fd219b045193507">
  <source>zxcvbn settings</source>
</trans-unit>
<trans-unit id="s28d84abfbaf555ea">
  <source>Score threshold</source>
</trans-unit>
<trans-unit id="s7b3148ffba9f4527">
  <source>If the password's score is less than or equal this value, the policy will fail.</source>
</trans-unit>
<trans-unit id="sd94e99af8b41ff54">
  <source>0: Too guessable: risky password. (guesses &amp;lt; 10^3)</source>
</trans-unit>
<trans-unit id="sc926385d1a624c3a">
  <source>1: Very guessable: protection from throttled online attacks. (guesses &amp;lt; 10^6)</source>
</trans-unit>
<trans-unit id="s8aae61c41319602c">
  <source>2: Somewhat guessable: protection from unthrottled online attacks. (guesses &amp;lt; 10^8)</source>
</trans-unit>
<trans-unit id="sc1f4b57e722a89d6">
  <source>3: Safely unguessable: moderate protection from offline slow-hash scenario. (guesses &amp;lt; 10^10)</source>
</trans-unit>
<trans-unit id="sd47f3d3c9741343d">
  <source>4: Very unguessable: strong protection from offline slow-hash scenario. (guesses &amp;gt;= 10^10)</source>
</trans-unit>
<trans-unit id="sd6cd7ce2310a73a4">
  <source>Checks the value from the policy request against several rules, mostly used to ensure password strength.</source>
</trans-unit>
<trans-unit id="s2a957e843960b604">
  <source>Password field</source>
</trans-unit>
<trans-unit id="se8a81c75b6e30a33">
  <source>Field key to check, field keys defined in Prompt stages are available.</source>
</trans-unit>
<trans-unit id="s2f8c4cf12350a36c">
  <source>Check static rules</source>
</trans-unit>
<trans-unit id="sd75a9a71309fb387">
  <source>Check haveibeenpwned.com</source>
</trans-unit>
<trans-unit id="se5cb18408df3284e">
  <source>For more info see:</source>
</trans-unit>
<trans-unit id="scef7abb8456b06d6">
  <source>Check zxcvbn</source>
</trans-unit>
<trans-unit id="sdfdb58cd232b363d">
  <source>Password strength estimator created by Dropbox, see:</source>
</trans-unit>
<trans-unit id="s40b034801fcb843b">
  <source>Allows/denys requests based on the users and/or the IPs reputation.</source>
</trans-unit>
<trans-unit id="scf4afecb0f1e69b2">
  <source>Invalid login attempts will decrease the score for the client's IP, and the
username they are attempting to login as, by one.</source>
</trans-unit>
<trans-unit id="s8323a9af28e10502">
  <source>The policy passes when the reputation score is below the threshold, and
doesn't pass when either or both of the selected options are equal or above the threshold.</source>
</trans-unit>
<trans-unit id="s1828fbfc2c56379c">
  <source>Check IP</source>
</trans-unit>
<trans-unit id="s4751df77cfd8a5f9">
  <source>Check Username</source>
</trans-unit>
<trans-unit id="se19cc57dd8675498">
  <source>Threshold</source>
</trans-unit>
<trans-unit id="s86cf007b861152ca">
  <source>Ensure that the user's new password is different from their previous passwords. The number of past passwords to check is configurable.</source>
</trans-unit>
<trans-unit id="s79b3fcd40dd63921">
  <source>Number of previous passwords to check</source>
</trans-unit>
<trans-unit id="sdbccb39a658f0e45">
  <source>New policy</source>
</trans-unit>
<trans-unit id="sf693300708a40d2c">
  <source>Create a new policy.</source>
</trans-unit>
<trans-unit id="s5b1fb0d4c0daeba8">
  <source>Create Binding</source>
</trans-unit>
<trans-unit id="s9f5a5f23312798f0">
  <source>Members</source>
</trans-unit>
<trans-unit id="s7eb3d239e0b491ab">
  <source>Select groups to add user to</source>
</trans-unit>
<trans-unit id="sec5cdfa358f9dbf7">
  <source>Warning: Adding the user to the selected group(s) will give them superuser permissions.</source>
</trans-unit>
<trans-unit id="sb3087c7347bed341">
  <source>Company employees with access to the full enterprise feature set.</source>
</trans-unit>
<trans-unit id="sc7266f960c466de6">
  <source>External consultants or B2C customers without access to enterprise features.</source>
</trans-unit>
<trans-unit id="sf4ad4d9f8a5c868b">
  <source>Machine-to-machine authentication or other automations.</source>
</trans-unit>
<trans-unit id="s3d2a8b86a4f5a810">
  <source>Successfully created user and added to group <x id="0" equiv-text="${this.targetGroup.name}"/></source>
</trans-unit>
<trans-unit id="s9c3c272944dcfca3">
  <source>Successfully created user.</source>
</trans-unit>
<trans-unit id="s67ba000e66cdbd0d">
  <source>Type a username for the user...</source>
</trans-unit>
<trans-unit id="s7819072445baceee">
  <source>The user's primary identifier used for authentication. 150 characters or fewer.</source>
</trans-unit>
<trans-unit id="s11b2e9ecce28690c">
  <source>Display Name</source>
</trans-unit>
<trans-unit id="s237e9858014b1205">
  <source>Type an optional display name...</source>
</trans-unit>
<trans-unit id="sc82cf82ad6cb26cc">
  <source>The user's display name.</source>
</trans-unit>
<trans-unit id="s9f9492d30a96b9c6">
  <source>User type</source>
</trans-unit>
<trans-unit id="se3a34af2a05c5c98">
  <source>Internal Service account</source>
</trans-unit>
<trans-unit id="s755bfddac3729eaa">
  <source>Managed by authentik and cannot be assigned manually.</source>
</trans-unit>
<trans-unit id="s1e2e135dac5ba993">
  <source>Email Address</source>
</trans-unit>
<trans-unit id="s9fd0516c9193c73e">
  <source>Type an optional email address...</source>
</trans-unit>
<trans-unit id="s4c5000e84bc2189a">
  <source>Whether this user is active and allowed to authenticate. Setting this to inactive can be used to temporarily disable a user without deleting their account.</source>
</trans-unit>
<trans-unit id="s2e532e19ed477a56">
  <source>Path</source>
</trans-unit>
<trans-unit id="s3a15d06c4a39515a">
  <source>Type a path for the user...</source>
</trans-unit>
<trans-unit id="s1fa5309c30d174b7">
  <source>Paths can be used to organize users into folders depending on which source created them or organizational structure.</source>
</trans-unit>
<trans-unit id="s5701b3d3a6678723">
  <source>Paths may not start or end with a slash, but they can contain any other character as path segments. The paths are currently purely used for organization, it does not affect their permissions, group memberships, or anything else.</source>
</trans-unit>
<trans-unit id="s50c312bea93b6925">
  <source>Edit Policy</source>
</trans-unit>
<trans-unit id="s0b55a57f473ab8af">
  <source>Update Group</source>
</trans-unit>
<trans-unit id="s494e1ed913d9351a">
  <source>Edit Group</source>
</trans-unit>
<trans-unit id="sad130c2d925fb7bf">
  <source>Update User</source>
</trans-unit>
<trans-unit id="s5cd31f4a88adf180">
  <source>Edit User</source>
</trans-unit>
<trans-unit id="se291dfd2a59d7842">
  <source>Policy binding(s)</source>
</trans-unit>
<trans-unit id="s7e87ab366c199345">
  <source>Update Binding</source>
</trans-unit>
<trans-unit id="sbad5b96fb855ef36">
  <source>No Policies bound.</source>
</trans-unit>
<trans-unit id="s775f81ca91aa2d0c">
  <source>Policy actions</source>
</trans-unit>
<trans-unit id="s911a27022aba349f">
  <source>Create and bind Policy</source>
</trans-unit>
<trans-unit id="s080af72866b69b3d">
  <source>Bind existing <x id="0" equiv-text="${this.allowedTypesLabel}"/></source>
</trans-unit>
<trans-unit id="sb7af25ce6e30d61a">
  <source>The currently selected policy engine mode is <x id="0" equiv-text="${policyEngineMode.label}"/>:</source>
</trans-unit>
<trans-unit id="s8276649077e8715c">
  <source>Endpoint(s)</source>
</trans-unit>
<trans-unit id="sf1dabfe0fe8a75ad">
  <source>Update Endpoint</source>
</trans-unit>
<trans-unit id="s008496c7716b9812">
  <source>These bindings control which users will have access to this endpoint. Users must also have access to the application.</source>
</trans-unit>
<trans-unit id="s38e7cd1a24e70faa">
  <source>Create Endpoint</source>
</trans-unit>
<trans-unit id="s5c18f85cda6e89be">
  <source>Connections</source>
</trans-unit>
<trans-unit id="s168565f5ac74a89f">
  <source>Update RAC Provider</source>
</trans-unit>
<trans-unit id="s8465a2caa2d9ea5d">
  <source>Endpoints</source>
</trans-unit>
<trans-unit id="s09b671b120443043">
  <source>Update Radius Provider</source>
</trans-unit>
<trans-unit id="sd3386a2ef42e80b9">
  <source>Download</source>
</trans-unit>
<trans-unit id="sf417c13d7a0f7995">
  <source>Copy download URL</source>
</trans-unit>
<trans-unit id="sc1cfce89ebcf1bf9">
  <source>Download signing certificate</source>
</trans-unit>
<trans-unit id="s2c0de3d35a7bc784">
  <source>Related objects</source>
</trans-unit>
<trans-unit id="s803b0621006085be">
  <source>Update SAML Provider</source>
</trans-unit>
<trans-unit id="s44b1f042790cd1a2">
  <source>SAML Configuration</source>
</trans-unit>
<trans-unit id="sba999428083abce3">
  <source>EntityID/Issuer</source>
</trans-unit>
<trans-unit id="scd2984ee5552643a">
  <source>SSO URL (Post)</source>
</trans-unit>
<trans-unit id="saa79b47f60c66458">
  <source>SSO URL (Redirect)</source>
</trans-unit>
<trans-unit id="s2da51a6287118ba8">
  <source>SSO URL (IdP-initiated Login)</source>
</trans-unit>
<trans-unit id="s0a57e911e457302b">
  <source>SLO URL (Post)</source>
</trans-unit>
<trans-unit id="s1e7308bb1ca323e1">
  <source>SLO URL (Redirect)</source>
</trans-unit>
<trans-unit id="sd2c58d7c6dddc515">
  <source>SAML Metadata</source>
</trans-unit>
<trans-unit id="s382b702673776873">
  <source>Example SAML attributes</source>
</trans-unit>
<trans-unit id="sea3bfc143ced73db">
  <source>NameID attribute</source>
</trans-unit>
<trans-unit id="sd000b42fea07c34a">
  <source>SCIM Group(s)</source>
</trans-unit>
<trans-unit id="s146769fb55f1ee50">
  <source>SCIM User(s)</source>
</trans-unit>
<trans-unit id="sc6c575c5ff64cdb1">
  <source>Update SCIM Provider</source>
</trans-unit>
<trans-unit id="sb9d947872397ca07">
  <source>SSF Provider is in preview.</source>
</trans-unit>
<trans-unit id="sa1db89262360550b">
  <source>Send us feedback!</source>
</trans-unit>
<trans-unit id="sc83697908e3e2b46">
  <source>SSF URL</source>
</trans-unit>
<trans-unit id="s5a1fc8f3b2e072d0">
  <source>No assigned application</source>
</trans-unit>
<trans-unit id="s78302d097a608b99">
  <source>Update SSF Provider</source>
</trans-unit>
<trans-unit id="sa412f34efd88e962">
  <source>Streams</source>
</trans-unit>
<trans-unit id="s6ba50bb0842ba1e2">
  <source>Applications</source>
</trans-unit>
<trans-unit id="s66f572bec2bde9c4">
  <source>External applications that use <x id="0" equiv-text="${this.brandingTitle}"/> as an identity provider via protocols like OAuth2 and SAML. All applications are shown here, even ones you cannot access.</source>
</trans-unit>
<trans-unit id="sb564f81eb057342e">
  <source>Application Icon</source>
</trans-unit>
<trans-unit id="s96b2fefc550e4b1c">
  <source>Provider Type</source>
</trans-unit>
<trans-unit id="s0a3fdba3a68a2730">
  <source>Applications Documentation</source>
</trans-unit>
<trans-unit id="sd20f6cd02c90867f">
  <source>Application(s)</source>
</trans-unit>
<trans-unit id="sf07bfbe5316e7cc7">
  <source>Application icon for "<x id="0" equiv-text="${item.name}"/>"</source>
</trans-unit>
<trans-unit id="sa347e31efbb60be2">
  <source>Update Application</source>
</trans-unit>
<trans-unit id="s037f22187581bf8f">
  <source>Edit "<x id="0" equiv-text="${item.name}"/>"</source>
</trans-unit>
<trans-unit id="sdb3b903354fbfb17">
  <source>Open "<x id="0" equiv-text="${item.name}"/>"</source>
</trans-unit>
<trans-unit id="s1f7698c061c208c9">
  <source>Open</source>
</trans-unit>
<trans-unit id="s8fec035fa1737294">
  <source>Create with Provider</source>
</trans-unit>
<trans-unit id="s34661765d81e7340">
  <source>Successfully cleared application cache</source>
</trans-unit>
<trans-unit id="s9377ae285bc0157c">
  <source>Failed to delete application cache</source>
</trans-unit>
<trans-unit id="s3ed5607ad78d4224">
  <source>Clear cache</source>
</trans-unit>
<trans-unit id="s754153d9e524ffce">
  <source>Clear Application cache</source>
</trans-unit>
<trans-unit id="sea5092df2c72b064">
  <source>Are you sure you want to clear the application cache? This will cause all policies to be re-evaluated on their next usage.</source>
</trans-unit>
<trans-unit id="sd9b556a84ae25690">
  <source>Successfully sent test-request.</source>
</trans-unit>
<trans-unit id="sa36117e97f49c86e">
  <source>Successfully updated entitlement.</source>
</trans-unit>
<trans-unit id="s86bee999b735111f">
  <source>Successfully created entitlement.</source>
</trans-unit>
<trans-unit id="s8a48455905fc14e6">
  <source>Application entitlement(s)</source>
</trans-unit>
<trans-unit id="sae971cbff672090b">
  <source>Update Entitlement</source>
</trans-unit>
<trans-unit id="s537a58ae0ff50f1c">
  <source>These bindings control which users have access to this entitlement.</source>
</trans-unit>
<trans-unit id="s05849efeac672dc7">
  <source>No app entitlements created.</source>
</trans-unit>
<trans-unit id="sab4db6a3bd6abc1e">
  <source>This application does currently not have any application entitlements defined.</source>
</trans-unit>
<trans-unit id="sf0bd204ce3fea1de">
  <source>Create Entitlement</source>
</trans-unit>
<trans-unit id="s55d8e42d0a1c057e">
  <source>Create entitlement</source>
</trans-unit>
<trans-unit id="sb6fcdabf769208a1">
  <source>Failed to fetch application "<x id="0" equiv-text="${this.applicationSlug}"/>".</source>
</trans-unit>
<trans-unit id="application.outpost.missing.warning">
  <source>Warning: Application is not used by any Outpost.</source>
</trans-unit>
<trans-unit id="sb6cbd4f92ebaf5d8">
  <source>Related</source>
</trans-unit>
<trans-unit id="sd71081c23d1cd38b">
  <source>Check access</source>
</trans-unit>
<trans-unit id="s42cbd8dca939a9c7">
  <source>Check</source>
</trans-unit>
<trans-unit id="sf22f7f8a9309b4ed">
  <source>Check Application access</source>
</trans-unit>
<trans-unit id="s2474e7fb1aec9f05">
  <source>Test</source>
</trans-unit>
<trans-unit id="s512957aa09384646">
  <source>Launch</source>
</trans-unit>
<trans-unit id="sed02f831e653deb3">
  <source>Logins over the last week (per 8 hours)</source>
</trans-unit>
<trans-unit id="sc6479479c936939f">
  <source>Application entitlements</source>
</trans-unit>
<trans-unit id="application.entitlements.preview.info">
  <source>Application entitlements are in preview.</source>
</trans-unit>
<trans-unit id="preview.send-us-feedback">
  <source>Send us feedback!</source>
</trans-unit>
<trans-unit id="s8e1c375a007d1839">
  <source>These entitlements can be used to configure user access in this application.</source>
</trans-unit>
<trans-unit id="s2b1bc31276c4c477">
  <source>Policy / Group / User Bindings</source>
</trans-unit>
<trans-unit id="s64330d6dc06337c9">
  <source>Loading application...</source>
</trans-unit>
<trans-unit id="sea2f00b34b385a43">
  <source>Successfully updated device.</source>
</trans-unit>
<trans-unit id="s2b8e875dc18e2690">
  <source>Device name...</source>
</trans-unit>
<trans-unit id="s81f57ffc163f9f82">
  <source>Device name</source>
</trans-unit>
<trans-unit id="s0ae9fd7db25fa3e0">
  <source>Device Group</source>
</trans-unit>
<trans-unit id="s335acddfb181e9ad">
  <source>Connector setup</source>
</trans-unit>
<trans-unit id="s3687049d1af562c4">
  <source>Copy</source>
</trans-unit>
<trans-unit id="sd1dc37bdc04758eb">
  <source>Download the latest package from here:</source>
</trans-unit>
<trans-unit id="sf96a86df0756bc7b">
  <source>Afterwards, select the enrollment token you want to use:</source>
</trans-unit>
<trans-unit id="s12f523a52b843ea2">
  <source>macOS</source>
</trans-unit>
<trans-unit id="s7845e3b545ffe6bd">
  <source>Linux</source>
</trans-unit>
<trans-unit id="s50ad561b4139dc06">
  <source>Configured connector does not support setup.</source>
</trans-unit>
<trans-unit id="s3624e780118ae113">
  <source>No connectors configured. Navigate to connectors in the sidebar and create a connector.</source>
</trans-unit>
<trans-unit id="s8f26d4f086cc1323">
  <source>Unix</source>
</trans-unit>
<trans-unit id="s16125219b0c92b52">
  <source>BSD</source>
</trans-unit>
<trans-unit id="sefe707c1bfb1d3cc">
  <source>Android</source>
</trans-unit>
<trans-unit id="s2c0fca192c3375e6">
  <source>iOS</source>
</trans-unit>
<trans-unit id="scfe39d24bc958960">
  <source>Devices</source>
</trans-unit>
<trans-unit id="s091d3507b5b2f9d7">
  <source>OS</source>
</trans-unit>
<trans-unit id="s150cf10289852e4a">
  <source>Endpoint Devices are in preview.</source>
</trans-unit>
<trans-unit id="s672b3d1982f585fa">
  <source>Total devices</source>
</trans-unit>
<trans-unit id="sf3a81f931deb9f96">
  <source>Total count of devices across all groups</source>
</trans-unit>
<trans-unit id="sd4566519aa4dbd8e">
  <source>Unreachable devices</source>
</trans-unit>
<trans-unit id="sf1580fcb88cbcfd8">
  <source>Devices that authentik hasn't received information about in 24h.</source>
</trans-unit>
<trans-unit id="s303ef08d87cd21fd">
  <source>Outdated agents</source>
</trans-unit>
<trans-unit id="s0a5821461d41f627">
  <source>Devices running an outdated version of an agent</source>
</trans-unit>
<trans-unit id="sabb56f74492e7e96">
  <source>Update Device</source>
</trans-unit>
<trans-unit id="sf655f75d8e14d5fe">
  <source>Endpoint Device(s)</source>
</trans-unit>
<trans-unit id="sd667856c73082c35">
  <source>Device <x id="0" equiv-text="${this.device?.name}"/></source>
</trans-unit>
<trans-unit id="s6d4cc88f2426efaf">
  <source>Loading device...</source>
</trans-unit>
<trans-unit id="s2addf9fd0d89ba11">
  <source>Device details</source>
</trans-unit>
<trans-unit id="s1e176e35c828318c">
  <source>Hostname</source>
</trans-unit>
<trans-unit id="s974564539ea1cafa">
  <source>Serial number</source>
</trans-unit>
<trans-unit id="s361c13a7f20ea559">
  <source>Operating system</source>
</trans-unit>
<trans-unit id="se990a968b7dfcfd8">
  <source>Firewall enabled</source>
</trans-unit>
<trans-unit id="sc5e304b166165519">
  <source>Hardware</source>
</trans-unit>
<trans-unit id="scb320e45978d3390">
  <source>Manufacturer</source>
</trans-unit>
<trans-unit id="s0b453a19aa0f85a9">
  <source>CPU</source>
</trans-unit>
<trans-unit id="sa10af889ecd36687">
  <source><x id="0" equiv-text="${this.device.facts.data.hardware?.cpuCount}"/> x <x id="1" equiv-text="${this.device.facts.data.hardware?.cpuName}"/></source>
</trans-unit>
<trans-unit id="s16e1bead7b9c95ce">
  <source>Memory</source>
</trans-unit>
<trans-unit id="s94a50f1495fb5ccd">
  <source>Disk encryption</source>
</trans-unit>
<trans-unit id="s416211a967a6db4e">
  <source>Users / Groups</source>
</trans-unit>
<trans-unit id="sfdd447bcde2c13ba">
  <source>Processes</source>
</trans-unit>
<trans-unit id="s4a7ce90bfc6ce013">
  <source>Connector name</source>
</trans-unit>
<trans-unit id="s44200a04fda1fa29">
  <source>Flow used for users to authorize.</source>
</trans-unit>
<trans-unit id="s1d3f07bfba32fc84">
  <source>Certificate used for signing device compliance challenges.</source>
</trans-unit>
<trans-unit id="sb85ffe141d7c229d">
  <source>Session duration</source>
</trans-unit>
<trans-unit id="s5567310faa112bc6">
  <source>Configure how long an authenticated session is valid for.</source>
</trans-unit>
<trans-unit id="sa3b5c0d4b4fd12ff">
  <source>Terminate authenticated sessions on token expiry</source>
</trans-unit>
<trans-unit id="sf4372a571ffb02cd">
  <source>Refresh interval</source>
</trans-unit>
<trans-unit id="s3f009bda38b93134">
  <source>Interval how frequently the agent tries to update its config.</source>
</trans-unit>
<trans-unit id="seb040746311faa64">
  <source>Unix settings</source>
</trans-unit>
<trans-unit id="s5758d1421a791cc6">
  <source>NSS User ID offset</source>
</trans-unit>
<trans-unit id="sfb33118d419cd3c0">
  <source>NSS Group ID offset</source>
</trans-unit>
<trans-unit id="sc0c9cffcfb474d4e">
  <source>New connector</source>
</trans-unit>
<trans-unit id="saf861ad08bb37fff">
  <source>Create a new connector.</source>
</trans-unit>
<trans-unit id="sffc7bf978a049970">
  <source>Connectors are required to create devices. Depending on connector type, agents either directly talk to them or they talk to and external API to create devices.</source>
</trans-unit>
<trans-unit id="s80b0feb2a6b98ef9">
  <source>Connectors</source>
</trans-unit>
<trans-unit id="s06b8c7e7fb99c1d8">
  <source>Connector(s)</source>
</trans-unit>
<trans-unit id="s476ffc07e6d66f18">
  <source>Successfully updated token.</source>
</trans-unit>
<trans-unit id="s93c1e5fbe8184895">
  <source>Successfully created token.</source>
</trans-unit>
<trans-unit id="s4165cd175bc4c0c4">
  <source>Expires on</source>
</trans-unit>
<trans-unit id="s47be0f8c26355135">
  <source>Token name</source>
</trans-unit>
<trans-unit id="s1b14062c44e5ef45">
  <source>Expiring</source>
</trans-unit>
<trans-unit id="sf71dba2c30283a54">
  <source>Expires?</source>
</trans-unit>
<trans-unit id="sc7be80a7f8ec597e">
  <source>Expiry date</source>
</trans-unit>
<trans-unit id="se85e2f1923fd96ac">
  <source>Enrollment Token(s)</source>
</trans-unit>
<trans-unit id="scc3487e74c5a3e89">
  <source>Copy token</source>
</trans-unit>
<trans-unit id="sb16ba96408c22012">
  <source>Create Enrollment Token</source>
</trans-unit>
<trans-unit id="sfbf16ea8fef96f6d">
  <source>Enrollment Tokens</source>
</trans-unit>
<trans-unit id="s90dc0a58485b27fb">
  <source>Group name...</source>
</trans-unit>
<trans-unit id="s030655287e89069f">
  <source>Group name</source>
</trans-unit>
<trans-unit id="s3a38fceae14534dd">
  <source>Device access groups</source>
</trans-unit>
<trans-unit id="sbe0fb540e9dee187">
  <source>Create groups of devices to manage access.</source>
</trans-unit>
<trans-unit id="s505d8b43d0ead2be">
  <source>Create Device Group</source>
</trans-unit>
<trans-unit id="s7924cdccf3592aa8">
  <source>Device Group(s)</source>
</trans-unit>
<trans-unit id="s24875d5475e82526">
  <source>Successfully updated source.</source>
</trans-unit>
<trans-unit id="s60d891ed3ee9ebc5">
  <source>Successfully created source.</source>
</trans-unit>
<trans-unit id="s900b0d85b872d134">
  <source>Link users on unique identifier</source>
</trans-unit>
<trans-unit id="s6c70a73265e14521">
  <source>Link to a user with identical email address. Can have security implications when a source doesn't validate email addresses</source>
</trans-unit>
<trans-unit id="s995535e7af30d754">
  <source>Use the user's email address, but deny enrollment when the email address already exists</source>
</trans-unit>
<trans-unit id="s542ecb4130f6cea5">
  <source>Link to a user with identical username. Can have security implications when a username is used with another source</source>
</trans-unit>
<trans-unit id="s2a1debf34e5aeba4">
  <source>Use the user's username, but deny enrollment when the username already exists</source>
</trans-unit>
<trans-unit id="s81ce0d54727f42d2">
  <source>Unknown user matching mode</source>
</trans-unit>
<trans-unit id="s9642f1d8ee6e787d">
  <source>Link to a group with identical name. Can have security implications when a group is used with another source</source>
</trans-unit>
<trans-unit id="s485964f83b5ed044">
  <source>Use the group's name, but deny enrollment when the name already exists</source>
</trans-unit>
<trans-unit id="s8bf373b1a2bfefed">
  <source>Promoted</source>
</trans-unit>
<trans-unit id="s4a600d70e4348810">
  <source>When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.</source>
</trans-unit>
<trans-unit id="s39d6971531a270b6">
  <source>Update internal password on login</source>
</trans-unit>
<trans-unit id="sefe04e319223a3d6">
  <source>When the user logs in to authentik using this source password backend, update their credentials in authentik.</source>
</trans-unit>
<trans-unit id="s8af7239354f7e7b6">
  <source>Sync users</source>
</trans-unit>
<trans-unit id="sd80b0b8aeae3abe3">
  <source>User password writeback</source>
</trans-unit>
<trans-unit id="sf52ff57fd136cc2f">
  <source>Enable this option to write password changes made in authentik back to Kerberos. Ignored if sync is disabled.</source>
</trans-unit>
<trans-unit id="s14a16542f956e11d">
  <source>Realm settings</source>
</trans-unit>
<trans-unit id="s9c2eae548d3c1c30">
  <source>Realm</source>
</trans-unit>
<trans-unit id="s6b032212997e2491">
  <source>Kerberos 5 configuration</source>
</trans-unit>
<trans-unit id="sbf50181022f47de3">
  <source>Kerberos 5 configuration. See man krb5.conf(5) for configuration format. If left empty, a default krb5.conf will be used.</source>
</trans-unit>
<trans-unit id="s81a87652ade099e4">
  <source>User matching mode</source>
</trans-unit>
<trans-unit id="s2b1b532c5271b296">
  <source>Group matching mode</source>
</trans-unit>
<trans-unit id="s2386539a0bd62fab">
  <source>Sync connection settings</source>
</trans-unit>
<trans-unit id="s3cc2b33d2a8000d3">
  <source>KAdmin type</source>
</trans-unit>
<trans-unit id="s624e1c8739507529">
  <source>MIT krb5 kadmin</source>
</trans-unit>
<trans-unit id="s6d225d9e74dfff6f">
  <source>Heimdal kadmin</source>
</trans-unit>
<trans-unit id="s0d1a6f3fe81351f8">
  <source>Sync principal</source>
</trans-unit>
<trans-unit id="sa691d6e1974295fa">
  <source>Principal used to authenticate to the KDC for syncing.</source>
</trans-unit>
<trans-unit id="s977b9c629eed3d33">
  <source>Sync password</source>
</trans-unit>
<trans-unit id="s77772860385de948">
  <source>Password used to authenticate to the KDC for syncing. Optional if Sync keytab or Sync credentials cache is provided.</source>
</trans-unit>
<trans-unit id="sc59ec59c3d5e74dc">
  <source>Sync keytab</source>
</trans-unit>
<trans-unit id="scd42997958453f05">
  <source>Keytab used to authenticate to the KDC for syncing. Optional if Sync password or Sync credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
</trans-unit>
<trans-unit id="s60eaf439ccdca1f2">
  <source>Sync credentials cache</source>
</trans-unit>
<trans-unit id="s95722900b0c9026f">
  <source>Credentials cache used to authenticate to the KDC for syncing. Optional if Sync password or Sync keytab is provided. Must be in the form TYPE:residual.</source>
</trans-unit>
<trans-unit id="sf9c055db98d7994a">
  <source>SPNEGO settings</source>
</trans-unit>
<trans-unit id="sab580a45dc46937f">
  <source>SPNEGO server name</source>
</trans-unit>
<trans-unit id="s7a79d6174d17ab2d">
  <source>Force the use of a specific server name for SPNEGO. Must be in the form HTTP@domain</source>
</trans-unit>
<trans-unit id="sa4ba2b2081472ccd">
  <source>SPNEGO keytab</source>
</trans-unit>
<trans-unit id="s64adda975c1106c0">
  <source>Keytab used for SPNEGO. Optional if SPNEGO credentials cache is provided. Must be base64 encoded or in the form TYPE:residual.</source>
</trans-unit>
<trans-unit id="s92247825b92587b5">
  <source>SPNEGO credentials cache</source>
</trans-unit>
<trans-unit id="sd9757c345e4062f8">
  <source>Credentials cache used for SPNEGO. Optional if SPNEGO keytab is provided. Must be in the form TYPE:residual.</source>
</trans-unit>
<trans-unit id="s734ab8fbcae0b69e">
  <source>Kerberos Attribute mapping</source>
</trans-unit>
<trans-unit id="s8e2de27afeb78e5a">
  <source>Property mappings for user creation.</source>
</trans-unit>
<trans-unit id="s045cf2d851164d5a">
  <source>Property mappings for group creation.</source>
</trans-unit>
<trans-unit id="sfe6977a3aea3ee6e">
  <source>Flow to use when authenticating existing users.</source>
</trans-unit>
<trans-unit id="s2801a48ceac691b3">
  <source>Enrollment flow</source>
</trans-unit>
<trans-unit id="s5d0a14d29ebad561">
  <source>Flow to use when enrolling new users.</source>
</trans-unit>
<trans-unit id="s94333971a07803b9">
  <source>Additional settings</source>
</trans-unit>
<trans-unit id="sfbc59ff17a73503d">
  <source>User path</source>
</trans-unit>
<trans-unit id="s2b952e9dc99cbded">
  <source>Login password is synced from LDAP into authentik automatically. Enable this option only to write password changes in authentik back to LDAP.</source>
</trans-unit>
<trans-unit id="saf7ce4165a1025f6">
  <source>Sync groups</source>
</trans-unit>
<trans-unit id="s42b57339ad2f3ac7">
  <source>Delete Not Found Objects</source>
</trans-unit>
<trans-unit id="se3b26b762110bda0">
  <source>Delete authentik users and groups which were previously supplied by this source, but are now missing from it.</source>
</trans-unit>
<trans-unit id="s2035f889f576bca6">
  <source>Connection settings</source>
</trans-unit>
<trans-unit id="s0a72e65aef45b1e8">
  <source>Server URI</source>
</trans-unit>
<trans-unit id="sa599dbe5776897ad">
  <source>Specify multiple server URIs by separating them with a comma.</source>
</trans-unit>
<trans-unit id="se36b55dfcf5dc80b">
  <source>Enable StartTLS</source>
</trans-unit>
<trans-unit id="s33683c3b1dbaf264">
  <source>To use SSL instead, use 'ldaps://' and disable this option.</source>
</trans-unit>
<trans-unit id="s1024166475850a65">
  <source>Use Server URI for SNI verification</source>
</trans-unit>
<trans-unit id="se65beb94fffc3c4b">
  <source>Required for servers using TLS 1.3+</source>
</trans-unit>
<trans-unit id="s2221fef80f4753a2">
  <source>TLS Verification Certificate</source>
</trans-unit>
<trans-unit id="sb8c13bd58191cea2">
  <source>When connecting to an LDAP Server with TLS, certificates are not checked by default. Specify a keypair to validate the remote certificate.</source>
</trans-unit>
<trans-unit id="s000ee3e634868b3c">
  <source>TLS Client authentication certificate</source>
</trans-unit>
<trans-unit id="s5506b35a1bceb141">
  <source>Client certificate keypair to authenticate against the LDAP Server's Certificate.</source>
</trans-unit>
<trans-unit id="sb7684e2910a33a1f">
  <source>Bind CN</source>
</trans-unit>
<trans-unit id="s3de6db803012016a">
  <source>LDAP Attribute mapping</source>
</trans-unit>
<trans-unit id="sd14a19a19d507f9e">
  <source>Parent group for all the groups imported from LDAP.</source>
</trans-unit>
<trans-unit id="sfa6b7b105640e457">
  <source>Additional User DN</source>
</trans-unit>
<trans-unit id="s9ae089fd248e72db">
  <source>Additional user DN, prepended to the Base DN.</source>
</trans-unit>
<trans-unit id="s04bb32ec9f359507">
  <source>Additional Group DN</source>
</trans-unit>
<trans-unit id="sfae9f4ea5749a36b">
  <source>Additional group DN, prepended to the Base DN.</source>
</trans-unit>
<trans-unit id="s66ffc06300964849">
  <source>User object filter</source>
</trans-unit>
<trans-unit id="s1c2a173db0e1ec61">
  <source>Consider Objects matching this filter to be Users.</source>
</trans-unit>
<trans-unit id="s2ec94a7c7f5bcd1b">
  <source>Group object filter</source>
</trans-unit>
<trans-unit id="saf5eb7596b3a355b">
  <source>Consider Objects matching this filter to be Groups.</source>
</trans-unit>
<trans-unit id="sf325a4adba4d6278">
  <source>Group membership field</source>
</trans-unit>
<trans-unit id="s4e1d2cb86cf5ecd0">
  <source>Field which contains members of a group. The value of this field is matched against User membership attribute.</source>
</trans-unit>
<trans-unit id="s6478025f3e0174fa">
  <source>User membership attribute</source>
</trans-unit>
<trans-unit id="s344be99cf5d36407">
  <source>Attribute which matches the value of Group membership field.</source>
</trans-unit>
<trans-unit id="s1d47b4f61ca53e8e">
  <source>Lookup using user attribute</source>
</trans-unit>
<trans-unit id="s17359123e1f24504">
  <source>Field which contains DNs of groups the user is a member of. This field is used to lookup groups from users, e.g. 'memberOf'. To lookup nested groups in an Active Directory environment use 'memberOf:1.2.840.113556.1.4.1941:'.</source>
</trans-unit>
<trans-unit id="s026555347e589f0e">
  <source>Object uniqueness field</source>
</trans-unit>
<trans-unit id="s24211f319e5b7e98">
  <source>Field which contains a unique Identifier.</source>
</trans-unit>
<trans-unit id="s4d5cb134999b50df">
  <source>HTTP Basic Auth</source>
</trans-unit>
<trans-unit id="s6927635d1c339cfc">
  <source>Include the client ID and secret as request parameters</source>
</trans-unit>
<trans-unit id="s139200afa0695967">
  <source>Plain</source>
</trans-unit>
<trans-unit id="s7a316723c6bb33eb">
  <source>S256</source>
</trans-unit>
<trans-unit id="sd04376c4216c921f">
  <source>URL settings</source>
</trans-unit>
<trans-unit id="s872d0e88ab34ed83">
  <source>Authorization URL</source>
</trans-unit>
<trans-unit id="see3ff55262fd6500">
  <source>URL the user is redirect to to consent the authorization.</source>
</trans-unit>
<trans-unit id="sb932dead79567c7b">
  <source>Access token URL</source>
</trans-unit>
<trans-unit id="s88b8a2892635a2fc">
  <source>URL used by authentik to retrieve tokens.</source>
</trans-unit>
<trans-unit id="s69bd313dd12fc2f3">
  <source>Profile URL</source>
</trans-unit>
<trans-unit id="sa8d83cd8023e8e4d">
  <source>URL used by authentik to get user information.</source>
</trans-unit>
<trans-unit id="sc7707b3ba3a2a7ca">
  <source>Request token URL</source>
</trans-unit>
<trans-unit id="s3926da5b20cdf3b6">
  <source>URL used to request the initial token. This URL is only required for OAuth 1.</source>
</trans-unit>
<trans-unit id="s199b55513a739f43">
  <source>OIDC Well-known URL</source>
</trans-unit>
<trans-unit id="s8b149b30b5b523ef">
  <source>OIDC well-known configuration URL. Can be used to automatically configure the URLs above.</source>
</trans-unit>
<trans-unit id="s9db2c836ade1339c">
  <source>OIDC JWKS URL</source>
</trans-unit>
<trans-unit id="s4b2a1b657c160f5b">
  <source>JSON Web Key URL. Keys from the URL will be used to validate JWTs from this source.</source>
</trans-unit>
<trans-unit id="s2df0b65125600de9">
  <source>OIDC JWKS</source>
</trans-unit>
<trans-unit id="s02de8d9e8583b480">
  <source>Raw JWKS data.</source>
</trans-unit>
<trans-unit id="s311c22ee852736e9">
  <source>PKCE Method</source>
</trans-unit>
<trans-unit id="sa9afb0f84a3c380d">
  <source>Configure Proof Key for Code Exchange for this source.</source>
</trans-unit>
<trans-unit id="s4fca384c634e1a92">
  <source>Authorization code authentication method</source>
</trans-unit>
<trans-unit id="sdc02c276ed429008">
  <source>How to perform authentication during an authorization_code token request flow</source>
</trans-unit>
<trans-unit id="se8987bdfb35e46b2">
  <source>Consumer key</source>
</trans-unit>
<trans-unit id="sb35c08e3a541188f">
  <source>Also known as Client ID.</source>
</trans-unit>
<trans-unit id="sabaf0061f7e41b0b">
  <source>Consumer secret</source>
</trans-unit>
<trans-unit id="sd46fd9b647cfea10">
  <source>Also known as Client Secret.</source>
</trans-unit>
<trans-unit id="sa61966cd83b4924c">
  <source>Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *.</source>
</trans-unit>
<trans-unit id="s704381cea57e5a12">
  <source>OAuth Attribute mapping</source>
</trans-unit>
<trans-unit id="s91f389c796720a81">
  <source>Load servers</source>
</trans-unit>
<trans-unit id="s4f820625804ed29b">
  <source>Re-authenticate with Plex</source>
</trans-unit>
<trans-unit id="sc297b2e13c28ecf9">
  <source>Allow friends to authenticate via Plex, even if you don't share any servers</source>
</trans-unit>
<trans-unit id="sfee91e08b8b47477">
  <source>Allowed servers</source>
</trans-unit>
<trans-unit id="s216eb300543edd91">
  <source>Select which server a user has to be a member of to be allowed to authenticate.</source>
</trans-unit>
<trans-unit id="s4b9501c321dc4922">
  <source>Plex Attribute mapping</source>
</trans-unit>
<trans-unit id="s2e7448caf3df574a">
  <source>Verify Assertion Signature</source>
</trans-unit>
<trans-unit id="s0069939a0fcc3986">
  <source>When enabled, authentik will look for a Signature inside of the Assertion element.</source>
</trans-unit>
<trans-unit id="s6bf8b26e6e8a7059">
  <source>Verify Response Signature</source>
</trans-unit>
<trans-unit id="s435805a99af456d3">
  <source>When enabled, authentik will look for a Signature inside of the Response element.</source>
</trans-unit>
<trans-unit id="s31d7f3ba04d306a5">
  <source>SSO URL</source>
</trans-unit>
<trans-unit id="s1d9d6c5b424fdc1f">
  <source>URL that the initial Login request is sent to.</source>
</trans-unit>
<trans-unit id="sd94db2b8c85d10a6">
  <source>SLO URL</source>
</trans-unit>
<trans-unit id="sc764ddf60b5149de">
  <source>Optional URL if the IDP supports Single-Logout.</source>
</trans-unit>
<trans-unit id="se7430794fa89005a">
  <source>Also known as Entity ID. Defaults the Metadata URL.</source>
</trans-unit>
<trans-unit id="s5615bb595ad6ded6">
  <source>Binding Type</source>
</trans-unit>
<trans-unit id="sa2e4d6830226d3ec">
  <source>Redirect binding</source>
</trans-unit>
<trans-unit id="s6f96a78d81ef277c">
  <source>Post-auto binding</source>
</trans-unit>
<trans-unit id="sc2c70fd56f5d0b48">
  <source>Post binding but the request is automatically sent and the user doesn't have to confirm.</source>
</trans-unit>
<trans-unit id="s968c90258dcf7562">
  <source>Post binding</source>
</trans-unit>
<trans-unit id="se10bbf4cf861c81b">
  <source>Signing keypair</source>
</trans-unit>
<trans-unit id="s838ed611b533b19e">
  <source>Keypair which is used to sign outgoing requests. Leave empty to disable signing.</source>
</trans-unit>
<trans-unit id="s39c8c0bf4d927c9f">
  <source> Allow IDP-initiated logins</source>
</trans-unit>
<trans-unit id="s65d507f1513c2f03">
  <source>Allows authentication flows initiated by the IdP. This can be a security risk, as no validation of the request ID is done.</source>
</trans-unit>
<trans-unit id="s297a2075bd7e40db">
  <source>NameID Policy</source>
</trans-unit>
<trans-unit id="s20a0ce62823bfa97">
  <source>Delete temporary users after</source>
</trans-unit>
<trans-unit id="s3198c384c2f68b08">
  <source>Time offset when temporary users should be deleted. This only applies if your IDP uses the NameID Format 'transient', and the user doesn't log out manually.</source>
</trans-unit>
<trans-unit id="s37b8d48b9416fc25">
  <source>When selected, encrypted assertions will be decrypted using this keypair.</source>
</trans-unit>
<trans-unit id="s924a87f37bc0201e">
  <source>SAML Attribute mapping</source>
</trans-unit>
<trans-unit id="sb32e9c1faa0b8673">
  <source>Pre-authentication flow</source>
</trans-unit>
<trans-unit id="sa3c1f6ac5e63a70f">
  <source>Flow used before authentication.</source>
</trans-unit>
<trans-unit id="sf0532ddee3b4e977">
  <source>SCIM Attribute mapping</source>
</trans-unit>
<trans-unit id="sd5d9adfcbd8abdfe">
  <source>Bot username</source>
</trans-unit>
<trans-unit id="saf5316edc3679fef">
  <source>Bot token</source>
</trans-unit>
<trans-unit id="s64b935d223a99731">
  <source>Request access to send messages from your bot</source>
</trans-unit>
<trans-unit id="s500a041b1fab7aac">
  <source>Telegram Attribute mapping</source>
</trans-unit>
<trans-unit id="se12969ade44cd2b6">
  <source>New source</source>
</trans-unit>
<trans-unit id="s19b09f4fc72175d1">
  <source>Create a new source.</source>
</trans-unit>
<trans-unit id="sb1a4e9b288e2f005">
  <source>Federation and Social login</source>
</trans-unit>
<trans-unit id="s6152026c364ad974">
  <source>Sources of identities, which can either be synced into authentik's database, or can be used by users to authenticate and enroll themselves.</source>
</trans-unit>
<trans-unit id="s0a0ca63b967f1630">
  <source>Source(s)</source>
</trans-unit>
<trans-unit id="s66722bc2ea775e05">
  <source>Disabled</source>
</trans-unit>
<trans-unit id="s4ff2c202b4e5bdc5">
  <source>Built-in</source>
</trans-unit>
<trans-unit id="scc1a17d28912e974">
  <source>Kerberos Source is in preview.</source>
</trans-unit>
<trans-unit id="s2c378e86e025fdb2">
  <source>Update Kerberos Source</source>
</trans-unit>
<trans-unit id="sf36170f71cea38c2">
  <source>Connectivity</source>
</trans-unit>
<trans-unit id="s4476e9c50cfd13f4">
  <source>Global status</source>
</trans-unit>
<trans-unit id="sd21a971eea208533">
  <source>Vendor</source>
</trans-unit>
<trans-unit id="s52b500138a2d2b8a">
  <source>Update LDAP Source</source>
</trans-unit>
<trans-unit id="sf3fec8353106ac2f">
  <source>OAuth Source <x id="0" equiv-text="${this.source.name}"/></source>
</trans-unit>
<trans-unit id="s5f5bf4ef2bd93c04">
  <source>Group mappings can only be checked if a user is already logged in when trying to access this source.</source>
</trans-unit>
<trans-unit id="s6c607d74bdfe9f36">
  <source>User mappings can only be checked if a user is already logged in when trying to access this source.</source>
</trans-unit>
<trans-unit id="se09d055771f3a11d">
  <source>Generic OpenID Connect</source>
</trans-unit>
<trans-unit id="s5c1dc164c89ac13e">
  <source>Unknown provider type</source>
</trans-unit>
<trans-unit id="s01088b6625d2443b">
  <source>Callback URL</source>
</trans-unit>
<trans-unit id="sb6d5146d5efb3058">
  <source>Access Key</source>
</trans-unit>
<trans-unit id="s065604a41e9d1584">
  <source>Update OAuth Source</source>
</trans-unit>
<trans-unit id="s7b576aa71acb36a6">
  <source>Diagram</source>
</trans-unit>
<trans-unit id="s587ba266269297ab">
  <source>Policy Bindings</source>
</trans-unit>
<trans-unit id="s2feae323f46479f8">
  <source>These bindings control which users can access this source.
            You can only use policies here as access is checked before the user is authenticated.</source>
</trans-unit>
<trans-unit id="se17fcb1f159ee382">
  <source>Update Plex Source</source>
</trans-unit>
<trans-unit id="saa10777250a6deca">
  <source>Update SAML Source</source>
</trans-unit>
<trans-unit id="s31f1afc0a81977c1">
  <source>Update SCIM Source</source>
</trans-unit>
<trans-unit id="s4bb356adc8a7f85b">
  <source>SCIM Base URL</source>
</trans-unit>
<trans-unit id="sad09c62cb4ebae68">
  <source>Click to copy token</source>
</trans-unit>
<trans-unit id="s463491b90193d86b">
  <source>Telegram bot</source>
</trans-unit>
<trans-unit id="s4014853299a8bb20">
  <source>Update Telegram Source</source>
</trans-unit>
<trans-unit id="s643d8f2e5e5e930d">
  <source>Successfully updated mapping.</source>
</trans-unit>
<trans-unit id="sffeef5b119d8625c">
  <source>Successfully created mapping.</source>
</trans-unit>
<trans-unit id="s269a190f0086d892">
  <source>Unconfigured</source>
</trans-unit>
<trans-unit id="s9e24bec94ec23dc9">
  <source>This option will not be changed by this mapping.</source>
</trans-unit>
<trans-unit id="s9857d883d8eb98fc">
  <source>General settings</source>
</trans-unit>
<trans-unit id="sf6e1665c7022a1f8">
  <source>Password</source>
</trans-unit>
<trans-unit id="sd2066881798a1b96">
  <source>RDP settings</source>
</trans-unit>
<trans-unit id="sb864dc36a463a155">
  <source>Ignore server certificate</source>
</trans-unit>
<trans-unit id="s20366a8d1eaaca54">
  <source>Enable wallpaper</source>
</trans-unit>
<trans-unit id="s1e44c5350ef7598c">
  <source>Enable font-smoothing</source>
</trans-unit>
<trans-unit id="s04ff5d6ae711e6d6">
  <source>Enable full window dragging</source>
</trans-unit>
<trans-unit id="sd39c5e998efecf93">
  <source>SAML Attribute Name</source>
</trans-unit>
<trans-unit id="scf2790cf3ad89283">
  <source>Attribute name used for SAML Assertions. Can be a URN OID, a schema reference, or a any other string. If this property mapping is used for NameID Property, this field is discarded.</source>
</trans-unit>
<trans-unit id="sab6d24c5ec8dc361">
  <source>Friendly Name</source>
</trans-unit>
<trans-unit id="s9f8aac89fe318acc">
  <source>Optionally set the 'FriendlyName' value of the Assertion attribute.</source>
</trans-unit>
<trans-unit id="s851c108679653d2a">
  <source>Scope name</source>
</trans-unit>
<trans-unit id="s23fd4411419fca06">
  <source>Scope which the client can specify to access these properties.</source>
</trans-unit>
<trans-unit id="s7754f0e34f27fb6e">
  <source>Description shown to the user when consenting. If left empty, the user won't be informed.</source>
</trans-unit>
<trans-unit id="sb6c3bf5489d7556e">
  <source>Example context data</source>
</trans-unit>
<trans-unit id="s4a697f0b36c4fe83">
  <source>Active Directory User</source>
</trans-unit>
<trans-unit id="s9277b90db38e1983">
  <source>Active Directory Group</source>
</trans-unit>
<trans-unit id="sc2e03590269d5a10">
  <source>New property mapping</source>
</trans-unit>
<trans-unit id="s713e8666ed70f8b3">
  <source>Create a new property mapping.</source>
</trans-unit>
<trans-unit id="sce106606ae84d46f">
  <source>Property Mappings</source>
</trans-unit>
<trans-unit id="s271a7e04ff9865b1">
  <source>Control how authentik exposes and interprets information.</source>
</trans-unit>
<trans-unit id="s59dc0eda07f9e2b6">
  <source>Property Mapping(s)</source>
</trans-unit>
<trans-unit id="sa57c393736e2732c">
  <source>Test Property Mapping</source>
</trans-unit>
<trans-unit id="sc39fb3ff3753d5ab">
  <source>Hide managed mappings</source>
</trans-unit>
<trans-unit id="s7468e87263dfff7e">
  <source>Identifier</source>
</trans-unit>
<trans-unit id="s5fc4269c2addee61">
  <source>Unique identifier the token is referenced by.</source>
</trans-unit>
<trans-unit id="sb8bc2b8376c96a6b">
  <source>Intent</source>
</trans-unit>
<trans-unit id="sbd34d118bcb1aaf2">
  <source>API Token</source>
</trans-unit>
<trans-unit id="se31d92bea7f3a186">
  <source>Used to access the API programmatically</source>
</trans-unit>
<trans-unit id="sfd586951c75eb291">
  <source>App password.</source>
</trans-unit>
<trans-unit id="s59bf194136d0d13a">
  <source>Used to login using a flow executor</source>
</trans-unit>
<trans-unit id="s78fd8c03f8c967f3">
  <source>Tokens</source>
</trans-unit>
<trans-unit id="sdcc7b2c109ce9775">
  <source>Tokens are used throughout authentik for Email validation stages, Recovery keys and API access.</source>
</trans-unit>
<trans-unit id="s71dcd9cf808449aa">
  <source>Token(s)</source>
</trans-unit>
<trans-unit id="sb15e8daacf26bdfc">
  <source>Create Token</source>
</trans-unit>
<trans-unit id="s8d7ecd944ebe834b">
  <source>Token is managed by authentik.</source>
</trans-unit>
<trans-unit id="sd1288ca57e221cf9">
  <source>Update Token</source>
</trans-unit>
<trans-unit id="se9c07cf256774d81">
  <source>Editing is disabled for managed tokens</source>
</trans-unit>
<trans-unit id="sab21e1f62676b56c">
  <source>Successfully updated brand.</source>
</trans-unit>
<trans-unit id="sa43e43fd3a23e22d">
  <source>Successfully created brand.</source>
</trans-unit>
<trans-unit id="s41706a202b6c40f1">
  <source>Domain</source>
</trans-unit>
<trans-unit id="se74ce42d41e392ba">
  <source>Matching is done based on domain suffix, so if you enter domain.tld, foo.domain.tld will still match.</source>
</trans-unit>
<trans-unit id="s41b3f9b4c98aabd9">
  <source>Use this brand for each domain that doesn't have a dedicated brand.</source>
</trans-unit>
<trans-unit id="sc19838ca8c135c1b">
  <source>Branding settings</source>
</trans-unit>
<trans-unit id="s99f110d27e30b289">
  <source>Title</source>
</trans-unit>
<trans-unit id="sab6bad52985c6676">
  <source>Branding shown in page title and several other places.</source>
</trans-unit>
<trans-unit id="s4f1af2b48a5e249a">
  <source>Logo</source>
</trans-unit>
<trans-unit id="s98d6b06b0fb7da64">
  <source>Logo shown in sidebar/header and flow executor.</source>
</trans-unit>
<trans-unit id="s3626433940124897">
  <source>Favicon</source>
</trans-unit>
<trans-unit id="se99efc0873031976">
  <source>Icon shown in the browser tab.</source>
</trans-unit>
<trans-unit id="s8e56764914a939d2">
  <source>Default flow background</source>
</trans-unit>
<trans-unit id="sea64900dbcf879c8">
  <source>Default background used during flow execution. Can be overridden per flow.</source>
</trans-unit>
<trans-unit id="sf16aa54bf77362e1">
  <source>Custom CSS</source>
</trans-unit>
<trans-unit id="s6171ded034da4e96">
  <source>Custom CSS to apply to pages when this brand is active.</source>
</trans-unit>
<trans-unit id="sd61a4f736ac0a98e">
  <source>External user settings</source>
</trans-unit>
<trans-unit id="sdc4f72f6a46ae2c8">
  <source>Default application</source>
</trans-unit>
<trans-unit id="s2643b2f95c0c38a0">
  <source>Select an application...</source>
</trans-unit>
<trans-unit id="sac85801a25b7bb27">
  <source>When configured, external users will automatically be redirected to this application when not attempting to access a different application</source>
</trans-unit>
<trans-unit id="s10356fd921037fbf">
  <source>Default flows</source>
</trans-unit>
<trans-unit id="sd216b08bafb297ee">
  <source>Flow used to authenticate users. If left empty, the first applicable flow sorted by the slug is used.</source>
</trans-unit>
<trans-unit id="s7989db5f4819af89">
  <source>Flow used to logout. If left empty, the first applicable flow sorted by the slug is used.</source>
</trans-unit>
<trans-unit id="sfeb779d4ccbc5a0e">
  <source>Recovery flow</source>
</trans-unit>
<trans-unit id="s5d4669050d36a5ab">
  <source>Select a recovery flow...</source>
</trans-unit>
<trans-unit id="s836aa192b30c21da">
  <source>Unenrollment flow</source>
</trans-unit>
<trans-unit id="s796ab9d9a9131241">
  <source>Select an unenrollment flow...</source>
</trans-unit>
<trans-unit id="s081d3c4b47a6ff83">
  <source>If set, users are able to unenroll themselves using this flow. If no flow is set, option is not shown.</source>
</trans-unit>
<trans-unit id="secbfd13bdae95a59">
  <source>User settings flow</source>
</trans-unit>
<trans-unit id="s1fe26d2eb791caec">
  <source>Select a user settings flow...</source>
</trans-unit>
<trans-unit id="s523160b433311521">
  <source>If set, users are able to configure details of their profile.</source>
</trans-unit>
<trans-unit id="s134177568525dbc8">
  <source>Device code flow</source>
</trans-unit>
<trans-unit id="s70d02f31fd256eff">
  <source>Select a device code flow...</source>
</trans-unit>
<trans-unit id="s7b298427bdea81ae">
  <source>If set, the OAuth Device Code profile can be used, and the selected flow will be used to enter the code.</source>
</trans-unit>
<trans-unit id="s7f4e4054fbe132e1">
  <source>Other global settings</source>
</trans-unit>
<trans-unit id="sbadde673052efc02">
  <source>Web Certificate</source>
</trans-unit>
<trans-unit id="s2c42bb3c6f5420d2">
  <source>Client Certificates</source>
</trans-unit>
<trans-unit id="s95901716c0629274">
  <source>Available Certificates</source>
</trans-unit>
<trans-unit id="sdbf6b484fa1436b0">
  <source>Selected Certificates</source>
</trans-unit>
<trans-unit id="s17260b71484b307f">
  <source>Set custom attributes using YAML or JSON. Any attributes set here will be inherited by users, if the request is handled by this brand.</source>
</trans-unit>
<trans-unit id="s4270ebcf645b9df5">
  <source>Search by domain or brand name...</source>
</trans-unit>
<trans-unit id="s79fc990a2b58f27f">
  <source>Brands</source>
</trans-unit>
<trans-unit id="s164be9a7537b99f6">
  <source>Configure visual settings and defaults for different domains.</source>
</trans-unit>
<trans-unit id="se16b4d412ad1aba9">
  <source>Brand name</source>
</trans-unit>
<trans-unit id="s4802636d55022ed3">
  <source>Default?</source>
</trans-unit>
<trans-unit id="s02774bc46a167346">
  <source>Brand(s)</source>
</trans-unit>
<trans-unit id="s801bf3d03f4a3ff1">
  <source>Update Brand</source>
</trans-unit>
<trans-unit id="s5c3efec5330e0000">
  <source>Create Brand</source>
</trans-unit>
<trans-unit id="sb4661b2d2c2b3564">
  <source>New Brand</source>
</trans-unit>
<trans-unit id="s8cb7bb82e96d5d77">
  <source>Policies</source>
</trans-unit>
<trans-unit id="sec1808532fe107b9">
  <source>Allow users to use Applications based on properties, enforce Password Criteria and selectively apply Stages.</source>
</trans-unit>
<trans-unit id="se16ac750b81fa93d">
  <source>Assigned to <x id="0" equiv-text="${item.boundTo}"/> object(s).</source>
</trans-unit>
<trans-unit id="s5a48d5171e1a1522">
  <source>Warning: Policy is not assigned.</source>
</trans-unit>
<trans-unit id="s544142ce35050751">
  <source>Test Policy</source>
</trans-unit>
<trans-unit id="s00c8354318addfa0">
  <source>Policy / Policies</source>
</trans-unit>
<trans-unit id="s76da2c978dcc5ef4">
  <source>Successfully cleared policy cache</source>
</trans-unit>
<trans-unit id="sa717841a602fe7d8">
  <source>Failed to delete policy cache</source>
</trans-unit>
<trans-unit id="s1b07757762cda372">
  <source>Clear Policy cache</source>
</trans-unit>
<trans-unit id="s15b46b78edebb20a">
  <source>Are you sure you want to clear the policy cache? This will cause all policies to be re-evaluated on their next usage.</source>
</trans-unit>
<trans-unit id="s62ddcbaaa91d120d">
  <source>Reputation scores</source>
</trans-unit>
<trans-unit id="sd080b2370aa82967">
  <source>Reputation for IP and user identifiers. Scores are decreased for each failed login and increased for each successful login.</source>
</trans-unit>
<trans-unit id="s09242207b5b8f83c">
  <source>IP</source>
</trans-unit>
<trans-unit id="s7d684b6257284e55">
  <source>Score</source>
</trans-unit>
<trans-unit id="s10d2dbc4613397f0">
  <source>Updated</source>
</trans-unit>
<trans-unit id="sa33d061d2ade20aa">
  <source>Reputation</source>
</trans-unit>
<trans-unit id="sf0d94539428a0900">
  <source>Search for a group by name…</source>
</trans-unit>
<trans-unit id="s77ec9e27e9ae81b8">
  <source>Group Search</source>
</trans-unit>
<trans-unit id="s9f26843287bb592d">
  <source>Groups</source>
</trans-unit>
<trans-unit id="s4dcb9288f7e9e4d7">
  <source>Group users together and give them permissions based on the membership.</source>
</trans-unit>
<trans-unit id="s62f93cfcb45d5a06">
  <source>Superuser privileges?</source>
</trans-unit>
<trans-unit id="s9fdda7ea4642306c">
  <source>Group(s)</source>
</trans-unit>
<trans-unit id="s79683026e49e4866">
  <source>View details of group "<x id="0" equiv-text="${item.name}"/>"</source>
</trans-unit>
<trans-unit id="s416a540b16275f2e">
  <source>Create Group</source>
</trans-unit>
<trans-unit id="s62dfa9c45cb3025a">
  <source>New Group</source>
</trans-unit>
<trans-unit id="s7c5774fad9d050ce">
  <source>Create group</source>
</trans-unit>
<trans-unit id="s66752390605b7d37">
  <source>Create and assign a group with the same name as the user.</source>
</trans-unit>
<trans-unit id="s0137933e117f2092">
  <source>Whether the token will expire. Upon expiration, the token will be rotated.</source>
</trans-unit>
<trans-unit id="s6b6e6eb037aef7da">
  <source>Use the username and password below to authenticate. The password can be retrieved later on the Tokens page.</source>
</trans-unit>
<trans-unit id="sbb57cd8a3ed12915">
  <source>Valid for 360 days, after which the password will automatically rotate. You can copy the password from the Token List.</source>
</trans-unit>
<trans-unit id="s648ba5092c27baa3">
  <source>Are you sure you want to delete <x id="0" equiv-text="${this.objectLabel}${objName}"/>?</source>
</trans-unit>
<trans-unit id="s4414164d120de61a">
  <source>The following objects use <x id="0" equiv-text="${objName}"/></source>
</trans-unit>
<trans-unit id="s92e241c9f3c101a2">
  <source>connecting object will be deleted</source>
</trans-unit>
<trans-unit id="se6a13beff646557b">
  <source>Successfully updated <x id="0" equiv-text="${this.objectLabel} ${this.getObjectDisplayName()}"/></source>
</trans-unit>
<trans-unit id="s14401ff4a0cba208">
  <source>Failed to update <x id="0" equiv-text="${this.objectLabel}"/>: <x id="1" equiv-text="${pluckErrorDetail(parsedError)}"/></source>
</trans-unit>
<trans-unit id="sa8e65d6274f9e2b9">
  <source>Are you sure you want to update <x id="0" equiv-text="${this.objectLabel}${objName}"/>?</source>
</trans-unit>
<trans-unit id="s1fd02f07e4fa3312">
  <source>Impersonating user...</source>
</trans-unit>
<trans-unit id="s12928f97c99f88db">
  <source>This may take a few seconds.</source>
</trans-unit>
<trans-unit id="saa29a2ac03cd9d19">
  <source>Reason</source>
</trans-unit>
<trans-unit id="se9fd92a824994eba">
  <source>Reason for impersonating the user</source>
</trans-unit>
<trans-unit id="sbc4f2320a13d4dfd">
  <source>A brief explanation of why you are impersonating the user. This will be included in audit logs.</source>
</trans-unit>
<trans-unit id="s8563c5a14e9a42f2">
  <source>New Password</source>
</trans-unit>
<trans-unit id="sc92d7cfb6ee1fec6">
  <source>Successfully updated password.</source>
</trans-unit>
<trans-unit id="s44ea4e9a81ce730d">
  <source>Email stage</source>
</trans-unit>
<trans-unit id="sdb53ccdd6174e6e3">
  <source>Successfully added user(s).</source>
</trans-unit>
<trans-unit id="s586d6bd2eca2da93">
  <source>Users</source>
</trans-unit>
<trans-unit id="s3d0a5ad9bdb617e2">
  <source>Open user selection dialog</source>
</trans-unit>
<trans-unit id="s424f57afae0caac4">
  <source>Add users</source>
</trans-unit>
<trans-unit id="s7d499be3b781a3ca">
  <source>User(s)</source>
</trans-unit>
<trans-unit id="s10154dbd4fbc697b">
  <source>removed</source>
</trans-unit>
<trans-unit id="sf466142da6a65052">
  <source>Impersonate</source>
</trans-unit>
<trans-unit id="s43fe853bf219a9b8">
  <source>Temporarily assume the identity of this user</source>
</trans-unit>
<trans-unit id="s58888ef1ee9b5bb8">
  <source>User status</source>
</trans-unit>
<trans-unit id="s4409ada9c5c2a7f8">
  <source>Inactive</source>
</trans-unit>
<trans-unit id="s7ec7036b249f4f22">
  <source>Regular user</source>
</trans-unit>
<trans-unit id="sf9e61f4f8e90f0f1">
  <source>Change status</source>
</trans-unit>
<trans-unit id="sf56998949bdf6b33">
  <source>Deactivate</source>
</trans-unit>
<trans-unit id="s27976e94b05c6970">
  <source>Activate</source>
</trans-unit>
<trans-unit id="s3794c596ee7964ad">
  <source>Update password</source>
</trans-unit>
<trans-unit id="s547b687213f48489">
  <source>Update <x id="0" equiv-text="${user.name || user.username}"/>'s password</source>
</trans-unit>
<trans-unit id="sce8d867ca5f35304">
  <source>Set password</source>
</trans-unit>
<trans-unit id="s7fa236d26b798301">
  <source>Send link</source>
</trans-unit>
<trans-unit id="sa9dbe2fb284e26fe">
  <source>Send recovery link to user</source>
</trans-unit>
<trans-unit id="s03fd2c252ad7972a">
  <source>Email recovery link</source>
</trans-unit>
<trans-unit id="sac6c67e92bd30229">
  <source>Assign Additional Users</source>
</trans-unit>
<trans-unit id="s4c41f3f4c23e8eaa">
  <source>Warning: This group is configured with superuser access. Added users will have superuser access.</source>
</trans-unit>
<trans-unit id="scee721983b1c28d0">
  <source>Add existing user</source>
</trans-unit>
<trans-unit id="sf6aec5a09661fe61">
  <source>Add new user</source>
</trans-unit>
<trans-unit id="s53ad3455d9523b54">
  <source>Create User</source>
</trans-unit>
<trans-unit id="s462975174949cfc0">
  <source>New User</source>
</trans-unit>
<trans-unit id="s824e0943a7104668">
  <source>This user will be added to the group "<x id="0" equiv-text="${this.targetGroup.name}"/>".</source>
</trans-unit>
<trans-unit id="s0051b0d8e6decea6">
  <source>New user...</source>
</trans-unit>
<trans-unit id="s7d620371caea15e1">
  <source>Create Service Account</source>
</trans-unit>
<trans-unit id="sc47c8364ef524c1d">
  <source>New Service Account</source>
</trans-unit>
<trans-unit id="s384699f614f39071">
  <source>New service account...</source>
</trans-unit>
<trans-unit id="sc744f3691efe310d">
  <source>Hide service-accounts</source>
</trans-unit>
<trans-unit id="secdb4b4c4e66aa38">
  <source>Group Info</source>
</trans-unit>
<trans-unit id="s005053d82b712e0a">
  <source>Notes</source>
</trans-unit>
<trans-unit id="s634448e4942cf452">
  <source>Edit the notes attribute of this group to add notes here.</source>
</trans-unit>
<trans-unit id="sb26035b596566abf">
  <source>Unnamed</source>
</trans-unit>
<trans-unit id="s326ee20bba2564a0">
  <source>Collapse "<x id="0" equiv-text="${itemLabel}"/>"</source>
</trans-unit>
<trans-unit id="s27df1f36ba8e269f">
  <source>Expand "<x id="0" equiv-text="${itemLabel}"/>"</source>
</trans-unit>
<trans-unit id="sf2b5d3236e6f1ab3">
  <source>Select "<x id="0" equiv-text="${itemLabel}"/>"</source>
</trans-unit>
<trans-unit id="sb7c2715df863a6ce">
  <source>Items of "<x id="0" equiv-text="${itemLabel}"/>"</source>
</trans-unit>
<trans-unit id="sca7cfe2bef51b2a5">
  <source>Root</source>
</trans-unit>
<trans-unit id="s3ef09dfdd0568b6e">
  <source>Search by username, email, etc...</source>
</trans-unit>
<trans-unit id="sd65f96914ccbeb76">
  <source>User Search</source>
</trans-unit>
<trans-unit id="s3616cc78631f5893">
  <source>Warning: You're about to delete the user you're logged in as (<x id="0" equiv-text="${shouldShowWarning.username}"/>). Proceed at your own risk.</source>
</trans-unit>
<trans-unit id="s7c6c86d9a97ed706">
  <source>Show deactivated users</source>
</trans-unit>
<trans-unit id="s1367dcd6e8749fcd">
  <source>No name set</source>
</trans-unit>
<trans-unit id="s895514dda9cb9c94">
  <source>Create recovery link</source>
</trans-unit>
<trans-unit id="s94055b4eb957dc8f">
  <source>User folders</source>
</trans-unit>
<trans-unit id="s441f155311f1748a">
  <source>User paths</source>
</trans-unit>
<trans-unit id="sa982875b258fea07">
  <source>Successfully added user to group(s).</source>
</trans-unit>
<trans-unit id="s1bd5920d8adf2bd5">
  <source>Groups to add</source>
</trans-unit>
<trans-unit id="sd9f67fbf3f86efcf">
  <source>Add group</source>
</trans-unit>
<trans-unit id="s5f71fa3c53828e30">
  <source>Remove from Group(s)</source>
</trans-unit>
<trans-unit id="sb4c9ed2a487b238f">
  <source>Are you sure you want to remove user <x id="0" equiv-text="${this.targetUser?.username}"/> from the following groups?</source>
</trans-unit>
<trans-unit id="s964f6725aeb7662f">
  <source>Add Group</source>
</trans-unit>
<trans-unit id="s65ca2f256ea09c11">
  <source>Add to existing group</source>
</trans-unit>
<trans-unit id="s505fbbdcbc6aa921">
  <source>Add new group</source>
</trans-unit>
<trans-unit id="s506beb486fa41241">
  <source>Application authorizations</source>
</trans-unit>
<trans-unit id="s7301a7069b7bc83e">
  <source>Revoked?</source>
</trans-unit>
<trans-unit id="sd924045605feea63">
  <source>Expires</source>
</trans-unit>
<trans-unit id="s1c8916418c334935">
  <source>ID Token</source>
</trans-unit>
<trans-unit id="s4a799b4562ab2051">
  <source>Access Tokens(s)</source>
</trans-unit>
<trans-unit id="s90760e5e02e95dfe">
  <source>Refresh Tokens(s)</source>
</trans-unit>
<trans-unit id="s1b88fa3df4423292">
  <source>Last IP</source>
</trans-unit>
<trans-unit id="s6d3f81dc4bcacbda">
  <source>Last used</source>
</trans-unit>
<trans-unit id="se63f9d833700af49">
  <source>Session(s)</source>
</trans-unit>
<trans-unit id="sf679b7a62808287e">
  <source>Expiry</source>
</trans-unit>
<trans-unit id="sde1907073fd96017">
  <source>(Current session)</source>
</trans-unit>
<trans-unit id="s76881c01b6a3a8c7">
  <source>Consent(s)</source>
</trans-unit>
<trans-unit id="s23446284b56ca0cc">
  <source>Reputation score(s)</source>
</trans-unit>
<trans-unit id="sd2208cd1a767644b">
  <source>Disconnect</source>
</trans-unit>
<trans-unit id="s30205d424e710818">
  <source>Successfully disconnected source</source>
</trans-unit>
<trans-unit id="s67dedada007d4067">
  <source>Failed to disconnected source: <x id="0" equiv-text="${pluckErrorDetail(parsedError)}"/></source>
</trans-unit>
<trans-unit id="s7a4f059aaa029719">
  <source>Connect</source>
</trans-unit>
<trans-unit id="sababff57115130a0">
  <source>Error: unsupported source settings: <x id="0" equiv-text="${source.component}"/></source>
</trans-unit>
<trans-unit id="source-settings-list-item-label">
  <source>"<x id="0" equiv-text="${source.title}"/>" source</source>
</trans-unit>
<trans-unit id="s7968dbed9b106c29">
  <source>No services available.</source>
</trans-unit>
<trans-unit id="s20b2b040b332bb55">
  <source>Source Settings</source>
</trans-unit>
<trans-unit id="sf05c700a1250824e">
  <source>Confirmed</source>
</trans-unit>
<trans-unit id="s4ae42fa672dd72bc">
  <source>Created at</source>
</trans-unit>
<trans-unit id="see1f8a5c8e11c5ab">
  <source>Last updated at</source>
</trans-unit>
<trans-unit id="s82dd7087cd1471ab">
  <source>Last used at</source>
</trans-unit>
<trans-unit id="sbfee780fa0a2c83e">
  <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be deleted</source>
</trans-unit>
<trans-unit id="sa0b01f479f40c52d">
  <source>Device(s)</source>
</trans-unit>
<trans-unit id="sd1f44f1a8bc20e67">
  <source>Email</source>
</trans-unit>
<trans-unit id="sfb95ad8c25db95ba">
  <source>Last password change</source>
</trans-unit>
<trans-unit id="s64a33dcdaf90af26">
  <source>User Info</source>
</trans-unit>
<trans-unit id="s028d385389b5aac0">
  <source>Lock the user out of this system</source>
</trans-unit>
<trans-unit id="sd2122c514f0778b5">
  <source>Allow the user to log in and use this system</source>
</trans-unit>
<trans-unit id="s5c18cae48b93138c">
  <source>Sessions</source>
</trans-unit>
<trans-unit id="s4d31797d81e9cea3">
  <source>Explicit Consent</source>
</trans-unit>
<trans-unit id="s96b2703420bfbd0c">
  <source>OAuth Access Tokens</source>
</trans-unit>
<trans-unit id="sb6770fa90be6d8b3">
  <source>OAuth Refresh Tokens</source>
</trans-unit>
<trans-unit id="s28b3de1561da72b3">
  <source>MFA Authenticators</source>
</trans-unit>
<trans-unit id="sc54aafeea9c9bab0">
  <source>Connected services</source>
</trans-unit>
<trans-unit id="sac428446e9e41f54">
  <source>RAC Connections</source>
</trans-unit>
<trans-unit id="sc44bae5cde0083fa">
  <source>Actions over the last week (per 8 hours)</source>
</trans-unit>
<trans-unit id="sb57dbcda1929c642">
  <source>Edit the notes attribute of this user to add notes here.</source>
</trans-unit>
<trans-unit id="s27586544c447d9e3">
  <source>User events</source>
</trans-unit>
<trans-unit id="sd99e668c54f78f6e">
  <source>Credentials / Tokens</source>
</trans-unit>
<trans-unit id="s9103a949a3963aa9">
  <source>Successfully updated role.</source>
</trans-unit>
<trans-unit id="sdf87c5661b31359e">
  <source>Successfully created role.</source>
</trans-unit>
<trans-unit id="s3484b1e6d0b5335f">
  <source>Manage roles which grant permissions to objects within authentik.</source>
</trans-unit>
<trans-unit id="s259de999919316db">
  <source>Role(s)</source>
</trans-unit>
<trans-unit id="s2ffad156e8332f04">
  <source>Update Role</source>
</trans-unit>
<trans-unit id="sc5f923729564fbf3">
  <source>Create Role</source>
</trans-unit>
<trans-unit id="s6ea6a64acb45dfdf">
  <source>Successfully updated initial permissions.</source>
</trans-unit>
<trans-unit id="sfddf7896ab5938b6">
  <source>Successfully created initial permissions.</source>
</trans-unit>
<trans-unit id="s5c5f240cbb6d0bae">
  <source>When a user with the selected Role creates an object, the Initial Permissions will be applied to that object.</source>
</trans-unit>
<trans-unit id="s93f04537efda1b24">
  <source>Available Permissions</source>
</trans-unit>
<trans-unit id="s297bc57f9e494470">
  <source>Selected Permissions</source>
</trans-unit>
<trans-unit id="s0ea71d53764d781c">
  <source>Permissions to grant when a new object is created.</source>
</trans-unit>
<trans-unit id="s891cd64acabf23bf">
  <source>Initial Permissions</source>
</trans-unit>
<trans-unit id="s06fc21a40f5d7de1">
  <source>Set initial permissions for newly created objects.</source>
</trans-unit>
<trans-unit id="sc7104a4d0fc35c7c">
  <source>Update Initial Permissions</source>
</trans-unit>
<trans-unit id="s83fa005829a65be9">
  <source>Create Initial Permissions</source>
</trans-unit>
<trans-unit id="s526e2c66bd51ff5f">
  <source>Role Info</source>
</trans-unit>
<trans-unit id="s7e796fe83982863f">
  <source>Role <x id="0" equiv-text="${this.targetRole.name}"/></source>
</trans-unit>
<trans-unit id="s7a322c89298dd27c">
  <source>Successfully updated invitation.</source>
</trans-unit>
<trans-unit id="sc554339ffc7b04e7">
  <source>Successfully created invitation.</source>
</trans-unit>
<trans-unit id="s0433d667ea6eec1a">
  <source>The name of an invitation must be a slug: only lower case letters, numbers, and the hyphen are permitted here.</source>
</trans-unit>
<trans-unit id="sfcebd18506f1e535">
  <source>Flow</source>
</trans-unit>
<trans-unit id="sa84a7fd11ba85e88">
  <source>When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages.</source>
</trans-unit>
<trans-unit id="sd18b18f91b804c3f">
  <source>Custom attributes</source>
</trans-unit>
<trans-unit id="s7520286c8419a266">
  <source>Optional data which is loaded into the flow's 'prompt_data' context variable. YAML or JSON.</source>
</trans-unit>
<trans-unit id="sb8795b799c70776a">
  <source>Single use</source>
</trans-unit>
<trans-unit id="sf232d42142eacc23">
  <source>When enabled, the invitation will be deleted after usage.</source>
</trans-unit>
<trans-unit id="sa4a8086275475714">
  <source>Select an enrollment flow</source>
</trans-unit>
<trans-unit id="s839cb09cb2193da9">
  <source>Link to use the invitation.</source>
</trans-unit>
<trans-unit id="s8226f48cb1a80997">
  <source>Invitations</source>
</trans-unit>
<trans-unit id="s57448f10eb973100">
  <source>Create Invitation Links to enroll Users, and optionally force specific attributes of their account.</source>
</trans-unit>
<trans-unit id="s4aee34a672e5cfc0">
  <source>Created by</source>
</trans-unit>
<trans-unit id="sd5ba2d61ee4796fe">
  <source>Invitation(s)</source>
</trans-unit>
<trans-unit id="s96dcf7ec8342c335">
  <source>Invitation not limited to any flow, and can be used with any enrollment flow.</source>
</trans-unit>
<trans-unit id="s1b42b49e7b392013">
  <source>Update Invitation</source>
</trans-unit>
<trans-unit id="s38c72e1cf120b8d8">
  <source>Create Invitation</source>
</trans-unit>
<trans-unit id="s802826db4e2c852e">
  <source>Warning: No invitation stage is bound to any flow. Invitations will not work as expected.</source>
</trans-unit>
<trans-unit id="s8939f574b096054a">
  <source>Not you?</source>
</trans-unit>
<trans-unit id="s296fbffaaa7c910a">
  <source>Required.</source>
</trans-unit>
<trans-unit id="s81ecf2d4386b8e84">
  <source>Continue</source>
</trans-unit>
<trans-unit id="s8b2b2a43fcf688a3">
  <source>Successfully updated prompt.</source>
</trans-unit>
<trans-unit id="s5572ac4d2208f5ec">
  <source>Successfully created prompt.</source>
</trans-unit>
<trans-unit id="s54e7a23a95d99649">
  <source>Text: Simple Text input</source>
</trans-unit>
<trans-unit id="s63e54b86e2a2cc43">
  <source>Text Area: Multiline text input</source>
</trans-unit>
<trans-unit id="s12de1c06a1e18cc5">
  <source>Text (read-only): Simple Text input, but cannot be edited.</source>
</trans-unit>
<trans-unit id="s4e5646b23e41231f">
  <source>Text Area (read-only): Multiline text input, but cannot be edited.</source>
</trans-unit>
<trans-unit id="s1e4c3de6e12cd87b">
  <source>Username: Same as Text input, but checks for and prevents duplicate usernames.</source>
</trans-unit>
<trans-unit id="s5462c7f56ed65e6c">
  <source>Email: Text field with Email type.</source>
</trans-unit>
<trans-unit id="s1c5574968b29ab1c">
  <source>Password: Masked input, multiple inputs of this type on the same prompt need to be identical.</source>
</trans-unit>
<trans-unit id="sbbb97b1c63507dc0">
  <source>Number</source>
</trans-unit>
<trans-unit id="sdae649fae731e838">
  <source>Checkbox</source>
</trans-unit>
<trans-unit id="s34edeb18f887161d">
  <source>Radio Button Group (fixed choice)</source>
</trans-unit>
<trans-unit id="s57730b6870e8916c">
  <source>Dropdown (fixed choice)</source>
</trans-unit>
<trans-unit id="sac8252732f2edb19">
  <source>Date</source>
</trans-unit>
<trans-unit id="s45960273852a61b2">
  <source>Date Time</source>
</trans-unit>
<trans-unit id="sd1f81284eeb7b503">
  <source>File</source>
</trans-unit>
<trans-unit id="s21e3c227cc2c5873">
  <source>Separator: Static Separator Line</source>
</trans-unit>
<trans-unit id="s706af57c1af42c6d">
  <source>Hidden: Hidden field, can be used to insert data into form.</source>
</trans-unit>
<trans-unit id="s40e2c72dae905a50">
  <source>Static: Static value, displayed as-is.</source>
</trans-unit>
<trans-unit id="sdd4bd4224c4e943d">
  <source>authentik: Locale: Displays a list of locales authentik supports.</source>
</trans-unit>
<trans-unit id="saf84e7732a9e1336">
  <source>Preview errors</source>
</trans-unit>
<trans-unit id="sb71ace8e9b35c749">
  <source>Data preview</source>
</trans-unit>
<trans-unit id="s4d53f4b7ff33bedd">
  <source>Unique name of this field, used for selecting fields in prompt stages.</source>
</trans-unit>
<trans-unit id="s3b58f8d2155ae90c">
  <source>Field Key</source>
</trans-unit>
<trans-unit id="s2b088ba65eb69b7e">
  <source>Name of the form field, also used to store the value.</source>
</trans-unit>
<trans-unit id="s662fcb3761ad9df7">
  <source>When used in conjunction with a User Write stage, use attributes.foo to write attributes.</source>
</trans-unit>
<trans-unit id="s5590dbf7e425789d">
  <source>Label</source>
</trans-unit>
<trans-unit id="s0c135eba6017d94f">
  <source>Label shown next to/above the prompt.</source>
</trans-unit>
<trans-unit id="s37dbfe2133b74d2d">
  <source>Interpret placeholder as expression</source>
</trans-unit>
<trans-unit id="s4a953e6234cb4808">
  <source>When checked, the placeholder will be evaluated in the same way a property mapping is.
            If the evaluation fails, the placeholder itself is returned.</source>
</trans-unit>
<trans-unit id="sf90be97cb08f3d5a">
  <source>Placeholder</source>
</trans-unit>
<trans-unit id="sf76ead4c4708dd06">
  <source>Optionally provide a short hint that describes the expected input value.
            When creating a fixed choice field, enable interpreting as expression and return a
        list to return multiple choices.</source>
</trans-unit>
<trans-unit id="saa7ba2057bd524a1">
  <source>Interpret initial value as expression</source>
</trans-unit>
<trans-unit id="sd60415c7666859f0">
  <source>When checked, the initial value will be evaluated in the same way a property mapping is.
            If the evaluation fails, the initial value itself is returned.</source>
</trans-unit>
<trans-unit id="sa9c7044d9fd1f3e6">
  <source>Initial value</source>
</trans-unit>
<trans-unit id="seab35681cbf36755">
  <source>Optionally pre-fill the input with an initial value.
            When creating a fixed choice field, enable interpreting as expression and
        return a list to return multiple default choices.</source>
</trans-unit>
<trans-unit id="s72c1c17a9bdc76ad">
  <source>Help text</source>
</trans-unit>
<trans-unit id="s584d1c38ad20d560">
  <source>Any HTML can be used.</source>
</trans-unit>
<trans-unit id="s2be6121210e2a2f8">
  <source>Prompts</source>
</trans-unit>
<trans-unit id="s42fc6f4b64eff5d9">
  <source>Single Prompts that can be used for Prompt Stages.</source>
</trans-unit>
<trans-unit id="s42a1ebe17efda727">
  <source>Field</source>
</trans-unit>
<trans-unit id="s41b105819b67ee7a">
  <source>Stages</source>
</trans-unit>
<trans-unit id="sec7443a45fd141e5">
  <source>Prompt(s)</source>
</trans-unit>
<trans-unit id="scc733ba98740038a">
  <source>Update Prompt</source>
</trans-unit>
<trans-unit id="s61b6f3e6bc59c6dd">
  <source>Create Prompt</source>
</trans-unit>
<trans-unit id="s916b32ac64ea2b05">
  <source>Successfully updated stage.</source>
</trans-unit>
<trans-unit id="s14c8f36e180d6bbc">
  <source>Successfully created stage.</source>
</trans-unit>
<trans-unit id="sf22a28f83cc45fcc">
  <source>Stage used to configure a duo-based authenticator. This stage should be used for configuration flows.</source>
</trans-unit>
<trans-unit id="s5adafce329aaa853">
  <source>Authenticator type name</source>
</trans-unit>
<trans-unit id="s23e6a57201fba25e">
  <source>Display name of this authenticator, used by users when they enroll an authenticator.</source>
</trans-unit>
<trans-unit id="s276d751eb7a186cc">
  <source>API Hostname</source>
</trans-unit>
<trans-unit id="s5b6b6e2cb884d59f">
  <source>Duo Auth API</source>
</trans-unit>
<trans-unit id="s240ff02ce3a53dee">
  <source>Integration key</source>
</trans-unit>
<trans-unit id="s56fd9ed596c724fa">
  <source>Secret key</source>
</trans-unit>
<trans-unit id="s88870d7e499e848b">
  <source>Duo Admin API (optional)</source>
</trans-unit>
<trans-unit id="sd2b106933823b754">
  <source>When using a Duo MFA, Access or Beyond plan, an Admin API application can be created. This will allow authentik to import devices automatically.</source>
</trans-unit>
<trans-unit id="s9a34d1520e320465">
  <source>Stage-specific settings</source>
</trans-unit>
<trans-unit id="s0dfc6838c9d07677">
  <source>Configuration flow</source>
</trans-unit>
<trans-unit id="sebf44d2471b608ad">
  <source>Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage.</source>
</trans-unit>
<trans-unit id="s31ebc5431d677f5d">
  <source>SMTP Host</source>
</trans-unit>
<trans-unit id="s289fce7e694b98ac">
  <source>SMTP Port</source>
</trans-unit>
<trans-unit id="se4a9da0295597e73">
  <source>SMTP Username</source>
</trans-unit>
<trans-unit id="s593db2c00d6516a2">
  <source>SMTP Password</source>
</trans-unit>
<trans-unit id="s0d4268408182491d">
  <source>Use TLS</source>
</trans-unit>
<trans-unit id="s480c6c40a248f7d2">
  <source>Use SSL</source>
</trans-unit>
<trans-unit id="sc1feadd25659c94d">
  <source>From address</source>
</trans-unit>
<trans-unit id="sca2487321ec12bd6">
  <source>Email address the verification email will be sent from.</source>
</trans-unit>
<trans-unit id="s24a8fdfc73e8137f">
  <source>Stage used to configure an email-based authenticator.</source>
</trans-unit>
<trans-unit id="sea0da186a814a212">
  <source>Use global connection settings</source>
</trans-unit>
<trans-unit id="s7754fa56a4439de4">
  <source>When enabled, global email connection settings will be used and connection settings below will be ignored.</source>
</trans-unit>
<trans-unit id="s7e2bcca51126ec9c">
  <source>Subject of the verification email.</source>
</trans-unit>
<trans-unit id="sc12c90b1da0f3a47">
  <source>Token expiration</source>
</trans-unit>
<trans-unit id="sc264a82f9c710f14">
  <source>Time the token sent is valid (Format: hours=3,minutes=17,seconds=300).</source>
</trans-unit>
<trans-unit id="se47baf2fd16b9d2b">
  <source>Template</source>
</trans-unit>
<trans-unit id="s503217f10ebdc63e">
  <source>Loading templates...</source>
</trans-unit>
<trans-unit id="s6891d230751dd7bf">
  <source>Template used for the verification email.</source>
</trans-unit>
<trans-unit id="s3baf512851453712">
  <source>Twilio Account SID</source>
</trans-unit>
<trans-unit id="sa738ce390bc24875">
  <source>Get this value from https://console.twilio.com</source>
</trans-unit>
<trans-unit id="sa7b56a80ab1801f0">
  <source>Twilio Auth Token</source>
</trans-unit>
<trans-unit id="sfe99a8caa70232ab">
  <source>Authentication Type</source>
</trans-unit>
<trans-unit id="safd0363143a46a91">
  <source>Basic Auth</source>
</trans-unit>
<trans-unit id="sd06b47084fec0ec5">
  <source>Bearer Token</source>
</trans-unit>
<trans-unit id="sb1751a1411d6874f">
  <source>External API URL</source>
</trans-unit>
<trans-unit id="sbdc1176ff9f93da2">
  <source>This is the full endpoint to send POST requests to.</source>
</trans-unit>
<trans-unit id="s51da4de00984fe51">
  <source>API Auth Username</source>
</trans-unit>
<trans-unit id="s293ab4331c1dd387">
  <source>This is the username to be used with basic auth or the token when used with bearer token</source>
</trans-unit>
<trans-unit id="s634d041fd954ab20">
  <source>API Auth password</source>
</trans-unit>
<trans-unit id="sb635ad3c2e357d3c">
  <source>This is the password to be used with basic auth</source>
</trans-unit>
<trans-unit id="s5e830ae7688d1219">
  <source>Stage used to configure an SMS-based TOTP authenticator.</source>
</trans-unit>
<trans-unit id="s0d5d05bf3d122ced">
  <source>Twilio</source>
</trans-unit>
<trans-unit id="sc3c74f5273df459a">
  <source>Generic</source>
</trans-unit>
<trans-unit id="sbbb2180b6aed196e">
  <source>From number</source>
</trans-unit>
<trans-unit id="sc647dcb91f6958dd">
  <source>Number the SMS will be sent from.</source>
</trans-unit>
<trans-unit id="sa92398dba8b12d85">
  <source>Mapping</source>
</trans-unit>
<trans-unit id="s3c619d54c995d4ab">
  <source>Modify the payload sent to the provider.</source>
</trans-unit>
<trans-unit id="s0ae0072614320ae2">
  <source>Hash phone number</source>
</trans-unit>
<trans-unit id="s9ca3310e1999fd5b">
  <source>If enabled, only a hash of the phone number will be saved. This can be done for data-protection reasons. Devices created from a stage with this enabled cannot be used with the authenticator validation stage.</source>
</trans-unit>
<trans-unit id="s128e7f5f34bfa155">
  <source>Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows.</source>
</trans-unit>
<trans-unit id="sabf67834e35dede5">
  <source>Token count</source>
</trans-unit>
<trans-unit id="s7caa8f7edb920909">
  <source>The number of tokens generated whenever this stage is used. Every token generated per stage execution will be attached to a single static device.</source>
</trans-unit>
<trans-unit id="s4aacc4e0277c1042">
  <source>Token length</source>
</trans-unit>
<trans-unit id="sc5a4711395ffb043">
  <source>Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator).</source>
</trans-unit>
<trans-unit id="s9d8ad4b85287131f">
  <source>Digits</source>
</trans-unit>
<trans-unit id="sc04e92d753742189">
  <source>6 digits, widely compatible</source>
</trans-unit>
<trans-unit id="sdc70195469e83e3f">
  <source>8 digits, not compatible with apps like Google Authenticator</source>
</trans-unit>
<trans-unit id="s97d1b0070f50c07f">
  <source>Static Tokens</source>
</trans-unit>
<trans-unit id="sb8168ae309c66abc">
  <source>TOTP Authenticators</source>
</trans-unit>
<trans-unit id="sde47e4d8b9b21b59">
  <source>WebAuthn Authenticators</source>
</trans-unit>
<trans-unit id="s8da88a8a5750bce1">
  <source>Duo Authenticators</source>
</trans-unit>
<trans-unit id="s4d182bae8a578010">
  <source>SMS-based Authenticators</source>
</trans-unit>
<trans-unit id="s15986693bfc99fb7">
  <source>Email-based Authenticators</source>
</trans-unit>
<trans-unit id="s0e15f678445dfc45">
  <source>Stage used to validate any authenticator. This stage should be used during authentication or authorization flows.</source>
</trans-unit>
<trans-unit id="s73c13e5a6f5e38a3">
  <source>Device classes</source>
</trans-unit>
<trans-unit id="sd8d9451f86502d1a">
  <source>Device classes which can be used to authenticate.</source>
</trans-unit>
<trans-unit id="se2e9f5a32c93e5f7">
  <source>Last validation threshold</source>
</trans-unit>
<trans-unit id="s23ed998c51cbe38f">
  <source>If the user has successfully authenticated with a device in the classes listed above within this configured duration, this stage will be skipped.</source>
</trans-unit>
<trans-unit id="s681074b6c1f19c08">
  <source>Not configured action</source>
</trans-unit>
<trans-unit id="sa2c29dc5ed47b26d">
  <source>Force the user to configure an authenticator</source>
</trans-unit>
<trans-unit id="sa30c58514a3dc0fb">
  <source>Deny the user access</source>
</trans-unit>
<trans-unit id="scae166352a31032c">
  <source>Configuration stages</source>
</trans-unit>
<trans-unit id="s7bd456df0becbbff">
  <source>Available Stages</source>
</trans-unit>
<trans-unit id="sf80798d2f56b540b">
  <source>Selected Stages</source>
</trans-unit>
<trans-unit id="s6941a67f0038ba4c">
  <source>Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again.</source>
</trans-unit>
<trans-unit id="s7e5af9c6ba6f5cc6">
  <source>When multiple stages are selected, the user can choose which one they want to enroll.</source>
</trans-unit>
<trans-unit id="s4d4f52ccfd9d6adf">
  <source>WebAuthn-specific settings</source>
</trans-unit>
<trans-unit id="s1e0de9c4f66dc371">
  <source>WebAuthn User verification</source>
</trans-unit>
<trans-unit id="sdb7b2173869822bc">
  <source>User verification must occur.</source>
</trans-unit>
<trans-unit id="s7683363cdf78cf31">
  <source>User verification is preferred if available, but not required.</source>
</trans-unit>
<trans-unit id="scb43f5faeb6a7ca9">
  <source>User verification should not occur.</source>
</trans-unit>
<trans-unit id="sb46d2e64f64c6284">
  <source>WebAuthn Device type restrictions</source>
</trans-unit>
<trans-unit id="sbb928551c84cd63f">
  <source>Available Device types</source>
</trans-unit>
<trans-unit id="s6446c35d6b411e53">
  <source>Selected Device types</source>
</trans-unit>
<trans-unit id="s1f4df216b56de4ac">
  <source>Optionally restrict which WebAuthn device types may be used. When no device types are selected, all devices are allowed.</source>
</trans-unit>
<trans-unit id="s11274960b13cf21a">
  <source>This restriction only applies to devices created in authentik 2024.4 or later.</source>
</trans-unit>
<trans-unit id="s24bce955914b1f0a">
  <source>Stage used to configure a WebAuthn authenticator (i.e. Yubikey, FaceID/Windows Hello).</source>
</trans-unit>
<trans-unit id="s34b23ebbac9f6ab9">
  <source>User verification</source>
</trans-unit>
<trans-unit id="s6a3cf855140b9511">
  <source>Required: User verification must occur.</source>
</trans-unit>
<trans-unit id="sc498a3b05cfe2b08">
  <source>Preferred: User verification is preferred if available, but not required.</source>
</trans-unit>
<trans-unit id="s9d2239d2b0402795">
  <source>Discouraged: User verification should not occur.</source>
</trans-unit>
<trans-unit id="s9ea472b555374771">
  <source>Resident key requirement</source>
</trans-unit>
<trans-unit id="s428b7859907f6db2">
  <source>Required: The authenticator MUST create a dedicated credential. If it cannot, the RP is prepared for an error to occur</source>
</trans-unit>
<trans-unit id="s33e3766d4a02b042">
  <source>Preferred: The authenticator can create and store a dedicated credential, but if it doesn't that's alright too</source>
</trans-unit>
<trans-unit id="sfb852dd507c25c24">
  <source>Discouraged: The authenticator should not create a dedicated credential</source>
</trans-unit>
<trans-unit id="s5fbaeb14f42815e5">
  <source>Authenticator Attachment</source>
</trans-unit>
<trans-unit id="s502d2473587032e1">
  <source>No preference is sent</source>
</trans-unit>
<trans-unit id="s60cc554fde2676cb">
  <source>A non-removable authenticator, like TouchID or Windows Hello</source>
</trans-unit>
<trans-unit id="sdf1d8edef27236f0">
  <source>A "roaming" authenticator, like a YubiKey</source>
</trans-unit>
<trans-unit id="sbd65aeeb8a3b9bbc">
  <source>Maximum registration attempts</source>
</trans-unit>
<trans-unit id="s8495753cb15e8d8e">
  <source>Maximum allowed registration attempts. When set to 0 attempts, attempts are not limited.</source>
</trans-unit>
<trans-unit id="sa64fb483becc9c2c">
  <source>Device type restrictions</source>
</trans-unit>
<trans-unit id="sfd1af96798dd8a5f">
  <source>Public Key</source>
</trans-unit>
<trans-unit id="s83d0f62ad1731a03">
  <source>Private Key</source>
</trans-unit>
<trans-unit id="s6f4f35a5a4b9b3cb">
  <source>Interactive</source>
</trans-unit>
<trans-unit id="s1cd617e7bbe278d0">
  <source>Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time.</source>
</trans-unit>
<trans-unit id="s26513c9dd154f041">
  <source>Always require consent</source>
</trans-unit>
<trans-unit id="s2e5226fcf269689b">
  <source>Consent given lasts indefinitely</source>
</trans-unit>
<trans-unit id="s7eff620292ed9349">
  <source>Consent expires</source>
</trans-unit>
<trans-unit id="s6f328f2d8382d998">
  <source>Consent expires in</source>
</trans-unit>
<trans-unit id="se0c660020d9cf5b7">
  <source>Offset after which consent expires.</source>
</trans-unit>
<trans-unit id="s7f68101a50f526ee">
  <source>Statically deny the flow. To use this stage effectively, disable *Evaluate when flow is planned* on the respective binding.</source>
</trans-unit>
<trans-unit id="s1cc306d8e28c4464">
  <source>Deny message</source>
</trans-unit>
<trans-unit id="s6985c401e1100122">
  <source>Message shown when this stage is run.</source>
</trans-unit>
<trans-unit id="s22b10ed263b96194">
  <source>Dummy stage used for testing. Shows a simple continue button and always passes.</source>
</trans-unit>
<trans-unit id="sdb861d9906f18ac2">
  <source>Throw error?</source>
</trans-unit>
<trans-unit id="sa248e1021d2c27b5">
  <source>Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity.</source>
</trans-unit>
<trans-unit id="s87b7e3bc944c728c">
  <source>Activate pending user on success</source>
</trans-unit>
<trans-unit id="s9e9c8d99f4c26baf">
  <source>When a user returns from the email successfully, their account will be activated.</source>
</trans-unit>
<trans-unit id="sa3fc920064fc8380">
  <source>Time the token sent is valid.</source>
</trans-unit>
<trans-unit id="s32fc592c4a264edd">
  <source>Account Recovery Max Attempts</source>
</trans-unit>
<trans-unit id="s8341dba451980abe">
  <source>Account Recovery Cache Timeout</source>
</trans-unit>
<trans-unit id="sede4ad68849ce0c5">
  <source>The time window used to count recent account recovery attempts.</source>
</trans-unit>
<trans-unit id="sc7d071fb5cc1f6bf">
  <source>A selection is required</source>
</trans-unit>
<trans-unit id="s61e48919db20538a">
  <source>UPN</source>
</trans-unit>
<trans-unit id="s4af8a3ce5a600855">
  <source>Let the user identify themselves with their username or Email address.</source>
</trans-unit>
<trans-unit id="s592ab7d2bc1b8973">
  <source>User fields</source>
</trans-unit>
<trans-unit id="s4cdae7635e757555">
  <source>Fields a user can identify themselves with. If no fields are selected, the user will only be able to use sources.</source>
</trans-unit>
<trans-unit id="s3380d7cbcebe50f6">
  <source>Password stage</source>
</trans-unit>
<trans-unit id="s08c91cb1a2cd3d97">
  <source>When selected, a password field is shown on the same page instead of a separate page. This prevents username enumeration attacks.</source>
</trans-unit>
<trans-unit id="s54154a8d64a3597b">
  <source>Captcha stage</source>
</trans-unit>
<trans-unit id="s0c250af62ddbf801">
  <source>When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.</source>
</trans-unit>
<trans-unit id="sd97d8d0906e6cc47">
  <source>Case insensitive matching</source>
</trans-unit>
<trans-unit id="s8aaad223e954f9ca">
  <source>When enabled, user fields are matched regardless of their casing.</source>
</trans-unit>
<trans-unit id="s62e7f6ed7d9cb3ca">
  <source>Pretend user exists</source>
</trans-unit>
<trans-unit id="s52bdc80690a9a8dc">
  <source>When enabled, the stage will always accept the given user identifier and continue.</source>
</trans-unit>
<trans-unit id="sbab723b98dcfe23f">
  <source>Show matched user</source>
</trans-unit>
<trans-unit id="se50a08ab71bb96ed">
  <source>When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown.</source>
</trans-unit>
<trans-unit id="s844baf19a6c4a9b4">
  <source>Enable "Remember me on this device"</source>
</trans-unit>
<trans-unit id="sfa72bca733f40692">
  <source>When enabled, the user can save their username in a cookie, allowing them to skip directly to entering their password.</source>
</trans-unit>
<trans-unit id="s0295ce5d6f635d75">
  <source>Source settings</source>
</trans-unit>
<trans-unit id="s91e3a47599412f51">
  <source>Sources</source>
</trans-unit>
<trans-unit id="s17a679298216aca9">
  <source>Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP.</source>
</trans-unit>
<trans-unit id="sa41aee3ae04c9216">
  <source>Show sources' labels</source>
</trans-unit>
<trans-unit id="s54cd35e6224ba65d">
  <source>By default, only icons are shown for sources. Enable this to show their full names.</source>
</trans-unit>
<trans-unit id="s9ee20003cb116abf">
  <source>Passwordless flow</source>
</trans-unit>
<trans-unit id="s0c8c4d2bb0a9162a">
  <source>Optional passwordless flow, which is linked at the bottom of the page. When configured, users can use this flow to authenticate with a WebAuthn authenticator, without entering any details.</source>
</trans-unit>
<trans-unit id="s01a3a7f48ee4edaf">
  <source>Optional enrollment flow, which is linked at the bottom of the page.</source>
</trans-unit>
<trans-unit id="s82188c9542510212">
  <source>Optional recovery flow, which is linked at the bottom of the page.</source>
</trans-unit>
<trans-unit id="s3e59b8b2debf0209">
  <source>This stage can be included in enrollment flows to accept invitations.</source>
</trans-unit>
<trans-unit id="s79ad406777feab1f">
  <source>Continue flow without invitation</source>
</trans-unit>
<trans-unit id="s61ccefd661ac2296">
  <source>If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given.</source>
</trans-unit>
<trans-unit id="s9300147e327fd8f6">
  <source>Client-certificate/mTLS authentication/enrollment.</source>
</trans-unit>
<trans-unit id="sbf990ec848470f5c">
  <source>Certificate optional</source>
</trans-unit>
<trans-unit id="s72e2876e9409b9eb">
  <source>If no certificate was provided, this stage will succeed and continue to the next stage.</source>
</trans-unit>
<trans-unit id="se07d973901a6e6b9">
  <source>Certificate required</source>
</trans-unit>
<trans-unit id="s664c47df020ee414">
  <source>If no certificate was provided, this stage will stop flow execution.</source>
</trans-unit>
<trans-unit id="sbe9da6dad795aa39">
  <source>Certificate authorities</source>
</trans-unit>
<trans-unit id="se3a6aa4f0ab7568e">
  <source>Configure the certificate authority client certificates are validated against. The certificate authority can also be configured on a brand, which allows for different certificate authorities for different domains.</source>
</trans-unit>
<trans-unit id="sb8fdf5a09a969870">
  <source>Certificate attribute</source>
</trans-unit>
<trans-unit id="sd4ac926e4ebb1cd7">
  <source>Common Name</source>
</trans-unit>
<trans-unit id="s8069037a865037c9">
  <source>Configure the attribute of the certificate used to look for a user.</source>
</trans-unit>
<trans-unit id="sc185a8ad96f8eaa2">
  <source>User attribute</source>
</trans-unit>
<trans-unit id="s4f9860fefb8fbe01">
  <source>Configure the attribute of the user used to look for a user.</source>
</trans-unit>
<trans-unit id="sba42248f3f27955c">
  <source>User database + standard password</source>
</trans-unit>
<trans-unit id="s3330adb3f0922f7b">
  <source>User database + app passwords</source>
</trans-unit>
<trans-unit id="sc10db51c9bb77d5c">
  <source>User database + LDAP password</source>
</trans-unit>
<trans-unit id="s03e4044abe0b556c">
  <source>User database + Kerberos password</source>
</trans-unit>
<trans-unit id="sdc30bddeda2f0225">
  <source>Validate the user's password against the selected backend(s).</source>
</trans-unit>
<trans-unit id="sb8d4f44a1d5b9a14">
  <source>Backends</source>
</trans-unit>
<trans-unit id="sd35ae4be63df1f9f">
  <source>Selection of backends to test the password against.</source>
</trans-unit>
<trans-unit id="s69bc087c166b4177">
  <source>Flow used by an authenticated user to configure their password. If empty, user will not be able to change their password.</source>
</trans-unit>
<trans-unit id="s77994108c886b965">
  <source>Failed attempts before cancel</source>
</trans-unit>
<trans-unit id="sa9020b93c3bd7235">
  <source>How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage.</source>
</trans-unit>
<trans-unit id="s9dda0789d278f5c5">
  <source>Provide users with a 'show password' button.</source>
</trans-unit>
<trans-unit id="s2d5f69929bb7221d">
  <source><x id="0" equiv-text="${p.name}"/> ("<x id="1" equiv-text="${p.fieldKey}"/>", of type <x id="2" equiv-text="${p.type}"/>)</source>
</trans-unit>
<trans-unit id="s5170f9ef331949c0">
  <source>Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable.</source>
</trans-unit>
<trans-unit id="s36cb242ac90353bc">
  <source>Fields</source>
</trans-unit>
<trans-unit id="sf651943c3ddff635">
  <source>Available Fields</source>
</trans-unit>
<trans-unit id="s80ba9c5ebb7826a9">
  <source>Selected Fields</source>
</trans-unit>
<trans-unit id="s3b7b519444181264">
  <source>Validation Policies</source>
</trans-unit>
<trans-unit id="s1cc032bcc50b2942">
  <source>Available Policies</source>
</trans-unit>
<trans-unit id="s3ad64193ad5f4a5e">
  <source>Selected Policies</source>
</trans-unit>
<trans-unit id="s59691290a232c687">
  <source>Selected policies are executed when the stage is submitted to validate the data.</source>
</trans-unit>
<trans-unit id="sc487e11d5987dbb4">
  <source>Redirect the user to another flow, potentially with all gathered context</source>
</trans-unit>
<trans-unit id="sad9d5481474d4f5b">
  <source>Static</source>
</trans-unit>
<trans-unit id="se87a96950464bc89">
  <source>Target URL</source>
</trans-unit>
<trans-unit id="s7f3097955b19736a">
  <source>Redirect the user to a static URL.</source>
</trans-unit>
<trans-unit id="s9bdee1c5130c8240">
  <source>Target Flow</source>
</trans-unit>
<trans-unit id="sa5d1405b8d6529c7">
  <source>Redirect the user to a Flow.</source>
</trans-unit>
<trans-unit id="s7c9db337d14d42b3">
  <source>Keep flow context</source>
</trans-unit>
<trans-unit id="s02160dc6adba3456">
  <source>Inject an OAuth or SAML Source into the flow execution. This allows for additional user verification, or to dynamically access different sources for different user identifiers (username, email address, etc).</source>
</trans-unit>
<trans-unit id="s5f43af3669b1e098">
  <source>Source</source>
</trans-unit>
<trans-unit id="sd9f752de8448bcc9">
  <source>Resume timeout</source>
</trans-unit>
<trans-unit id="s517954806d7610f2">
  <source>Amount of time a user can take to return from the source to continue the flow.</source>
</trans-unit>
<trans-unit id="sbf4ef82e04772a4e">
  <source>Delete the currently pending user. CAUTION, this stage does not ask for confirmation. Use a consent stage to ensure the user is aware of their actions.</source>
</trans-unit>
<trans-unit id="s8cc920e6a8430a0d">
  <source>Log the currently pending user in.</source>
</trans-unit>
<trans-unit id="sece294cd51a85745">
  <source>Determines how long a session lasts. Default of 0 seconds means that the sessions lasts until the browser is closed.</source>
</trans-unit>
<trans-unit id="sf7949fbbab2eb566">
  <source>Different browsers handle session cookies differently, and might not remove them even when the browser is closed.</source>
</trans-unit>
<trans-unit id="s53bbc3ae4b5fa1d0">
  <source>See here.</source>
</trans-unit>
<trans-unit id="s2512334108f06a5a">
  <source>Stay signed in offset</source>
</trans-unit>
<trans-unit id="s1608b2f94fa0dbd4">
  <source>If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here.</source>
</trans-unit>
<trans-unit id="sa3ff409b84679db8">
  <source>Remember device</source>
</trans-unit>
<trans-unit id="s3b123cba0bf03f29">
  <source>If set to a duration above 0, a cookie will be stored for the duration specified which will allow authentik to know if the user is signing in from a new device.</source>
</trans-unit>
<trans-unit id="s663ccbfdf27e8dd0">
  <source>Network binding</source>
</trans-unit>
<trans-unit id="sb108a06693c67753">
  <source>No binding</source>
</trans-unit>
<trans-unit id="s5aab90c74f1233b8">
  <source>Bind ASN</source>
</trans-unit>
<trans-unit id="s488303b048afe83b">
  <source>Bind ASN and Network</source>
</trans-unit>
<trans-unit id="s3268dcfe0c8234dc">
  <source>Bind ASN, Network and IP</source>
</trans-unit>
<trans-unit id="s226381aca231644f">
  <source>Configure if sessions created by this stage should be bound to the Networks they were created in.</source>
</trans-unit>
<trans-unit id="s2555a1f20f3fd93e">
  <source>GeoIP binding</source>
</trans-unit>
<trans-unit id="s3d63c78f93c9a92e">
  <source>Bind Continent</source>
</trans-unit>
<trans-unit id="s395d5863b3a259b5">
  <source>Bind Continent and Country</source>
</trans-unit>
<trans-unit id="s625ea0c32b4b136c">
  <source>Bind Continent, Country and City</source>
</trans-unit>
<trans-unit id="s4bc7a1a88961be90">
  <source>Configure if sessions created by this stage should be bound to their GeoIP-based location</source>
</trans-unit>
<trans-unit id="s542a71bb8f41e057">
  <source>Terminate other sessions</source>
</trans-unit>
<trans-unit id="sa920231366378c90">
  <source>When enabled, all previous sessions of the user will be terminated.</source>
</trans-unit>
<trans-unit id="sfee06600c15082a9">
  <source>Remove the user from the current session.</source>
</trans-unit>
<trans-unit id="s927398c400970760">
  <source>Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user
        is pending, a new user is created, and data is written to them.</source>
</trans-unit>
<trans-unit id="sb379d861cbed0b47">
  <source>Never create users</source>
</trans-unit>
<trans-unit id="s81d673755a86a4f0">
  <source>When no user is present in the flow context, the stage will fail.</source>
</trans-unit>
<trans-unit id="s9940e3f073fbdbd4">
  <source>Create users when required</source>
</trans-unit>
<trans-unit id="s5414356cc10e80fe">
  <source>When no user is present in the the flow context, a new user is created.</source>
</trans-unit>
<trans-unit id="s57337099d96ce6d2">
  <source>Always create new users</source>
</trans-unit>
<trans-unit id="se80dd66f23b4fc39">
  <source>Create a new user even if a user is in the flow context.</source>
</trans-unit>
<trans-unit id="sed3512fe4560c7f4">
  <source>Create users as inactive</source>
</trans-unit>
<trans-unit id="s9193ef1a39a6c872">
  <source>Mark newly created users as inactive.</source>
</trans-unit>
<trans-unit id="scef2eb6a2bfe3110">
  <source>Internal users might be users such as company employees, which will get access to the full Enterprise feature set.</source>
</trans-unit>
<trans-unit id="sf66389b04fcc219c">
  <source>External users might be external consultants or B2C customers. These users don't get access to enterprise features.</source>
</trans-unit>
<trans-unit id="s77e8668a27dbc402">
  <source>Service accounts should be used for machine-to-machine authentication or other automations.</source>
</trans-unit>
<trans-unit id="s32babfed740fd3c1">
  <source>User type used for newly created users.</source>
</trans-unit>
<trans-unit id="s89d1847b5e4ad225">
  <source>User path template</source>
</trans-unit>
<trans-unit id="s18269e3889d6fa54">
  <source>Path new users will be created under. If left blank, the default path will be used.</source>
</trans-unit>
<trans-unit id="sc1cb0eef9ed94e6a">
  <source>Newly created users are added to this group, if a group is selected.</source>
</trans-unit>
<trans-unit id="sff5bb7742c2896c8">
  <source>Target</source>
</trans-unit>
<trans-unit id="sae5da213b7f896ed">
  <source>Stage</source>
</trans-unit>
<trans-unit id="s0a61796c1956d32c">
  <source>Evaluate when flow is planned</source>
</trans-unit>
<trans-unit id="sf533f13321fee530">
  <source>Evaluate policies during the Flow planning process.</source>
</trans-unit>
<trans-unit id="s6336fa345e96dde9">
  <source>Evaluate when stage is run</source>
</trans-unit>
<trans-unit id="s37e1bad4bf0e9241">
  <source>Evaluate policies before the Stage is presented to the user.</source>
</trans-unit>
<trans-unit id="s0dc46deb8f181baf">
  <source>Invalid response behavior</source>
</trans-unit>
<trans-unit id="seb0805249661d15b">
  <source>Returns the error message and a similar challenge to the executor</source>
</trans-unit>
<trans-unit id="sd891d8463d0ebace">
  <source>Restarts the flow from the beginning</source>
</trans-unit>
<trans-unit id="s6b9a1dd402750a8a">
  <source>Restarts the flow from the beginning, while keeping the flow context</source>
</trans-unit>
<trans-unit id="sbc88fb27a4c3b894">
  <source>Configure how the flow executor should handle an invalid response to a challenge given by this bound stage.</source>
</trans-unit>
<trans-unit id="sd8417b41ca27bc8f">
  <source>New stage</source>
</trans-unit>
<trans-unit id="s293801033f9fc0d0">
  <source>Create a new stage.</source>
</trans-unit>
<trans-unit id="s71633a67e0d7c0e4">
  <source>Successfully imported device.</source>
</trans-unit>
<trans-unit id="s7d61705dfb120d7b">
  <source>The user in authentik this device will be assigned to.</source>
</trans-unit>
<trans-unit id="s5eaf1d304e03ed4b">
  <source>Duo User ID</source>
</trans-unit>
<trans-unit id="s003847d8bc01c676">
  <source>The user ID in Duo, can be found in the URL after clicking on a user.</source>
</trans-unit>
<trans-unit id="sbbc806ea3987c781">
  <source>Automatic import</source>
</trans-unit>
<trans-unit id="s77299a9d3dd932cd">
  <source>Successfully imported <x id="0" equiv-text="${res.count}"/> devices.</source>
</trans-unit>
<trans-unit id="s6a615f6165ef01c9">
  <source>Start automatic import</source>
</trans-unit>
<trans-unit id="s9f83d7768aea548a">
  <source>Or manually import</source>
</trans-unit>
<trans-unit id="sabf8a430d504f8c8">
  <source>Endpoint Google Chrome Device Trust is in preview.</source>
</trans-unit>
<trans-unit id="s336936629cdeb3e5">
  <source>Stage used to verify users' browsers using Google Chrome Device Trust. This stage can be used in authentication/authorization flows.</source>
</trans-unit>
<trans-unit id="s85fe794c71b4ace8">
  <source>Google Verified Access API</source>
</trans-unit>
<trans-unit id="sddc8efe94cb8c210">
  <source>Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow.</source>
</trans-unit>
<trans-unit id="sb69a4b0acd0895f2">
  <source>Flows</source>
</trans-unit>
<trans-unit id="s0eaf755fa88c8d97">
  <source>Stage(s)</source>
</trans-unit>
<trans-unit id="s3914cb410fca44d4">
  <source>Import</source>
</trans-unit>
<trans-unit id="s8a67b33a0d70d322">
  <source>Import Duo device</source>
</trans-unit>
<trans-unit id="s254a9a23dc1635df">
  <source>Import devices</source>
</trans-unit>
<trans-unit id="s48cf8fd56b1237ed">
  <source>Successfully updated flow.</source>
</trans-unit>
<trans-unit id="sc3e0c240b159fbce">
  <source>Successfully created flow.</source>
</trans-unit>
<trans-unit id="s925936f647ae52cc">
  <source>Shown as the Title in Flow pages.</source>
</trans-unit>
<trans-unit id="s50719dda8f90abf4">
  <source>Visible in the URL.</source>
</trans-unit>
<trans-unit id="s0f4c6540c30bd8b4">
  <source>Designation</source>
</trans-unit>
<trans-unit id="sb25d9afe10941425">
  <source>Decides what this Flow is used for. For example, the Authentication flow is redirect to when an un-authenticated user visits authentik.</source>
</trans-unit>
<trans-unit id="sb36e4c05244278c1">
  <source>No requirement</source>
</trans-unit>
<trans-unit id="s7b105164d209f670">
  <source>Require authentication</source>
</trans-unit>
<trans-unit id="s0d7dea184036a74d">
  <source>Require no authentication</source>
</trans-unit>
<trans-unit id="s66f533986ba6182c">
  <source>Require superuser</source>
</trans-unit>
<trans-unit id="s26c0a8789930b5fd">
  <source>Require being redirected from another flow</source>
</trans-unit>
<trans-unit id="sbfaee8cfbf4e44e8">
  <source>Require Outpost (flow can only be executed from an outpost)</source>
</trans-unit>
<trans-unit id="sfad9279cc42c6b61">
  <source>Required authentication level for this flow.</source>
</trans-unit>
<trans-unit id="sb56674c9ea4f0588">
  <source>Behavior settings</source>
</trans-unit>
<trans-unit id="sb6d7d58cb0a1544e">
  <source>Compatibility mode</source>
</trans-unit>
<trans-unit id="s14ace18ccf4fb86d">
  <source>Increases compatibility with password managers and mobile devices.</source>
</trans-unit>
<trans-unit id="scfbc2f1396ee8550">
  <source>Denied action</source>
</trans-unit>
<trans-unit id="sff38031cf061e3ae">
  <source>Will follow the ?next parameter if set, otherwise show a message</source>
</trans-unit>
<trans-unit id="s936bf4342b182ad4">
  <source>Will either follow the ?next parameter or redirect to the default interface</source>
</trans-unit>
<trans-unit id="s22b0e8c5277dd5a9">
  <source>Will notify the user the flow isn't applicable</source>
</trans-unit>
<trans-unit id="s2eeca5cfc99ef19b">
  <source>Decides the response when a policy denies access to this flow for a user.</source>
</trans-unit>
<trans-unit id="sbaf20067de176c90">
  <source>Appearance settings</source>
</trans-unit>
<trans-unit id="s2e4818861000b13f">
  <source>Layout</source>
</trans-unit>
<trans-unit id="s1efbfc3937d565bd">
  <source>Background</source>
</trans-unit>
<trans-unit id="s374abf1a54d87b67">
  <source>Background shown during execution.</source>
</trans-unit>
<trans-unit id="sb904f23f17b60c3a">
  <source>Successfully imported flow.</source>
</trans-unit>
<trans-unit id="s8b0e21adf383c8ba">
  <source>.yaml files, which can be found in the Example Flows documentation</source>
</trans-unit>
<trans-unit id="sc816360d6f5a1eeb">
  <source>Flows describe a chain of Stages to authenticate, enroll or recover a user. Stages are chosen based on policies applied to them.</source>
</trans-unit>
<trans-unit id="s6f857299d5db1ecf">
  <source>Flow(s)</source>
</trans-unit>
<trans-unit id="s9e830cbc0b42a514">
  <source>Update Flow</source>
</trans-unit>
<trans-unit id="s5d90aeadfcb34286">
  <source>Execute "<x id="0" equiv-text="${item.name}"/>"</source>
</trans-unit>
<trans-unit id="sc4fdeccf14be5378">
  <source>Execute</source>
</trans-unit>
<trans-unit id="saa25eac2952d918d">
  <source>Export "<x id="0" equiv-text="${item.name}"/>"</source>
</trans-unit>
<trans-unit id="s293aa6a6446fb153">
  <source>Export</source>
</trans-unit>
<trans-unit id="s2f1bcfcc5cae94c3">
  <source>Create Flow</source>
</trans-unit>
<trans-unit id="s832282d415294df4">
  <source>Import Flow</source>
</trans-unit>
<trans-unit id="s098237f7ccb4dc4a">
  <source>Successfully cleared flow cache</source>
</trans-unit>
<trans-unit id="s59572c1be31a812e">
  <source>Failed to delete flow cache</source>
</trans-unit>
<trans-unit id="sa2b727168b090d34">
  <source>Clear Flow cache</source>
</trans-unit>
<trans-unit id="sf12d588a76ba7e51">
  <source>Are you sure you want to clear the flow cache?
            This will cause all flows to be re-evaluated on their next usage.</source>
</trans-unit>
<trans-unit id="sbe47a5bdeec19ab0">
  <source>Stage binding(s)</source>
</trans-unit>
<trans-unit id="sfa88f413e287bb0f">
  <source>Stage type</source>
</trans-unit>
<trans-unit id="s04440099d97c0bef">
  <source>Edit Stage</source>
</trans-unit>
<trans-unit id="s980270d0fab7ecb3">
  <source>Update Stage binding</source>
</trans-unit>
<trans-unit id="sfe938c1585e0bf68">
  <source>These bindings control if this stage will be applied to the flow.</source>
</trans-unit>
<trans-unit id="sfac6f995c7670559">
  <source>No Stages bound</source>
</trans-unit>
<trans-unit id="s955c1fec1c6fb970">
  <source>No stages are currently bound to this flow.</source>
</trans-unit>
<trans-unit id="s6f367f5604d5056d">
  <source>Create and bind Stage</source>
</trans-unit>
<trans-unit id="s9a393a04eaf1eb0e">
  <source>Create Stage binding</source>
</trans-unit>
<trans-unit id="s30d1f50f476c3f48">
  <source>Flow Overview</source>
</trans-unit>
<trans-unit id="s01794c0ee3629c1b">
  <source>Flow Info</source>
</trans-unit>
<trans-unit id="s77099d752f1ab773">
  <source>Related actions</source>
</trans-unit>
<trans-unit id="sd07866d9f38b2c50">
  <source>Execute flow</source>
</trans-unit>
<trans-unit id="s61e5043203e94d0a">
  <source>Execute "<x id="0" equiv-text="${this.flow.name}"/>" normally</source>
</trans-unit>
<trans-unit id="s9ff3121d30f88d52">
  <source>Normal</source>
</trans-unit>
<trans-unit id="s02eb960c270a837e">
  <source>Execute "<x id="0" equiv-text="${this.flow.name}"/>" as current user</source>
</trans-unit>
<trans-unit id="saf579a36a54c92e1">
  <source>Current user</source>
</trans-unit>
<trans-unit id="sd149e44e50455923">
  <source>Execute "<x id="0" equiv-text="${this.flow.name}"/>" with inspector</source>
</trans-unit>
<trans-unit id="s45c530a48bcf74ad">
  <source>Use inspector</source>
</trans-unit>
<trans-unit id="s3576aead3e68c5c9">
  <source>Export flow</source>
</trans-unit>
<trans-unit id="se2c3cbf2ed1403f1">
  <source>Stage Bindings</source>
</trans-unit>
<trans-unit id="s78c08391ffbfb8c0">
  <source>These bindings control which users can access this flow.</source>
</trans-unit>
<trans-unit id="sc1a1ff47c058bb09">
  <source>Event Log</source>
</trans-unit>
<trans-unit id="s744401846fea6e76">
  <source>Brand</source>
</trans-unit>
<trans-unit id="s3b3c333481944862">
  <source>Show details</source>
</trans-unit>
<trans-unit id="s455de2f740b073fd">
  <source>Event info</source>
</trans-unit>
<trans-unit id="sb41b2cfbbc52565b">
  <source>Created</source>
</trans-unit>
<trans-unit id="s4a642406b0745917">
  <source>Raw event info</source>
</trans-unit>
<trans-unit id="s65d67612999165e9">
  <source>Event <x id="0" equiv-text="${this.event.pk}"/></source>
</trans-unit>
<trans-unit id="s037bc6d25a03c3c8">
  <source>Successfully updated transport.</source>
</trans-unit>
<trans-unit id="s1575a15cee001915">
  <source>Successfully created transport.</source>
</trans-unit>
<trans-unit id="sca2879d96f58a39c">
  <source>Send once</source>
</trans-unit>
<trans-unit id="s2430e000b7cfefd0">
  <source>Only send notification once, for example when sending a webhook into a chat channel.</source>
</trans-unit>
<trans-unit id="s4acf840bc792c3ae">
  <source>Local (notifications will be created within authentik)</source>
</trans-unit>
<trans-unit id="sede0abbf2b612812">
  <source>Webhook (generic)</source>
</trans-unit>
<trans-unit id="s76f5dca6404a1210">
  <source>Webhook (Slack/Discord)</source>
</trans-unit>
<trans-unit id="s6873bdbfa24615fb">
  <source>Webhook URL</source>
</trans-unit>
<trans-unit id="s04fbc36687266544">
  <source>Webhook Body Mapping</source>
</trans-unit>
<trans-unit id="s149fd588c9f4b891">
  <source>Webhook Header Mapping</source>
</trans-unit>
<trans-unit id="sf1fc82d7ae3f4d81">
  <source>Email Subject Prefix</source>
</trans-unit>
<trans-unit id="s66401e0b2526acab">
  <source>Email Template</source>
</trans-unit>
<trans-unit id="s819509c33a7534ac">
  <source>Notification Transports</source>
</trans-unit>
<trans-unit id="s57072ffb92b6c9c8">
  <source>Define how notifications are sent to users, like Email or Webhook.</source>
</trans-unit>
<trans-unit id="s624256f8a4bb4c89">
  <source>Notification transport(s)</source>
</trans-unit>
<trans-unit id="sac1332e6f421526e">
  <source>Update Notification Transport</source>
</trans-unit>
<trans-unit id="s6b5002c605b39d6d">
  <source>Create Notification Transport</source>
</trans-unit>
<trans-unit id="s0a39e4f61ccafacb">
  <source>Successfully updated rule.</source>
</trans-unit>
<trans-unit id="s72e102414fec81a4">
  <source>Successfully created rule.</source>
</trans-unit>
<trans-unit id="s2e9d5ea88f02ae68">
  <source>Select the group of users which the alerts are sent to. </source>
</trans-unit>
<trans-unit id="se630f2ccd39bf9e6">
  <source>If no group is selected and 'Send notification to event user' is disabled the rule is disabled. </source>
</trans-unit>
<trans-unit id="s47966b2a708694e2">
  <source>Send notification to event user</source>
</trans-unit>
<trans-unit id="sffa171e11d4ae513">
  <source>Transports</source>
</trans-unit>
<trans-unit id="s26733a6289ca6f1a">
  <source>Available Transports</source>
</trans-unit>
<trans-unit id="sa65f772cfc5aa67e">
  <source>Selected Transports</source>
</trans-unit>
<trans-unit id="s7b18721be331241e">
  <source>Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI.</source>
</trans-unit>
<trans-unit id="scd0cfe87af6f2ff2">
  <source>Severity</source>
</trans-unit>
<trans-unit id="s98c3bdf4fd5cdf65">
  <source>Notification Rules</source>
</trans-unit>
<trans-unit id="s107bf77afb93c9b8">
  <source>Send notifications whenever a specific Event is created and matched by policies.</source>
</trans-unit>
<trans-unit id="sf3f9a0feaf083207">
  <source>Sent to group</source>
</trans-unit>
<trans-unit id="sc92ed9d5e01d3f24">
  <source>Notification rule(s)</source>
</trans-unit>
<trans-unit id="sd1146418b344f81f">
  <source>Update Notification Rule</source>
</trans-unit>
<trans-unit id="sbbc1de43ab6c1f76">
  <source>Create Notification Rule</source>
</trans-unit>
<trans-unit id="s5795b310ab271d20">
  <source>These bindings control upon which events this rule triggers.
Bindings to groups/users are checked against the user of the event.</source>
</trans-unit>
<trans-unit id="s90c3b62194fe8508">
  <source>Outpost Deployment Info</source>
</trans-unit>
<trans-unit id="s35f9df7668d5fa79">
  <source>View deployment documentation</source>
</trans-unit>
<trans-unit id="s0e03fe2dc5b9164b">
  <source>If your authentik Instance is using a self-signed certificate, set this value.</source>
</trans-unit>
<trans-unit id="sc21032b0d37882a0">
  <source>If your authentik_host setting does not match the URL you want to login with, add this setting.</source>
</trans-unit>
<trans-unit id="s6f270e1668c036e9">
  <source>Successfully updated outpost.</source>
</trans-unit>
<trans-unit id="s79aed8154d7c472c">
  <source>Successfully created outpost.</source>
</trans-unit>
<trans-unit id="sc3259eb55cf91e8c">
  <source>LDAP</source>
</trans-unit>
<trans-unit id="s8afc8c5aafb392d3">
  <source>Radius</source>
</trans-unit>
<trans-unit id="sa06cd519ff151b6d">
  <source>RAC</source>
</trans-unit>
<trans-unit id="s03970aa76a09982d">
  <source>Integration</source>
</trans-unit>
<trans-unit id="s9c29565c5ae1cc92">
  <source>Selecting an integration enables the management of the outpost by authentik.</source>
</trans-unit>
<trans-unit id="scb76a63c68b0d81f">
  <source>Available Applications</source>
</trans-unit>
<trans-unit id="sd176021da2ea0fe3">
  <source>Selected Applications</source>
</trans-unit>
<trans-unit id="sf9b1c0661a02d9f9">
  <source>Configuration</source>
</trans-unit>
<trans-unit id="s1da3499258024860">
  <source><x id="0" equiv-text="${versionString}"/> (build <x id="1" equiv-text="${this.outpostHealth.buildHash.substring(0, 8)}"/>)</source>
</trans-unit>
<trans-unit id="s001fd928369d4ddc">
  <source><x id="0" equiv-text="${versionString}"/> (FIPS)</source>
</trans-unit>
<trans-unit id="saa8939ac88a76f98">
  <source>Last seen</source>
</trans-unit>
<trans-unit id="s1ac2653a6492b435">
  <source><x id="0" equiv-text="${this.outpostHealth.version}"/>, should be <x id="1" equiv-text="${this.outpostHealth.versionShould}"/></source>
</trans-unit>
<trans-unit id="s322e34cfcba47155">
  <source>Not available</source>
</trans-unit>
<trans-unit id="s354405ae02cb262d">
  <source>Last seen: <x id="0" equiv-text="${formatElapsedTime(lastSeen)}"/> (<x id="1" equiv-text="${lastSeen.toLocaleTimeString()}"/>)</source>
</trans-unit>
<trans-unit id="s5e169e1bac20b4a6">
  <source>Outposts</source>
</trans-unit>
<trans-unit id="s8802553bc57617ee">
  <source>Outposts are deployments of authentik components to support different environments and protocols, like reverse proxies.</source>
</trans-unit>
<trans-unit id="s84d7d6ebbedcb586">
  <source>Health and Version</source>
</trans-unit>
<trans-unit id="s9bf48a89367282cd">
  <source>Warning: authentik Domain is not configured, authentication will not work.</source>
</trans-unit>
<trans-unit id="sbf5f4c5ba679e847">
  <source>Logging in via <x id="0" equiv-text="${item.config.authentik_host}"/>.</source>
</trans-unit>
<trans-unit id="s59b6028f19d15cda">
  <source>No integration active</source>
</trans-unit>
<trans-unit id="s9bd59e0ea70a3e4a">
  <source>Update Outpost</source>
</trans-unit>
<trans-unit id="sc8f286ac783c385d">
  <source>View Deployment Info</source>
</trans-unit>
<trans-unit id="s9ee92717d7f63247">
  <source>Detailed health (one instance per column, data is cached so may be out of date)</source>
</trans-unit>
<trans-unit id="s1d49ec5030447643">
  <source>Outpost(s)</source>
</trans-unit>
<trans-unit id="s1a2f8f4b3861583b">
  <source>Create Outpost</source>
</trans-unit>
<trans-unit id="sdc1ef94016f0d855">
  <source>Successfully updated integration.</source>
</trans-unit>
<trans-unit id="sc2a1a40a1b4b0170">
  <source>Successfully created integration.</source>
</trans-unit>
<trans-unit id="se9b1fec72ffd8f48">
  <source>Local</source>
</trans-unit>
<trans-unit id="s13de04774ff0f210">
  <source>Docker URL</source>
</trans-unit>
<trans-unit id="h8c1aa2d523f94f36">
  <source>Can be in the format of <x id="0" equiv-text="&lt;code&gt;"/>unix://<x id="1" equiv-text="&lt;/code&gt;"/> when connecting to a local
                            docker daemon, using <x id="2" equiv-text="&lt;code&gt;"/>ssh://<x id="3" equiv-text="&lt;/code&gt;"/> to connect via SSH, or
                            <x id="4" equiv-text="&lt;code&gt;"/>https://:2376<x id="5" equiv-text="&lt;/code&gt;"/> when connecting to a remote system.</source>
</trans-unit>
<trans-unit id="saf1d289e3137c2ea">
  <source>CA which the endpoint's Certificate is verified against. Can be left empty for no validation.</source>
</trans-unit>
<trans-unit id="s0f2e070d38cd36df">
  <source>TLS Authentication Certificate/SSH Keypair</source>
</trans-unit>
<trans-unit id="s2f58bb9905d2b76f">
  <source>Certificate/Key used for authentication. Can be left empty for no authentication.</source>
</trans-unit>
<trans-unit id="s8b33660e2ed7212c">
  <source>When connecting via SSH, this keypair is used for authentication.</source>
</trans-unit>
<trans-unit id="sa668bd79645c3e06">
  <source>Kubeconfig</source>
</trans-unit>
<trans-unit id="sa85cfb884c17d85d">
  <source>Verify Kubernetes API SSL Certificate</source>
</trans-unit>
<trans-unit id="se78364ee913ae2bd">
  <source>New outpost integration</source>
</trans-unit>
<trans-unit id="s68d69ad0271c8ef6">
  <source>Create a new outpost integration.</source>
</trans-unit>
<trans-unit id="s1b85e6ac2978a2c0">
  <source>Outpost integrations</source>
</trans-unit>
<trans-unit id="sec55a3a7f18615ec">
  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
</trans-unit>
<trans-unit id="sae239213b7c70376">
  <source>State</source>
</trans-unit>
<trans-unit id="sb96629f50f2e7fab">
  <source>Unhealthy</source>
</trans-unit>
<trans-unit id="sa8e255492bb6ae0d">
  <source>Outpost integration(s)</source>
</trans-unit>
<trans-unit id="s9d18948d25c68d66">
  <source>Successfully generated certificate-key pair.</source>
</trans-unit>
<trans-unit id="s592425143c4f5834">
  <source>Subject-alt name</source>
</trans-unit>
<trans-unit id="se9d0f12f95b14095">
  <source>Optional, comma-separated SubjectAlt Names.</source>
</trans-unit>
<trans-unit id="s7609ee54e8a7b05a">
  <source>Validity days</source>
</trans-unit>
<trans-unit id="sb0680e5f8782db1e">
  <source>Private key Algorithm</source>
</trans-unit>
<trans-unit id="sa03cbf19feebd249">
  <source>RSA</source>
</trans-unit>
<trans-unit id="sfbfccbd3e395c147">
  <source>ECDSA</source>
</trans-unit>
<trans-unit id="sebea299e52db4242">
  <source>Algorithm used to generate the private key.</source>
</trans-unit>
<trans-unit id="s4c24b2baa377e870">
  <source>Successfully updated certificate-key pair.</source>
</trans-unit>
<trans-unit id="s122f308b5f198ba7">
  <source>Successfully created certificate-key pair.</source>
</trans-unit>
<trans-unit id="s08a8716c214a0efb">
  <source>PEM-encoded Certificate data.</source>
</trans-unit>
<trans-unit id="s6e612e5a6a359bbb">
  <source>Optional Private Key. If this is set, you can use this keypair for encryption.</source>
</trans-unit>
<trans-unit id="s27ac7a47b390e3cb">
  <source>Certificate-Key Pairs</source>
</trans-unit>
<trans-unit id="sb72ebab438cb2983">
  <source>Import certificates of external providers or create certificates to sign requests with.</source>
</trans-unit>
<trans-unit id="s4b5af7736aedd6c1">
  <source>Private key available?</source>
</trans-unit>
<trans-unit id="sc1ce2f758935ff48">
  <source>Managed by authentik</source>
</trans-unit>
<trans-unit id="sf53a78d889b6c775">
  <source>Managed by authentik (Discovered)</source>
</trans-unit>
<trans-unit id="sef50d248448e0df1">
  <source>Yes (<x id="0" equiv-text="${item.keyType?.toUpperCase()}"/>)</source>
</trans-unit>
<trans-unit id="s33aa05f435c29753">
  <source>Update Certificate-Key Pair</source>
</trans-unit>
<trans-unit id="seffdf887fed7f668">
  <source>Certificate Fingerprint (SHA1)</source>
</trans-unit>
<trans-unit id="sdd6b8b56a811080e">
  <source>Certificate Fingerprint (SHA256)</source>
</trans-unit>
<trans-unit id="s2a2d3e7c379e9518">
  <source>Certificate Subject</source>
</trans-unit>
<trans-unit id="s351246c52548086a">
  <source>Download Certificate</source>
</trans-unit>
<trans-unit id="s47bd537a3bcebf19">
  <source>Download Private key</source>
</trans-unit>
<trans-unit id="se1d2545eda4b1600">
  <source>Import Existing Certificate-Key Pair</source>
</trans-unit>
<trans-unit id="s45cb501abd43ba52">
  <source>Generate</source>
</trans-unit>
<trans-unit id="sb3d5c0a0501669df">
  <source>Generate New Certificate-Key Pair</source>
</trans-unit>
<trans-unit id="s8f36fb59c31d33eb">
  <source>Link Title</source>
</trans-unit>
<trans-unit id="s634e2fd82c397576">
  <source>Successfully updated settings.</source>
</trans-unit>
<trans-unit id="sb8e4edaea6f1d935">
  <source>Avatars</source>
</trans-unit>
<trans-unit id="s945856050217c828">
  <source>Configure how authentik should show avatars for users. The following values can be set:</source>
</trans-unit>
<trans-unit id="sf4ef4c8ce713f775">
  <source>Disables per-user avatars and just shows a 1x1 pixel transparent picture</source>
</trans-unit>
<trans-unit id="s5446842a7e4a963b">
  <source>Uses gravatar with the user's email address</source>
</trans-unit>
<trans-unit id="s35363b9e1cc2abd3">
  <source>Generated avatars based on the user's name</source>
</trans-unit>
<trans-unit id="s48110ca292cad513">
  <source>Any URL: If you want to use images hosted on another server, you can set any URL. Additionally, these placeholders can be used:</source>
</trans-unit>
<trans-unit id="sbe1dfda044bdc93b">
  <source>The user's username</source>
</trans-unit>
<trans-unit id="s653f257c9c2d4dc5">
  <source>The email address, md5 hashed</source>
</trans-unit>
<trans-unit id="s9c9183cd80916b4f">
  <source>The user's UPN, if set (otherwise an empty string)</source>
</trans-unit>
<trans-unit id="h4963ed14d7e239a9">
  <source>An attribute path like
                                    <x id="0" equiv-text="&lt;code&gt;"/>attributes.something.avatar<x id="1" equiv-text="&lt;/code&gt;"/>, which can be used in
                                    combination with the file field to allow users to upload custom
                                    avatars for themselves.</source>
</trans-unit>
<trans-unit id="s4c80c34a67a6f1c9">
  <source>Multiple values can be set, comma-separated, and authentik will fallback to the next mode when no avatar could be found.</source>
</trans-unit>
<trans-unit id="h2fafcc3ebafea2f8">
  <source>For example, setting this to <x id="0" equiv-text="&lt;code&gt;"/>gravatar,initials<x id="1" equiv-text="&lt;/code&gt;"/> will
                                attempt to get an avatar from Gravatar, and if the user has not
                                configured on there, it will fallback to a generated avatar.</source>
</trans-unit>
<trans-unit id="s5faec5eb5faf62ac">
  <source>Allow users to change name</source>
</trans-unit>
<trans-unit id="s078ffec0257621c0">
  <source>Enable the ability for users to change their name.</source>
</trans-unit>
<trans-unit id="s456d88f3679190fd">
  <source>Allow users to change email</source>
</trans-unit>
<trans-unit id="s5fc6c14d106f40d3">
  <source>Enable the ability for users to change their email.</source>
</trans-unit>
<trans-unit id="s628e414bb2367057">
  <source>Allow users to change username</source>
</trans-unit>
<trans-unit id="s6d816a95ca43a99d">
  <source>Enable the ability for users to change their username.</source>
</trans-unit>
<trans-unit id="s84c5a011acd608c9">
  <source>Event retention</source>
</trans-unit>
<trans-unit id="s2536ac8d32d2e63f">
  <source>Duration after which events will be deleted from the database.</source>
</trans-unit>
<trans-unit id="h3ac79dc5cc553329">
  <source>When using an external logging solution for archiving, this can be
                                set to <x id="0" equiv-text="&lt;code&gt;"/>minutes=5<x id="1" equiv-text="&lt;/code&gt;"/>.</source>
</trans-unit>
<trans-unit id="s44536d20bb5c8257">
  <source>This setting only affects new Events, as the expiration is saved per-event.</source>
</trans-unit>
<trans-unit id="se37ac6cf9c72f21a">
  <source>Reputation: lower limit</source>
</trans-unit>
<trans-unit id="sa634ffa797037aac">
  <source>Reputation cannot decrease lower than this value. Zero or negative.</source>
</trans-unit>
<trans-unit id="s862986ce8e70edd7">
  <source>Reputation: upper limit</source>
</trans-unit>
<trans-unit id="sdd04913b3b46cf30">
  <source>Reputation cannot increase higher than this value. Zero or positive.</source>
</trans-unit>
<trans-unit id="s57b52b60ed5e2bc7">
  <source>Footer links</source>
</trans-unit>
<trans-unit id="s92205c10ba1f0f4c">
  <source>This option configures the footer links on the flow executor pages. The URL is limited to web and mail addresses. If the name is left blank, the URL will be shown.</source>
</trans-unit>
<trans-unit id="s166b59f3cc5d8ec3">
  <source>GDPR compliance</source>
</trans-unit>
<trans-unit id="sb8b23770f899e5bb">
  <source>When enabled, all the events caused by a user will be deleted upon the user's deletion.</source>
</trans-unit>
<trans-unit id="s29501761df0fe837">
  <source>Impersonation</source>
</trans-unit>
<trans-unit id="s8f503553d8432487">
  <source>Globally enable/disable impersonation.</source>
</trans-unit>
<trans-unit id="s29fab8887734192f">
  <source>Require reason for impersonation</source>
</trans-unit>
<trans-unit id="sc24af6de78468cfa">
  <source>Require administrators to provide a reason for impersonating a user.</source>
</trans-unit>
<trans-unit id="s4888252cbd785175">
  <source>Default token duration</source>
</trans-unit>
<trans-unit id="s25c80a16a07871ba">
  <source>Default duration for generated tokens</source>
</trans-unit>
<trans-unit id="se5c9ffc025fdf61d">
  <source>Default token length</source>
</trans-unit>
<trans-unit id="sa6b2c110466d1754">
  <source>Default length of generated tokens</source>
</trans-unit>
<trans-unit id="s2de7890b100c4f4c">
  <source>Flags</source>
</trans-unit>
<trans-unit id="s33f85f24c0f5f008">
  <source>Save</source>
</trans-unit>
<trans-unit id="see1eb81c1f734079">
  <source>System settings</source>
</trans-unit>
<trans-unit id="see2bcbc11bb91960">
  <source>Successfully updated instance.</source>
</trans-unit>
<trans-unit id="s9e51d6de369f320b">
  <source>Successfully created instance.</source>
</trans-unit>
<trans-unit id="s92e91071c6a45eb4">
  <source>Disabled blueprints are never applied.</source>
</trans-unit>
<trans-unit id="sf63c89c0604c288f">
  <source>Local path</source>
</trans-unit>
<trans-unit id="sd6422f7004036cdd">
  <source>OCI Registry</source>
</trans-unit>
<trans-unit id="sa556d7b744364dcf">
  <source>OCI URL</source>
</trans-unit>
<trans-unit id="h3b1f38bb34f8b1b6">
  <source> A valid OCI manifest URL, prefixed with the protocol
                                              e.g. <x id="0" equiv-text="&lt;code&gt;"/>oci://registry.domain.tld/path/to/manifest<x id="1" equiv-text="&lt;/code&gt;"/></source>
</trans-unit>
<trans-unit id="sc19e397bee1e67f7">
  <source>Read more about</source>
</trans-unit>
<trans-unit id="sa777a614e18a35cd">
  <source>OCI Support</source>
</trans-unit>
<trans-unit id="sfae395b94a5a0040">
  <source>Blueprint</source>
</trans-unit>
<trans-unit id="s7e1342d37124b65b">
  <source>Configure the blueprint context, used for templating.</source>
</trans-unit>
<trans-unit id="s6ec8c9d11310300a">
  <source>Orphaned</source>
</trans-unit>
<trans-unit id="saab79cd956ee56a9">
  <source>Blueprints</source>
</trans-unit>
<trans-unit id="s6835db03209b4f94">
  <source>Automate and template configuration within authentik.</source>
</trans-unit>
<trans-unit id="s23de62f931f7d754">
  <source>Last applied</source>
</trans-unit>
<trans-unit id="s2708cac1f4942708">
  <source>Blueprint(s)</source>
</trans-unit>
<trans-unit id="s880b8b70b22f9977">
  <source>Update Blueprint</source>
</trans-unit>
<trans-unit id="s08d24327ec788e78">
  <source>Edit "<x id="0" equiv-text="${item.name}"/>" blueprint</source>
</trans-unit>
<trans-unit id="s6f8d15b5494ac41a">
  <source>Apply "<x id="0" equiv-text="${item.name}"/>" blueprint</source>
</trans-unit>
<trans-unit id="sb8f855b49234b81b">
  <source>Apply</source>
</trans-unit>
<trans-unit id="sef3d102324bf8561">
  <source>Create Blueprint Instance</source>
</trans-unit>
<trans-unit id="s0e427111d750cc02">
  <source>Successfully updated license.</source>
</trans-unit>
<trans-unit id="s06ae64e621f302eb">
  <source>Successfully created license.</source>
</trans-unit>
<trans-unit id="s2905c425adae99bd">
  <source>Install ID</source>
</trans-unit>
<trans-unit id="sb18ec434a8a3aafb">
  <source>License key</source>
</trans-unit>
<trans-unit id="sd923f95605fed7b2">
  <source>Expired</source>
</trans-unit>
<trans-unit id="s86959994f28077dc">
  <source>Expiring soon</source>
</trans-unit>
<trans-unit id="sc60a5fba70bf5a53">
  <source>Unlicensed</source>
</trans-unit>
<trans-unit id="s4f9880ce82953741">
  <source>Read Only</source>
</trans-unit>
<trans-unit id="s4220dda46d622211">
  <source>Valid</source>
</trans-unit>
<trans-unit id="sdc94711a2eb66a45">
  <source>Current license status</source>
</trans-unit>
<trans-unit id="se10fb73c1f1039c5">
  <source>Overall license status</source>
</trans-unit>
<trans-unit id="sc4804358f202968c">
  <source>Internal user usage</source>
</trans-unit>
<trans-unit id="s087d6f07b52b30ec">
  <source><x id="0" equiv-text="${internalUserPercentage &lt; Infinity ? internalUserPercentage : &quot;∞&quot;}"/>%</source>
</trans-unit>
<trans-unit id="sae72e1569d34fb02">
  <source>External user usage</source>
</trans-unit>
<trans-unit id="s2e109263b73c12d5">
  <source>Licenses</source>
</trans-unit>
<trans-unit id="s9ce7cc01fb9b5b53">
  <source>Manage enterprise licenses</source>
</trans-unit>
<trans-unit id="sf9ebf11ac2645820">
  <source>No licenses found.</source>
</trans-unit>
<trans-unit id="sd49099e9522635f4">
  <source>License(s)</source>
</trans-unit>
<trans-unit id="sf58825457d61c429">
  <source>Forecast internal users</source>
</trans-unit>
<trans-unit id="sde9a3f41977ec1f8">
  <source>Estimated user count one year from now based on <x id="0" equiv-text="${internalUsers}"/> current internal users and <x id="1" equiv-text="${forecastedInternalUsers}"/> forecasted internal users.</source>
</trans-unit>
<trans-unit id="s531571491deb239a">
  <source>Approximately</source>
</trans-unit>
<trans-unit id="s4557b6b9da258643">
  <source>Forecast external users</source>
</trans-unit>
<trans-unit id="sf52479d6daa0a4a8">
  <source>Estimated user count one year from now based on <x id="0" equiv-text="${externalUsers}"/> current external users and <x id="1" equiv-text="${forecastedExternalUsers}"/> forecasted external users.</source>
</trans-unit>
<trans-unit id="sd22bd01bdf28c548">
  <source>Cumulative license expiry</source>
</trans-unit>
<trans-unit id="sc62e587718608e85">
  <source>No expiry</source>
</trans-unit>
<trans-unit id="s0dd031b58ed4017c">
  <source>Internal: <x id="0" equiv-text="${item.internalUsers}"/></source>
</trans-unit>
<trans-unit id="s57b07e524f8f5c2a">
  <source>External: <x id="0" equiv-text="${item.externalUsers}"/></source>
</trans-unit>
<trans-unit id="sdeb6cee42435dd07">
  <source>Update License</source>
</trans-unit>
<trans-unit id="s8c4bc6e515949112">
  <source>Your Install ID</source>
</trans-unit>
<trans-unit id="sb2cbd06f8e25b47e">
  <source>Go to Customer Portal</source>
</trans-unit>
<trans-unit id="s31f1afc1bfe1cb3a">
  <source>Learn more</source>
</trans-unit>
<trans-unit id="s6196153c4b0c1ea0">
  <source>Install</source>
</trans-unit>
<trans-unit id="s0285b4bd69130fa3">
  <source>Install License</source>
</trans-unit>
<trans-unit id="s1cdeecda0baf365e">
  <source>Release</source>
</trans-unit>
<trans-unit id="s35429c9dc2319aea">
  <source>Development</source>
</trans-unit>
<trans-unit id="s5937938934a777ab">
  <source>UI Version</source>
</trans-unit>
<trans-unit id="s3fe3ff490adaaa63">
  <source>Build</source>
</trans-unit>
<trans-unit id="s42aea5c6d3d1fce7">
  <source>Python version</source>
</trans-unit>
<trans-unit id="s5c67b6c66029e5b2">
  <source>Platform</source>
</trans-unit>
<trans-unit id="se8574bce64d9c1f8">
  <source>Kernel</source>
</trans-unit>
<trans-unit id="s3fbe63b7fcfe3e91">
  <source>OpenSSL</source>
</trans-unit>
<trans-unit id="s7be2df39f727faa2">
  <source>Enterprise</source>
</trans-unit>
<trans-unit id="sd51d6a39208696cc">
  <source>Collapse <x id="0" equiv-text="${this.label}"/></source>
</trans-unit>
<trans-unit id="scce64bcfb0a73ad7">
  <source>Expand <x id="0" equiv-text="${this.label}"/></source>
</trans-unit>
<trans-unit id="sfe1fb536cab6c0f5">
  <source><x id="0" equiv-text="${this.label}"/> navigation</source>
</trans-unit>
<trans-unit id="s8849ece8c65e3a18">
  <source>Dashboards</source>
</trans-unit>
<trans-unit id="s0393ac07cf8a3097">
  <source>Endpoint Devices</source>
</trans-unit>
<trans-unit id="s4f1ad6b48a5df506">
  <source>Logs</source>
</trans-unit>
<trans-unit id="sd12f594a3184c056">
  <source>Customization</source>
</trans-unit>
<trans-unit id="s1a65ee08832fbfe2">
  <source>Flows and Stages</source>
</trans-unit>
<trans-unit id="sc0829ee663ced008">
  <source>Directory</source>
</trans-unit>
<trans-unit id="sc6b4ebd37b7a91c7">
  <source>Tokens and App passwords</source>
</trans-unit>
<trans-unit id="sa81e2cdaf6921adc">
  <source>System</source>
</trans-unit>
<trans-unit id="s5515a897ae98bed9">
  <source>Certificates</source>
</trans-unit>
<trans-unit id="s6b79e73ca77148a0">
  <source>Outpost Integrations</source>
</trans-unit>
<trans-unit id="s7df5b92a3f93544f">
  <source>Warning: The current user count has exceeded the configured licenses.</source>
</trans-unit>
<trans-unit id="s9f4d6296b906d591">
  <source>Warning: One or more license(s) have expired.</source>
</trans-unit>
<trans-unit id="s3b016caea59af3ef">
  <source>Warning: One or more license(s) will expire within the next 2 weeks.</source>
</trans-unit>
<trans-unit id="sd8a5f7269b7ac7a3">
  <source>Caution: This authentik instance has entered read-only mode due to expired/exceeded licenses.</source>
</trans-unit>
<trans-unit id="s0141f42936495787">
  <source>Click here for more info.</source>
</trans-unit>
<trans-unit id="se8c58e65674b6847">
  <source>This authentik instance uses a Trial license.</source>
</trans-unit>
<trans-unit id="s6ee52309e586eb18">
  <source>This authentik instance uses a Non-production license.</source>
</trans-unit>
<trans-unit id="s1381314790b50b1f">
  <source>A newer version (<x id="0" equiv-text="${this.version.versionCurrent}"/>) of the UI is available.</source>
</trans-unit>
<trans-unit id="sf6707428adeba590">
  <source>API drawer</source>
</trans-unit>
<trans-unit id="s32a3efa23718e713">
  <source>API Requests</source>
</trans-unit>
<trans-unit id="sddb3b0176f437721">
  <source>Open API Browser</source>
</trans-unit>
<trans-unit id="sf3b5b13c6b55eb4c">
  <source>Close API drawer</source>
</trans-unit>
<trans-unit id="sfa991acd65f738bf">
  <source>View details for <x id="0" equiv-text="${label}"/></source>
</trans-unit>
<trans-unit id="s5bb4026da28b7914">
  <source>Mark as read</source>
</trans-unit>
<trans-unit id="s6e6e737601f44b2c">
  <source>Successfully cleared notifications</source>
</trans-unit>
<trans-unit id="s61ffea061fae0af4">
  <source>No notifications found.</source>
</trans-unit>
<trans-unit id="scf8d5cdc8b434982">
  <source>You don't have any notifications currently.</source>
</trans-unit>
<trans-unit id="s5be3c6d61cd9182f">
  <source>Notifications</source>
</trans-unit>
<trans-unit id="sf1a3d030efd11f28">
  <source>Open about dialog</source>
</trans-unit>
<trans-unit id="s95b96d7ead27527f">
  <source>Product name</source>
</trans-unit>
<trans-unit id="s68b6d404c3349b18">
  <source>Product version</source>
</trans-unit>
<trans-unit id="s358e08de4fbebf51">
  <source>Version <x id="0" equiv-text="${this.version?.versionCurrent || &quot;&quot;}"/></source>
</trans-unit>
<trans-unit id="se0d7715f3211d220">
  <source>Global navigation</source>
</trans-unit>
<trans-unit id="s67ac11d47f1ce794">
  <source>WebAuthn requires this page to be accessed via HTTPS.</source>
</trans-unit>
<trans-unit id="se9e9e1d6799b86a5">
  <source>WebAuthn not supported by browser.</source>
</trans-unit>
<trans-unit id="sab85321d3b0840b7">
  <source>API request failed</source>
</trans-unit>
<trans-unit id="sa4be93eb7f4e51e3">
  <source>Site links</source>
</trans-unit>
<trans-unit id="s6fe64b4625517333">
  <source>Powered by authentik</source>
</trans-unit>
<trans-unit id="sd766cdc29b25ff95">
  <source>Authenticating with Apple...</source>
</trans-unit>
<trans-unit id="s2c8189544e3ea679">
  <source>Retry</source>
</trans-unit>
<trans-unit id="s420d2cdedcaf8cd0">
  <source>Authenticating with Plex...</source>
</trans-unit>
<trans-unit id="s2ddbebcb8a49b005">
  <source>Waiting for authentication...</source>
</trans-unit>
<trans-unit id="sb15fe7b9d09bb419">
  <source>If no Plex popup opens, click the button below.</source>
</trans-unit>
<trans-unit id="sbc625b4c669b9ce8">
  <source>Open login</source>
</trans-unit>
<trans-unit id="sf376ae7e9ef41c1a">
  <source>Authenticating with Telegram...</source>
</trans-unit>
<trans-unit id="s76ea993fdc8503d8">
  <source>Click the button below to start.</source>
</trans-unit>
<trans-unit id="s15d6fabebb4ef2d8">
  <source>User information</source>
</trans-unit>
<trans-unit id="s9bd9ba84819493d4">
  <source>Something went wrong! Please try again later.</source>
</trans-unit>
<trans-unit id="s4090dd0c0e45988b">
  <source>Request ID</source>
</trans-unit>
<trans-unit id="s4d7fe7be1c49896c">
  <source>You may close this page now.</source>
</trans-unit>
<trans-unit id="sf8c76d5fb408de7b">
  <source>You're about to be redirect to the following URL.</source>
</trans-unit>
<trans-unit id="s197420b40df164f8">
  <source>Follow redirect</source>
</trans-unit>
<trans-unit id="s3ab772345f78aee0">
  <source>Flow inspector</source>
</trans-unit>
<trans-unit id="sb69e43f2f6bd1b54">
  <source>Close flow inspector</source>
</trans-unit>
<trans-unit id="s502884e1977b2c06">
  <source>Next stage</source>
</trans-unit>
<trans-unit id="sb3fa80ccfa97ee54">
  <source>Stage name</source>
</trans-unit>
<trans-unit id="sbea3c1e4f2fd623d">
  <source>Stage kind</source>
</trans-unit>
<trans-unit id="s2bc8aa1740d3da34">
  <source>Stage object</source>
</trans-unit>
<trans-unit id="sc3e1c4f1fff8e1ca">
  <source>This flow is completed.</source>
</trans-unit>
<trans-unit id="s342eccabf83c9bde">
  <source>Plan history</source>
</trans-unit>
<trans-unit id="sb2f307e79d20bb56">
  <source>Current plan context</source>
</trans-unit>
<trans-unit id="sa13e6c8310000e30">
  <source>Session ID</source>
</trans-unit>
<trans-unit id="s857cf5aa8955cf5c">
  <source>Flow inspector loading</source>
</trans-unit>
<trans-unit id="sa11e92683c5860c7">
  <source>Request has been denied.</source>
</trans-unit>
<trans-unit id="s2f7f35f6a5b733f5">
  <source>Show password</source>
</trans-unit>
<trans-unit id="s452f791e0ff6a13e">
  <source>Hide password</source>
</trans-unit>
<trans-unit id="scf5ce91bfba10a61">
  <source>Please enter your password</source>
</trans-unit>
<trans-unit id="s6bb30c61df4cf486">
  <source>Caps Lock is enabled.</source>
</trans-unit>
<trans-unit id="s8d6236ad153d42c0">
  <source>CAPTCHA challenge</source>
</trans-unit>
<trans-unit id="s30d6ff9e15e0a40a">
  <source>Verifying...</source>
</trans-unit>
<trans-unit id="s1c336c2d6cef77b3">
  <source>Remember me on this device</source>
</trans-unit>
<trans-unit id="seb6ab868740e4e36">
  <source>Continue with <x id="0" equiv-text="${source.name}"/></source>
</trans-unit>
<trans-unit id="sc4eedb434536bdb4">
  <source>Need an account?</source>
</trans-unit>
<trans-unit id="s38f774cd7e9b9dad">
  <source>Sign up.</source>
</trans-unit>
<trans-unit id="sa03aa46068460c95">
  <source>Forgot username or password?</source>
</trans-unit>
<trans-unit id="s05a941e4b4bfca9f">
  <source>Additional actions</source>
</trans-unit>
<trans-unit id="s6ecfc18dbfeedd76">
  <source>Select one of the options below to continue.</source>
</trans-unit>
<trans-unit id="s8cc0075913c67566">
  <source>Enter the email associated with your account, and we'll send you a link to reset your password.</source>
</trans-unit>
<trans-unit id="s091d5407b5b32e84">
  <source>Or</source>
</trans-unit>
<trans-unit id="s670ad066cc0e50a3">
  <source>Login to continue to <x id="0" equiv-text="${this.challenge.applicationPre}"/>.</source>
</trans-unit>
<trans-unit id="se5fd752dbbc3cd28">
  <source>Use a security key</source>
</trans-unit>
<trans-unit id="s53dddf1733e26c98">
  <source>Login sources</source>
</trans-unit>
<trans-unit id="s85366fac18679f28">
  <source>Forgot password?</source>
</trans-unit>
<trans-unit id="s14c552fb0a4c0186">
  <source>Application requires following permissions:</source>
</trans-unit>
<trans-unit id="s7073489bb01b3c24">
  <source>Application already has access to the following permissions:</source>
</trans-unit>
<trans-unit id="s98dc556f8bf707dc">
  <source>Application requires following new permissions:</source>
</trans-unit>
<trans-unit id="s06bfe45ffef2cf60">
  <source>Stage name: <x id="0" equiv-text="${this.challenge?.name}"/></source>
</trans-unit>
<trans-unit id="sbd19064fc3f405c1">
  <source>Check your Inbox for a verification email.</source>
</trans-unit>
<trans-unit id="s8aff572e64b7936b">
  <source>Send Email again.</source>
</trans-unit>
<trans-unit id="sc091f75b942ec081">
  <source>QR-Code to setup a time-based one-time password</source>
</trans-unit>
<trans-unit id="s6db67c7681b8be6e">
  <source>Copy time-based one-time password configuration</source>
</trans-unit>
<trans-unit id="s43e859bf711e3599">
  <source>Copy TOTP Config</source>
</trans-unit>
<trans-unit id="s90064dd5c4dde2c6">
  <source>Please scan the QR code above using the Microsoft Authenticator, Google Authenticator, or other authenticator apps on your device, and enter the code the device displays below to finish setting up the MFA device.</source>
</trans-unit>
<trans-unit id="sa5562e0115ffbccd">
  <source>Time-based one-time password</source>
</trans-unit>
<trans-unit id="s40f44c0d88807fd5">
  <source>TOTP Code</source>
</trans-unit>
<trans-unit id="s95474cc8c73dd9c0">
  <source>Type your TOTP code...</source>
</trans-unit>
<trans-unit id="s168d0c138b63286d">
  <source>Type your time-based one-time password code.</source>
</trans-unit>
<trans-unit id="sc2ec367e3108fe65">
  <source>Duo activation QR code</source>
</trans-unit>
<trans-unit id="sc5668cb23167e9bb">
  <source>Alternatively, if your current device has Duo installed, click on this link:</source>
</trans-unit>
<trans-unit id="s721d94ae700b5dfd">
  <source>Duo activation</source>
</trans-unit>
<trans-unit id="s708d9a4a0db0be8f">
  <source>Check status</source>
</trans-unit>
<trans-unit id="s31fba571065f2c87">
  <source>Make sure to keep these tokens in a safe place.</source>
</trans-unit>
<trans-unit id="s3f8a07912545e72e">
  <source>Configure your email</source>
</trans-unit>
<trans-unit id="scedf77e8b75cad5a">
  <source>Please enter your email address.</source>
</trans-unit>
<trans-unit id="s3643189d1abbb7f4">
  <source>Code</source>
</trans-unit>
<trans-unit id="s7cdd62c100b6b17b">
  <source>Please enter the code you received via email</source>
</trans-unit>
<trans-unit id="sc0a0c87d5c556c38">
  <source>Phone number</source>
</trans-unit>
<trans-unit id="s04c1210202f48dc9">
  <source>Please enter your Phone number.</source>
</trans-unit>
<trans-unit id="seb0c08d9f233bbfe">
  <source>Please enter the code you received via SMS</source>
</trans-unit>
<trans-unit id="s98bb2ae796f1ceef">
  <source>Select another authentication method</source>
</trans-unit>
<trans-unit id="s844fea0bfb10a72a">
  <source>Authentication code</source>
</trans-unit>
<trans-unit id="s7abc9d08b0f70fd6">
  <source>Static token</source>
</trans-unit>
<trans-unit id="s14e8ac4d377a1a99">
  <source>Type an authentication code...</source>
</trans-unit>
<trans-unit id="s39002897db60bb28">
  <source>Sending Duo push notification...</source>
</trans-unit>
<trans-unit id="sd2b8c1caa0340ed6">
  <source>Failed to authenticate</source>
</trans-unit>
<trans-unit id="s363abde8a254ea5f">
  <source>Authentication failed. Please try again.</source>
</trans-unit>
<trans-unit id="sffef1a8596bc58bb">
  <source>Authenticating...</source>
</trans-unit>
<trans-unit id="se409d01b52c4e12f">
  <source>Retry authentication</source>
</trans-unit>
<trans-unit id="s8d857061510fe794">
  <source>Duo push-notifications</source>
</trans-unit>
<trans-unit id="s47490298c17b753a">
  <source>Receive a push notification on your device.</source>
</trans-unit>
<trans-unit id="sd6a025d66f2637d1">
  <source>Traditional authenticator</source>
</trans-unit>
<trans-unit id="sb25e689e00c61829">
  <source>Use a code-based authenticator.</source>
</trans-unit>
<trans-unit id="s9e568afec3810bfe">
  <source>Recovery keys</source>
</trans-unit>
<trans-unit id="s8bb0a1b672b52954">
  <source>In case you lose access to your primary authenticators.</source>
</trans-unit>
<trans-unit id="s97f2dc19fa556a6a">
  <source>SMS</source>
</trans-unit>
<trans-unit id="s0e516232f2ab4e04">
  <source>Tokens sent via SMS.</source>
</trans-unit>
<trans-unit id="s833cfe815918c143">
  <source>Tokens sent via email.</source>
</trans-unit>
<trans-unit id="s76d21e163887ddd1">
  <source>Unknown device</source>
</trans-unit>
<trans-unit id="sf0ceaf3116e31fd4">
  <source>An unknown device class was provided.</source>
</trans-unit>
<trans-unit id="s610fced3957d0471">
  <source>Select an authentication method</source>
</trans-unit>
<trans-unit id="s958cedec1cb3fc52">
  <source>Select a configuration stage</source>
</trans-unit>
<trans-unit id="sac17f177f884e238">
  <source>Stay signed in?</source>
</trans-unit>
<trans-unit id="s859b2e00391da380">
  <source>Select Yes to reduce the number of times you're asked to sign in.</source>
</trans-unit>
<trans-unit id="s23da7320dee28a60">
  <source>Device Code</source>
</trans-unit>
<trans-unit id="s3cd84e82e83e35ad">
  <source>Please enter your code</source>
</trans-unit>
<trans-unit id="s455a8fc21077e7f9">
  <source>You've successfully authenticated your device.</source>
</trans-unit>
<trans-unit id="sac88482c48453fc8">
  <source>You've logged out of <x id="0" equiv-text="${challenge.applicationName}"/>. You can go back to the overview to launch another application, or log out of your authentik account.</source>
</trans-unit>
<trans-unit id="s3108167b562674e2">
  <source>Go back to overview</source>
</trans-unit>
<trans-unit id="sdb749e793de55478">
  <source>Log out of <x id="0" equiv-text="${challenge.brandName}"/></source>
</trans-unit>
<trans-unit id="s521681ed1d5ff814">
  <source>Log back into <x id="0" equiv-text="${challenge.applicationName}"/></source>
</trans-unit>
<trans-unit id="s78869b8b2bc26d0d">
  <source>SAML Provider</source>
</trans-unit>
<trans-unit id="sca83a1f9227f74b9">
  <source>SAML logout complete</source>
</trans-unit>
<trans-unit id="s7b90eab7969ae056">
  <source>Redirecting to SAML provider: <x id="0" equiv-text="${providerName}"/></source>
</trans-unit>
<trans-unit id="s3e6174b645d96835">
  <source>Posting logout request to SAML provider: <x id="0" equiv-text="${providerName}"/></source>
</trans-unit>
<trans-unit id="s0b1ffff8bedd6b8a">
  <source>Unknown Provider</source>
</trans-unit>
<trans-unit id="s777e86d562523c85">
  <source>Logging out of providers...</source>
</trans-unit>
<trans-unit id="s4980379bf8461c2d">
  <source>Single Logout</source>
</trans-unit>
<trans-unit id="s3736936aac1adc2e">
  <source>Open flow inspector</source>
</trans-unit>
<trans-unit id="sa17ce23517e56461">
  <source>Authentication form</source>
</trans-unit>
<trans-unit id="s7fa4e5e409d43573">
  <source>Error creating credential: <x id="0" equiv-text="${err}"/></source>
</trans-unit>
<trans-unit id="s9d95f09deb601f34">
  <source>Server validation of credential failed: <x id="0" equiv-text="${err}"/></source>
</trans-unit>
<trans-unit id="sb0821a9e92cac5eb">
  <source>Failed to register. Please try again.</source>
</trans-unit>
<trans-unit id="s238784fc1dc672ae">
  <source>Registering...</source>
</trans-unit>
<trans-unit id="s009bd1c98a9f5de2">
  <source>Failed to register</source>
</trans-unit>
<trans-unit id="sb166ce92e8e807d6">
  <source>Retry registration</source>
</trans-unit>
<trans-unit id="sc92905d14a9421f3">
  <source>Idle</source>
</trans-unit>
<trans-unit id="s4b052cb287d81da7">
  <source>Connecting</source>
</trans-unit>
<trans-unit id="s123b7254b44dd148">
  <source>Waiting</source>
</trans-unit>
<trans-unit id="s82a4e28ab5b56670">
  <source>Connected</source>
</trans-unit>
<trans-unit id="sd669c8ff49c068ad">
  <source>Disconnecting</source>
</trans-unit>
<trans-unit id="sfc2c3bd345c0128a">
  <source>Disconnected</source>
</trans-unit>
<trans-unit id="s28b99b59541f54ca">
  <source>Connection failed after <x id="0" equiv-text="${this.connectionAttempt}"/> attempts.</source>
</trans-unit>
<trans-unit id="s7c7d956418e1c8c8">
  <source>Re-connecting in <x id="0" equiv-text="${Math.max(1, delay / 1000)}"/> second(s).</source>
</trans-unit>
<trans-unit id="sfc003381f593d943">
  <source>Connecting...</source>
</trans-unit>
<trans-unit id="sa00a53efc9c70de5">
  <source>Please wait while the content is loading</source>
</trans-unit>
<trans-unit id="s31aa94a0b3c7edb2">
  <source>Select endpoint to connect to</source>
</trans-unit>
<trans-unit id="s7ea73e0b3b45e385">
  <source>application</source>
</trans-unit>
<trans-unit id="s33b2f30214a2e99d">
  <source>Actions for "<x id="0" equiv-text="${applicationName}"/>"</source>
</trans-unit>
<trans-unit id="sfa660d9e563c346f">
  <source>Edit application...</source>
</trans-unit>
<trans-unit id="s3fb39fc45e840f78">
  <source>Refer to documentation</source>
</trans-unit>
<trans-unit id="sc741dfb09d3395f0">
  <source>No Applications available.</source>
</trans-unit>
<trans-unit id="sf34026321b35315c">
  <source>Either no applications are defined, or you don’t have access to any.</source>
</trans-unit>
<trans-unit id="s45915ee0293ce5d4">
  <source>Ungrouped</source>
</trans-unit>
<trans-unit id="s1cf2298d92c327a6">
  <source>My Applications</source>
</trans-unit>
<trans-unit id="s65b433c52c2ad8eb">
  <source>Search for an application by name...</source>
</trans-unit>
<trans-unit id="s4facec1106c91cf9">
  <source>Search returned no results.</source>
</trans-unit>
<trans-unit id="s2656433a3b1f7e86">
  <source>My applications</source>
</trans-unit>
<trans-unit id="s91cfe4fac0957ee7">
  <source>Application list</source>
</trans-unit>
<trans-unit id="sf609e15e71559cd2">
  <source>Failed to fetch applications.</source>
</trans-unit>
<trans-unit id="s06c92148da82be0d">
  <source>Change your password</source>
</trans-unit>
<trans-unit id="sff50532a2d85e32e">
  <source>Change password</source>
</trans-unit>
<trans-unit id="s045c3b86aae073c1">
  <source>Delete account</source>
</trans-unit>
<trans-unit id="s4a6aa26413287069">
  <source>Successfully updated details</source>
</trans-unit>
<trans-unit id="s6fcd9b5a87ceccd6">
  <source>Open settings</source>
</trans-unit>
<trans-unit id="s8c05cccd470f6b5f">
  <source>No settings flow configured.</source>
</trans-unit>
<trans-unit id="sb546eb04425e07fa">
  <source>Update details</source>
</trans-unit>
<trans-unit id="s013620384af7c8b4">
  <source>Device type <x id="0" equiv-text="${device.verboseName}"/> cannot be edited</source>
</trans-unit>
<trans-unit id="s6a406aecb2c0e5c5">
  <source>Enroll</source>
</trans-unit>
<trans-unit id="s64de9eceb8172269">
  <source>Edit device</source>
</trans-unit>
<trans-unit id="s2e6c714bb95c18a3">
  <source>User settings</source>
</trans-unit>
<trans-unit id="s588796ee929a2e4c">
  <source>User details</source>
</trans-unit>
<trans-unit id="s332a5235948c1a1d">
  <source>Consent</source>
</trans-unit>
<trans-unit id="sff945d3f59b93c5e">
  <source>MFA Devices</source>
</trans-unit>
<trans-unit id="sd1031bddc66dc495">
  <source>Connect your user account to the services listed below, to allow you to login using the service instead of traditional credentials.</source>
</trans-unit>
<trans-unit id="s5599c62bb78c631f">
  <source>Admin interface</source>
</trans-unit>
<trans-unit id="ellipsis">
  <source>...</source>
  <note from="lit-localize">Truncation ellipsis</note>
</trans-unit>
<trans-unit id="s6cd96061d397f7b5">
  <source>Via <x id="0" equiv-text="${event.context.device.name}"/></source>
</trans-unit>
<trans-unit id="sb7ff80582ccd9348">
  <source>reference will be left dangling</source>
</trans-unit>
<trans-unit id="s0b7ddc0168e79ea2">
  <source>Failed to fetch files</source>
</trans-unit>
<trans-unit id="sdc4f1cfd587212b4">
  <source>You can also enter a URL (https://...), Font Awesome icon (fa://fa-icon-name), or upload a new file.</source>
</trans-unit>
<trans-unit id="s8015ac3b47172dc8">
  <source>Select from uploaded files, or type a Font Awesome icon (fa://fa-icon-name) or URL.</source>
</trans-unit>
<trans-unit id="s87616130c08b117c">
  <source>This type is deprecated.</source>
</trans-unit>
<trans-unit id="s40f4c2223ce87751">
  <source>No connectors configured. Navigate to Connectors in the sidebar and first create a connector.</source>
</trans-unit>
<trans-unit id="s70c2cd89201ecca9">
  <source>Home directory</source>
</trans-unit>
<trans-unit id="sb171d638b8af660d">
  <source>Successfully updated agent connector.</source>
</trans-unit>
<trans-unit id="s81c9554908463f94">
  <source>Successfully created agent connector.</source>
</trans-unit>
<trans-unit id="s306dd51d3be07bc7">
  <source>Device compliance settings</source>
</trans-unit>
<trans-unit id="sc2966702517b7af5">
  <source>Challenge certificate</source>
</trans-unit>
<trans-unit id="s051588c63fedab5f">
  <source>Challenge idle timeout</source>
</trans-unit>
<trans-unit id="s4c70d7629e29ac2d">
  <source>Duration the flow executor will wait before continuing without a response.</source>
</trans-unit>
<trans-unit id="se3c7fb54006d9e98">
  <source>Trigger check-in on device</source>
</trans-unit>
<trans-unit id="se0a747f4db08e87f">
  <source>Configure how devices connect with authentik and ingest external device data.</source>
</trans-unit>
<trans-unit id="s114f2b310ef163ff">
  <source>Stage which associates the currently used device with the current session.</source>
</trans-unit>
<trans-unit id="s8290d08ab5a49ed0">
  <source>Connector</source>
</trans-unit>
<trans-unit id="s5e8eefcbbeffd4d5">
  <source>Device optional</source>
</trans-unit>
<trans-unit id="s51b09bba5dcc19b0">
  <source>If no device was provided, this stage will succeed and continue to the next stage.</source>
</trans-unit>
<trans-unit id="s5f58e358343a5514">
  <source>Device required</source>
</trans-unit>
<trans-unit id="s6df8326edea3b23d">
  <source>If no device was provided, this stage will stop flow execution.</source>
</trans-unit>
<trans-unit id="s3a3d5b2575cd32ea">
  <source>File uploaded successfully</source>
</trans-unit>
<trans-unit id="sd3775ef947e0de32">
  <source>File Name</source>
</trans-unit>
<trans-unit id="s1afc99a84a890514">
  <source>Type an optional custom file name...</source>
</trans-unit>
<trans-unit id="sb40e2763045466ea">
  <source>Optionally rename the file (without extension). Leave empty to keep the original filename.</source>
</trans-unit>
<trans-unit id="s803ce7e1a2294d50">
  <source>Files</source>
</trans-unit>
<trans-unit id="s42d82601762f5321">
  <source>Manage uploaded files.</source>
</trans-unit>
<trans-unit id="saad01178f02a6a23">
  <source>file</source>
</trans-unit>
<trans-unit id="s69f800801812a5f0">
  <source>files</source>
</trans-unit>
<trans-unit id="s96668830629e0dfc">
  <source>Upload</source>
</trans-unit>
<trans-unit id="sa32e9d0a108ee802">
  <source>Upload File</source>
</trans-unit>
<trans-unit id="s95094b57684716a5">
  <source>Failed to validate device.</source>
</trans-unit>
<trans-unit id="se99d25eb70c767ef">
  <source>Verifying your device...</source>
</trans-unit>
<trans-unit id="s5c85e53f1d3747d0">
  <source>Service Provider Config cache timeout</source>
</trans-unit>
<trans-unit id="s5fca9f7853a54584">
  <source>Cache duration for ServiceProviderConfig responses. Set minutes=0 to disable caching.</source>
</trans-unit>
<trans-unit id="s89a2859207d766fe">
  <source>JWTs signed by the selected providers can be used to authenticate to devices.</source>
</trans-unit>
<trans-unit id="s988e1dfd2b962e4f">
  <source>Score Configuration</source>
</trans-unit>
<trans-unit id="s83d396fed4b71e29">
  <source>This CAPTCHA provider does not support scoring. Score thresholds will be ignored.</source>
</trans-unit>
<trans-unit id="s5b29d7a77c92758e">
  <source>Score Minimum Threshold</source>
</trans-unit>
<trans-unit id="sfb4f2529b0b36889">
  <source>Minimum required score to allow continuing. Lower scores indicate more suspicious behavior.</source>
</trans-unit>
<trans-unit id="sf578722c6d349838">
  <source>Score Maximum Threshold</source>
</trans-unit>
<trans-unit id="s66fe9ce730db1f7b">
  <source>Maximum allowed score to allow continuing. Set to -1 to disable upper bound checking.</source>
</trans-unit>
<trans-unit id="s1f412e69817ebb7f">
  <source>Error on Invalid Score</source>
</trans-unit>
<trans-unit id="sbfc0f211f5f7c96f">
  <source>When enabled and the score is outside the threshold, the user will not be able to continue. When disabled, the user can continue and the score can be used in policies.</source>
</trans-unit>
<trans-unit id="s74982e57a1d8896c">
  <source>Advanced Settings</source>
</trans-unit>
<trans-unit id="s27bfe23deaaf0c2f">
  <source>JavaScript URL</source>
</trans-unit>
<trans-unit id="s22f10cb634a6d1e5">
  <source>URL to fetch the CAPTCHA JavaScript library from. Automatically set based on provider selection but can be customized.</source>
</trans-unit>
<trans-unit id="s83c66d5a3edc1b03">
  <source>API Verification URL</source>
</trans-unit>
<trans-unit id="s47028bbf2c2cce0c">
  <source>URL used to validate CAPTCHA response on the backend. Automatically set based on provider selection but can be customized.</source>
</trans-unit>
<trans-unit id="s7fed8c29d9963f53">
  <source>This stage checks the user's current session against a CAPTCHA service to prevent automated abuse.</source>
</trans-unit>
<trans-unit id="s9b8e5c6f87ca887e">
  <source>CAPTCHA Provider</source>
</trans-unit>
<trans-unit id="sab1ddd059633b9aa">
  <source>Enable this if the CAPTCHA requires user interaction (clicking checkbox, solving puzzles, etc.). Required for reCAPTCHA v2, hCaptcha interactive mode, and Cloudflare Turnstile.</source>
</trans-unit>
<trans-unit id="s8d94e51441d0ce0c">
  <source>Flow Examples</source>
</trans-unit>
<trans-unit id="s49ae82ba527f8e01">
  <source>Type an outpost name...</source>
</trans-unit>
<trans-unit id="s574ed5d3a52d45c8">
  <source>Outpost Name</source>
</trans-unit>
<trans-unit id="sc47f8ab6162bb2bb">
  <source>Outpost configuration</source>
</trans-unit>
<trans-unit id="s11a2ac9f2bd811d8">
  <source>Delete Object Permission</source>
</trans-unit>
<trans-unit id="s78aa910bcb26034d">
  <source>Global and object permission</source>
</trans-unit>
<trans-unit id="sc8f73affccb6ae4d">
  <source>Global permission</source>
</trans-unit>
<trans-unit id="scf9ebad133d2d561">
  <source>Object permission</source>
</trans-unit>
<trans-unit id="sa84d68ec57e21b0f">
  <source>Permissions on this object</source>
</trans-unit>
<trans-unit id="s4d83e4891c19ff14">
  <source>Permissions assigned to this role affecting specific object instances.</source>
</trans-unit>
<trans-unit id="s3e07daaacb10f38a">
  <source>Parents</source>
</trans-unit>
<trans-unit id="s74636eae90c1a208">
  <source>Available Groups</source>
</trans-unit>
<trans-unit id="s66d795717763ca54">
  <source>Selected Groups</source>
</trans-unit>
<trans-unit id="sab46a062a503d9bb">
  <source>A group recursively inherits every role from its ancestors.</source>
</trans-unit>
<trans-unit id="sb75f1413fcfbd4bd">
  <source>User updated.</source>
</trans-unit>
<trans-unit id="s13625030f6501a5f">
  <source>User created and added to group <x id="0" equiv-text="${this.targetGroup.name}"/></source>
</trans-unit>
<trans-unit id="s31dc80daa773a5dc">
  <source>User created and added to role <x id="0" equiv-text="${this.targetRole.name}"/></source>
</trans-unit>
<trans-unit id="sd1d84a93a9a8dd44">
  <source>User created.</source>
</trans-unit>
<trans-unit id="sc5f2f9b4dce504d6">
  <source>Successfully downloaded <x id="0" equiv-text="${this.config.filename}"/>!</source>
</trans-unit>
<trans-unit id="s2b6c1190a54a0932">
  <source>Show MDM configuration</source>
</trans-unit>
<trans-unit id="sb4f4c6c72acfa253">
  <source>Hide MDM configuration</source>
</trans-unit>
<trans-unit id="s4a7ec7687e560e6a">
  <source>Is Primary user</source>
</trans-unit>
<trans-unit id="se14ede3bc78d9599">
  <source>Primary</source>
</trans-unit>
<trans-unit id="sc67ff7b2278e81e4">
  <source>Remove User(s)</source>
</trans-unit>
<trans-unit id="s76e10cbcb80c3a64">
  <source>Are you sure you want to remove the selected users from <x id="0" equiv-text="${targetLabel}"/>?</source>
</trans-unit>
<trans-unit id="s85835da8c3bd6198">
  <source>Are you sure you want to remove the selected users?</source>
</trans-unit>
<trans-unit id="s86f283ed16448157">
  <source>This user will be added to the role "<x id="0" equiv-text="${this.targetRole.name}"/>".</source>
</trans-unit>
<trans-unit id="sed582fb69fd1eed8">
  <source>Successfully added user to role(s).</source>
</trans-unit>
<trans-unit id="s78daaa3ef4325cac">
  <source>Roles to add</source>
</trans-unit>
<trans-unit id="sca5f586369a597a4">
  <source>Add role</source>
</trans-unit>
<trans-unit id="sd8b8f59ad30971f7">
  <source>Remove from Role(s)</source>
</trans-unit>
<trans-unit id="s5fcb76c89d17698c">
  <source>Are you sure you want to remove user <x id="0" equiv-text="${this.targetUser?.username}"/> from the following roles?</source>
</trans-unit>
<trans-unit id="sf4ed596f6b160b84">
  <source>Add Role</source>
</trans-unit>
<trans-unit id="s1d6a69c054342126">
  <source>Add to existing role</source>
</trans-unit>
<trans-unit id="sbf5a46ac69b2ca56">
  <source>Add new role</source>
</trans-unit>
<trans-unit id="s3b4ad8abf4f08c35">
  <source>Hide managed roles</source>
</trans-unit>
<trans-unit id="sb5e95aaacac5d929">
  <source>Bind existing Stage</source>
</trans-unit>
<trans-unit id="s7dcfe418b8d601f6">
  <source>Flags allow you to enable new functionality and behaviour in authentik early.</source>
</trans-unit>
<trans-unit id="se20d0be2cece3841">
  <source>When enabled, parallel requests for application authorization will be buffered instead of conflicting with other flows.</source>
</trans-unit>
<trans-unit id="s8aa73079812f56b2">
  <source>Refresh other flow tabs upon authentication</source>
</trans-unit>
<trans-unit id="s696386b762cd516c">
  <source>When enabled, other flow tabs in a session will refresh upon a successful authentication.</source>
</trans-unit>
<trans-unit id="s1af2337b6d11d4c6">
  <source>Data export ready</source>
</trans-unit>
<trans-unit id="sd0fcaa6952729a9a">
  <source>Data Exports</source>
</trans-unit>
<trans-unit id="s1d1d961d6f3550e5">
  <source>Manage past data exports.</source>
</trans-unit>
<trans-unit id="s8cddef7d8dac7f87">
  <source>Data type</source>
</trans-unit>
<trans-unit id="s3783e647280eb968">
  <source>Requested by</source>
</trans-unit>
<trans-unit id="s2d119c0d85bde088">
  <source>Creation date</source>
</trans-unit>
<trans-unit id="s5033dab8c17f05f2">
  <source>Completed</source>
</trans-unit>
<trans-unit id="s21c76a0f6cae7920">
  <source>Row actions</source>
</trans-unit>
<trans-unit id="s97aa774d38013957">
  <source>Data export(s)</source>
</trans-unit>
<trans-unit id="s694b2e2c53d2d85d">
  <source>Query parameters</source>
</trans-unit>
<trans-unit id="s145aca905bbc68a4">
  <source>SAML metadata XML file to import provider settings from.</source>
</trans-unit>
<trans-unit id="s0d748f6fb237da48">
  <source>Configure SAML Provider from Metadata</source>
</trans-unit>
<trans-unit id="sb541f02499d73b4e">
  <source>Outgoing syncs will not be triggered.</source>
</trans-unit>
<trans-unit id="s967b3abf2608649a">
  <source>Immediate</source>
</trans-unit>
<trans-unit id="sba0b0ee7c8b8f04a">
  <source>Outgoing syncs will be triggered immediately for each object that is updated. This can create many background tasks and is therefore not recommended</source>
</trans-unit>
<trans-unit id="sd3dfc2a1c3647e77">
  <source>Deferred until end</source>
</trans-unit>
<trans-unit id="secd492de6e1ae305">
  <source>Outgoing syncs will be triggered at the end of the source synchronization.</source>
</trans-unit>
<trans-unit id="s0c476074a4fc4d95">
  <source>Outgoing sync trigger mode</source>
</trans-unit>
<trans-unit id="s4bb6f209647072f4">
  <source>Successfully connected source</source>
</trans-unit>
<trans-unit id="sf3ad0b5ebe730780">
  <source>Failed to connect source: <x id="0" equiv-text="${pluckErrorDetail(parsedError)}"/></source>
</trans-unit>
<trans-unit id="sed44880a52f72a08">
  <source>Passkey settings</source>
</trans-unit>
<trans-unit id="sf65cb435d6ca1d01">
  <source>WebAuthn Authenticator Validation Stage</source>
</trans-unit>
<trans-unit id="s05a4cbce470ede73">
  <source>When set, allows users to authenticate using passkeys directly from the browser's autofill dropdown without entering a username first.</source>
</trans-unit>
<trans-unit id="s51610dc462a5a034">
  <source>Pagination: default page size</source>
</trans-unit>
<trans-unit id="s05d8a93b0de05ad4">
  <source>Default page size for API requests not specifying a page size.</source>
</trans-unit>
<trans-unit id="s41dac4f4d7caffa7">
  <source>Pagination: maximum page size</source>
</trans-unit>
<trans-unit id="s567c5a6e42cc5036">
  <source>Maximum page size for API requests.</source>
</trans-unit>
<trans-unit id="sed1058bca1c065f7">
  <source>When enabled, notification will be sent to the user that triggered the event in addition to any users in the group above. The event user will always be the first user, to send a notification only to the event user enabled 'Send once' in the notification transport. If no group is selected and 'Send notification to event user' is disabled the rule is disabled. </source>
</trans-unit>
<trans-unit id="s9864bd5cd7bb4bd0">
  <source>Local connection</source>
</trans-unit>
<trans-unit id="s4a3f19ff6e510c37">
  <source>Requires Docker socket/Kubernetes Integration.</source>
</trans-unit>
<trans-unit id="s46a03121a2c260ea">
  <source>Buffer PolicyAccessView requests</source>
</trans-unit>
<trans-unit id="s361e9d929ee925e6">
  <source>Assign Object Permission</source>
</trans-unit>
<trans-unit id="s5f6ad947b4824e40">
  <source>Next, download the configuration to deploy the authentik Agent via MDM</source>
</trans-unit>
<trans-unit id="s523337424b694d5c">
  <source>Device Access Group</source>
</trans-unit>
<trans-unit id="s7642bf28cf8f476c">
  <source>Select a device access group to be added to upon enrollment.</source>
</trans-unit>
<trans-unit id="h30bbf18fbf87fa57">
  <source>To create a data export, navigate to
                            <x id="0" equiv-text="&lt;a href=&quot;#/identity/users&quot;&gt;"/>Directory &gt; Users<x id="1" equiv-text="&lt;/a&gt;"/> or to
                            <x id="2" equiv-text="&lt;a href=&quot;#/events/log&quot;&gt;"/>Events &gt; Logs<x id="3" equiv-text="&lt;/a&gt;"/>.</source>
</trans-unit>
<trans-unit id="s54af3ec70642782c">
  <source>Choose the object permissions that you want the selected role to have on this object. These object permissions are in addition to any global permissions already within the role.</source>
</trans-unit>
<trans-unit id="sb3be65525dd1f92c">
  <source>Assign object permissions to role</source>
</trans-unit>
<trans-unit id="sbcd108b66363075c">
  <source>Device access group</source>
</trans-unit>
<trans-unit id="s325acae04cdcac57">
  <source>Primary disk size</source>
</trans-unit>
<trans-unit id="sb4a957846c89fca1">
  <source>Primary disk usage</source>
</trans-unit>
<trans-unit id="s7b68229d885a34d3">
  <source>The start for user ID numbers, this number is added to the user ID to make sure that the numbers aren't too low for POSIX users. Default is 2000 to prevent collisions with local users.</source>
</trans-unit>
<trans-unit id="s284f44964466ef38">
  <source>The start for group ID numbers, this number is added to a number generated from the groups' ID to make sure that the numbers aren't too low for POSIX groups. Default is 4000 to prevent collisions with local groups.</source>
</trans-unit>
<trans-unit id="s01f8cd92a0204da2">
  <source>Data exports are not available as storage for reports is not configured.</source>
</trans-unit>
<trans-unit id="s7afef158aada7389">
  <source><x id="0" equiv-text="${this.brand.brandingTitle}"/> will collect all objects with the specified parameters:</source>
</trans-unit>
<trans-unit id="sa8d2689c8fdfea22">
  <source>Successfully requested data export</source>
</trans-unit>
<trans-unit id="s7e2ef0e26e7f5e6f">
  <source>Failed to export data</source>
</trans-unit>
<trans-unit id="sc6991f3e377938fb">
  <source>Start export</source>
</trans-unit>
<trans-unit id="sd69873a0783f8e39">
  <source>Export data</source>
</trans-unit>
<trans-unit id="en-XA">
  <source>English (Pseudo-Accents)</source>
</trans-unit>
<trans-unit id="sbb99d4ec27fbb263">
  <source>Finished</source>
</trans-unit>
<trans-unit id="s3ec4da71c1a62754">
  <source>Queued</source>
</trans-unit>
<trans-unit id="sd32298bb7d36024d">
  <source>Configured file backend does not support file management.</source>
</trans-unit>
<trans-unit id="s4f1e04b9b4cb96ae">
  <source>Please ensure the data folder is mounted or S3 storage is configured.</source>
</trans-unit>
<trans-unit id="s3a46b5964b3ecfac">
  <source>View details...</source>
</trans-unit>
<trans-unit id="s6cbf6cd401ea3336">
  <source>Type a connector name...</source>
</trans-unit>
<trans-unit id="s04be2edfb0d2218a">
  <source>Type a name for the token...</source>
</trans-unit>
<trans-unit id="s84e29a714db544e9">
  <source>Update Enrollment Token</source>
</trans-unit>
<trans-unit id="s5a7055a44dc83b1e">
  <source>Type a unique identifier...</source>
</trans-unit>
<trans-unit id="sdfe787aeeebbfbf1">
  <source>Type a token description...</source>
</trans-unit>
<trans-unit id="sd7c52e2ce408c542">
  <source>Integrations synced in the last 12 hours.</source>
</trans-unit>
<trans-unit id="table-loading-bar-label">
  <source>Loading <x id="0" equiv-text="${this.label ?? &quot;table&quot;}"/> data</source>
  <note from="lit-localize">Label for progress bar shown when table data is loading</note>
</trans-unit>
<trans-unit id="sb6650552aaaf5da0">
  <source>Assigned Roles</source>
</trans-unit>
<trans-unit id="s5cbf3cbb4cf38b05">
  <source>All Roles</source>
</trans-unit>
<trans-unit id="s6a850cd00064d6e6">
  <source>Inherited from parent group</source>
</trans-unit>
<trans-unit id="sd9e3b91f8d62cb04">
  <source>Inherited from group</source>
</trans-unit>
<trans-unit id="s3d8c389ca77b97e1">
  <source>Inherited</source>
</trans-unit>
<trans-unit id="s01730bc068a6cf07">
  <source>Select roles to attach to the user</source>
</trans-unit>
<trans-unit id="drawer-toggle-button-api-requests">
  <source>Toggle API requests drawer</source>
</trans-unit>
<trans-unit id="s355e4737a0286070">
  <source>API Drawer</source>
</trans-unit>
<trans-unit id="drawer-toggle-button-notifications">
  <source>Toggle notifications drawer</source>
</trans-unit>
<trans-unit id="drawer-invoker-tooltip-notifications">
  <source>Notification Drawer</source>
</trans-unit>
<trans-unit id="s5fa7f18dcfc98131">
  <source>Failed to fetch notifications.</source>
</trans-unit>
<trans-unit id="notification-drawer-clear-all">
  <source>Clear all notifications</source>
</trans-unit>
<trans-unit id="notification-drawer-close">
  <source>Close notification drawer</source>
</trans-unit>
<trans-unit id="s54e4d61fc46a14be">
  <source>No MFA devices enrolled.</source>
</trans-unit>
<trans-unit id="s227aacd5a7fc6f50">
  <source>User Tokens</source>
</trans-unit>
<trans-unit id="sea858aeacf6ae9b0">
  <source>No User Tokens enrolled.</source>
</trans-unit>
<trans-unit id="notification-unread-count">
  <source><x id="0" equiv-text="${unreadCount}"/> unread</source>
  <note from="lit-localize">Indicates the number of unread notifications in the notification drawer</note>
</trans-unit>
<trans-unit id="s42636dae6e29892e">
  <source>Agent version: <x id="0" equiv-text="${vendorData.agent_version ?? &quot;-&quot;}"/></source>
</trans-unit>
<trans-unit id="s6dd24e14615f1369">
  <source>Warning: Flow imports are blueprint files, which may contain objects other than flows (such as users, policies, etc).</source>
</trans-unit>
<trans-unit id="sa6cd3315b7c53ab7">
  <source>You should only import files from trusted sources and review blueprints before importing them.</source>
</trans-unit>
<trans-unit id="sd8309fdcb0478b0f">
  <source>The length of the individual generated tokens. Can be set to a maximum of 100 characters.</source>
</trans-unit>
<trans-unit id="s382600808211cf23">
  <source>Close sidebar</source>
</trans-unit>
<trans-unit id="sce4fb29c933410a5">
  <source>Open sidebar</source>
</trans-unit>
<trans-unit id="s180feee6454499fa">
  <source>Certificate-Key Pair</source>
</trans-unit>
<trans-unit id="avatar.alt-text-for-user">
  <source>Avatar for <x id="0" equiv-text="${this.username}"/></source>
</trans-unit>
<trans-unit id="avatar.alt-text">
  <source>User avatar</source>
</trans-unit>
<trans-unit id="flow.navigation.go-back">
  <source>Go back</source>
</trans-unit>
<trans-unit id="stage.authenticator.email.sent-to-address">
  <source>A verification token has been sent to your configured email address: <x id="0" equiv-text="${email}"/></source>
  <note from="lit-localize">Displayed when a verification token has been sent to the user's configured email address.</note>
</trans-unit>
<trans-unit id="stage.authenticator.email.sent">
  <source>A verification token has been sent to your email address.</source>
  <note from="lit-localize">Displayed when a verification token has been sent to the user's email address.</note>
</trans-unit>
<trans-unit id="user.library.application-count-singular-with-query">
  <source><x id="0" equiv-text="${count}"/> application found for "<x id="1" equiv-text="${query}"/>"</source>
</trans-unit>
<trans-unit id="user.library.application-count-plural-with-query">
  <source><x id="0" equiv-text="${count}"/> applications found for "<x id="1" equiv-text="${query}"/>"</source>
</trans-unit>
<trans-unit id="user.library.application-count-singular">
  <source><x id="0" equiv-text="${count}"/> application available</source>
</trans-unit>
<trans-unit id="user.library.application-count-plural">
  <source><x id="0" equiv-text="${count}"/> applications available</source>
</trans-unit>
<trans-unit id="user.library.search.type-to-filter-hint">
  <source>Type to filter applications</source>
  <note from="lit-localize">Screen reader hint to inform the user they can filter the application list by typing</note>
</trans-unit>
<trans-unit id="user.library.search.enter-to-open-hint">
  <source>Press Enter to open <x id="0" equiv-text="${this.selectedApp.name}"/></source>
  <note from="lit-localize">Screen reader hint to inform the user they can open the selected application by pressing Enter</note>
</trans-unit>
<trans-unit id="user.library.application-count.enter-to-open-hint">
  <source>Press Enter to open <x id="0" equiv-text="${this.selectedApp.name}"/></source>
  <note from="lit-localize">Screen reader hint to inform the user they can open the selected application by pressing Enter</note>
</trans-unit>
<trans-unit id="library.application.card.aria-label">
  <source>Open "<x id="0" equiv-text="${application.name}"/>"</source>
  <note from="lit-localize">Screen reader label for the application card</note>
</trans-unit>
<trans-unit id="sc1e9c9bab6765c74">
  <source>Active Sessions</source>
</trans-unit>
<trans-unit id="s83991563e9d607ac">
  <source>Successfully revoked <x id="0" equiv-text="${this.revokedCount}"/> session(s) for <x id="1" equiv-text="${this.users.length}"/> user(s)</source>
</trans-unit>
<trans-unit id="s4b004192e4d6ab2e">
  <source>Failed to revoke sessions: <x id="0" equiv-text="${e.toString()}"/></source>
</trans-unit>
<trans-unit id="sb458ffb37cbde768">
  <source>Revoke Sessions</source>
</trans-unit>
<trans-unit id="s1bd2d0f088b75b92">
  <source>Are you sure you want to revoke all sessions for <x id="0" equiv-text="${this.users.length}"/> user(s)?</source>
</trans-unit>
<trans-unit id="s5c5e74eabcb9eba1">
  <source>This will force the selected users to re-authenticate on all their devices.</source>
</trans-unit>
<trans-unit id="scd909e0bc55fc548">
  <source>Security key</source>
</trans-unit>
<trans-unit id="sd0de938d9c37ad5f">
  <source>Use a Passkey or security key to prove your identity.</source>
</trans-unit>
<trans-unit id="s856c15d3387d1ac7">
  <source>Include additional data in Audit logs</source>
</trans-unit>
<trans-unit id="sf432a1157155369f">
  <source>When enabled, additional data about objects added/removed is saved in the audit log. May reduce performance in certain requests.</source>
</trans-unit>
<trans-unit id="s6173e24ed3ba956e">
  <source>Successfully updated Fleet connector.</source>
</trans-unit>
<trans-unit id="sc9b84fdc2119ed1f">
  <source>Successfully created Fleet connector.</source>
</trans-unit>
<trans-unit id="s6a087e34edeadc1f">
  <source>Connector name...</source>
</trans-unit>
<trans-unit id="sc8a067f02f4cf520">
  <source>Fleet settings</source>
</trans-unit>
<trans-unit id="sd5434d21a084c48f">
  <source>Fleet Server URL</source>
</trans-unit>
<trans-unit id="s10320a36724d7e1a">
  <source>Fleet API Token</source>
</trans-unit>
<trans-unit id="s4f0d6329461ac269">
  <source>Map users</source>
</trans-unit>
<trans-unit id="s0770384b6d1e7075">
  <source>When enabled, users detected by Fleet will be mapped in authentik, granting them access to the device.</source>
</trans-unit>
<trans-unit id="s140417fe6bad13ab">
  <source>Map teams to device access group</source>
</trans-unit>
<trans-unit id="sa8383f7f7ff1a62e">
  <source>When enabled, Fleet teams will be mapped to Device access groups. Missing device access groups are automatically created. Devices assigned to a different group are not re-assigned</source>
</trans-unit>
<trans-unit id="sfec0c302ab140e30">
  <source>Software</source>
</trans-unit>
<trans-unit id="sf4cea728c240ee6b">
  <source>Paste your license key...</source>
</trans-unit>
<trans-unit id="form.headline.update">
  <source>Update <x id="0" equiv-text="${item.verboseName}"/></source>
</trans-unit>
<trans-unit id="s5f404525692ee652">
  <source>You can select from popular providers with preset configurations or choose a custom setup to specify your own endpoints and keys.</source>
</trans-unit>
<trans-unit id="sb275cc802634f93d">
  <source>Paste your CAPTCHA public key...</source>
</trans-unit>
<trans-unit id="s69a0bed6319d085a">
  <source>Secret Key</source>
</trans-unit>
<trans-unit id="s4cbbb47ef050cd0e">
  <source>Paste your CAPTCHA secret key...</source>
</trans-unit>
<trans-unit id="s896c7fc0f9277a74">
  <source>Stage Name</source>
</trans-unit>
<trans-unit id="s1baea28d44c34fef">
  <source>Type a stage name...</source>
</trans-unit>
<trans-unit id="sdd8bef43fcac336d">
  <source>The unique name used internally to identify the stage.</source>
</trans-unit>
<trans-unit id="captcha.providers.recaptcha-v2">
  <source>Google reCAPTCHA v2</source>
</trans-unit>
<trans-unit id="captcha.providers.recaptcha.admin-console">
  <source>reCAPTCHA admin console</source>
</trans-unit>
<trans-unit id="captcha.providers.recaptcha-v3">
  <source>Google reCAPTCHA v3</source>
</trans-unit>
<trans-unit id="captcha.providers.recaptcha.api-key-source">
  <source>reCAPTCHA admin console</source>
</trans-unit>
<trans-unit id="captcha.providers.recaptcha-enterprise">
  <source>Google reCAPTCHA Enterprise</source>
</trans-unit>
<trans-unit id="captcha.providers.recaptcha-enterprise.api-key-source">
  <source>Google Cloud Console</source>
</trans-unit>
<trans-unit id="captcha.providers.hcaptcha">
  <source>hCaptcha</source>
</trans-unit>
<trans-unit id="captcha.providers.hcaptcha.api-key-source">
  <source>hCaptcha dashboard</source>
</trans-unit>
<trans-unit id="captcha.providers.turnstile">
  <source>Cloudflare Turnstile</source>
</trans-unit>
<trans-unit id="captcha.providers.turnstile.api-key-source">
  <source>Cloudflare dashboard</source>
</trans-unit>
<trans-unit id="captcha.providers.custom">
  <source>Custom</source>
</trans-unit>
<trans-unit id="s3fdf499bd9e14a92">
  <source>Type an email address...</source>
</trans-unit>
<trans-unit id="captcha.public-key.description">
  <source>The public key is used by authentik to render the CAPTCHA widget.</source>
  <note from="lit-localize">Description for CAPTCHA public key field.</note>
</trans-unit>
<trans-unit id="captcha.secret-key.description">
  <source>The secret key allows communication between authentik and the CAPTCHA provider to validate user responses.</source>
  <note from="lit-localize">Description for CAPTCHA secret key field.</note>
</trans-unit>
<trans-unit id="ak-secret-text-input.actions.modify">
  <source>Modify</source>
  <note from="lit-localize">Help text for secret input field to indicate that clicking will allow changing the value.</note>
</trans-unit>
<trans-unit id="captcha.provider-link">
  <source>API keys can be obtained from the
                        <x id="0" equiv-text="${html `&lt;a target=&quot;_blank&quot; rel=&quot;noopener noreferrer&quot; href=${keyURL}&#10;                                &gt;${formatAPISource()}&lt;/a&#10;                            &gt;.`}"/></source>
  <note from="lit-localize">Supplementary help text with link to provider dashboard.</note>
</trans-unit>
<trans-unit id="s87f858ca3c8e5579">
  <source>Filename can only contain letters, numbers, dots, hyphens, underscores, slashes, and the placeholder %(theme)s</source>
</trans-unit>
<trans-unit id="s3934affe32f6a454">
  <source><x id="0" equiv-text="${availableCount}"/> item marked to add.</source>
</trans-unit>
<trans-unit id="s8b68948382758d57">
  <source><x id="0" equiv-text="${availableCount}"/> items marked to add.</source>
</trans-unit>
<trans-unit id="s3a482e34c3713e41">
  <source><x id="0" equiv-text="${selectedTotal}"/> item selected.</source>
</trans-unit>
<trans-unit id="s726a7342e18dc660">
  <source><x id="0" equiv-text="${selectedTotal}"/> items selected.</source>
</trans-unit>
<trans-unit id="s403a360d48a11d5f">
  <source><x id="0" equiv-text="${selectedCount}"/> item marked to remove.</source>
</trans-unit>
<trans-unit id="s2e92b61847f32e72">
  <source><x id="0" equiv-text="${selectedCount}"/> items marked to remove.</source>
</trans-unit>
<trans-unit id="s7468188f0c6d8a22">
  <source>Flow used when authorizing this this.instance?.</source>
</trans-unit>
<trans-unit id="sa5d4a82c5daae3de">
  <source>Reply URL</source>
</trans-unit>
<trans-unit id="s7953f5ca7564d098">
  <source>Flow used when logging out of this this.instance?.</source>
</trans-unit>
<trans-unit id="s2c5e9b1b859bdba6">
  <source>Certificate used to sign outgoing Responses going to the Service this.instance?.</source>
</trans-unit>
<trans-unit id="s513e09d45feee5dd">
  <source>Update WS-Federation Provider</source>
</trans-unit>
<trans-unit id="s02d3bec9a0ff82bd">
  <source>WS-Federation Configuration</source>
</trans-unit>
<trans-unit id="s7eeab4c954cfed12">
  <source>WS-Federation URL</source>
</trans-unit>
<trans-unit id="sb001338b056bf9d5">
  <source>Realm (wtrealm)</source>
</trans-unit>
<trans-unit id="s7ac77ffc2d88bc94">
  <source>WS-Federation Metadata</source>
</trans-unit>
<trans-unit id="s36b4b8f51a90009a">
  <source>Example WS-Federation attributes</source>
</trans-unit>
<trans-unit id="scde666c4a777dd66">
  <source>Group Filter</source>
</trans-unit>
<trans-unit id="s5bbedc6d1d078553">
  <source>Groups to be synced. If empty, all groups will be synced.</source>
</trans-unit>
<trans-unit id="s93aad5cd9b47f65f">
  <source>Custom Attributes</source>
</trans-unit>
<trans-unit id="s254696510e45f3bb">
  <source>No custom attributes defined.</source>
</trans-unit>
<trans-unit id="sb94beab52540d2b7">
  <source>The CAPTCHA challenge failed to load.</source>
</trans-unit>
<trans-unit id="s217a96c47caaf73d">
  <source>Could not find a suitable CAPTCHA provider.</source>
</trans-unit>
<trans-unit id="sdf2794b96386c868">
  <source>Copy time-based one-time password secret</source>
</trans-unit>
<trans-unit id="sc78d16417878afd0">
  <source>Copy Secret</source>
</trans-unit>
<trans-unit id="s7886195e5cfb6d41">
  <source>Update settings</source>
</trans-unit>
<trans-unit id="s2df814c26d5c5e56">
  <source>ED25519</source>
</trans-unit>
<trans-unit id="sa31350da8b357fa4">
  <source>ED448</source>
</trans-unit>
<trans-unit id="s088efc814570fa2c">
  <source>Enrollment Token</source>
</trans-unit>
<trans-unit id="s0ce6e3aa4e7c81a0">
  <source>New Token</source>
</trans-unit>
<trans-unit id="s1bb47213a314465b">
  <source>Create link</source>
</trans-unit>
<trans-unit id="s776c1b64a71fba39">
  <source>To email a recovery link, set an email address for this user.</source>
</trans-unit>
<trans-unit id="s8899399356b8ed1a">
  <source>To create a recovery link, set a recovery flow for the current brand.</source>
</trans-unit>
<trans-unit id="s68be8f284274370a">
  <source>Recovery link</source>
</trans-unit>
<trans-unit id="s2e318e4a2934eef9">
  <source>Successfully queued email.</source>
</trans-unit>
<trans-unit id="s9121335709cfac7a">
  <source>Token duration</source>
</trans-unit>
<trans-unit id="s4530f2951a6633e2">
  <source>If a recovery token already exists, its duration is updated.</source>
</trans-unit>
<trans-unit id="clipboard.write.success.message.entity">
  <source><x id="0" equiv-text="${entityLabel}"/> copied to clipboard.</source>
</trans-unit>
<trans-unit id="clipboard.write.success.generic">
  <source>Copied to clipboard.</source>
</trans-unit>
<trans-unit id="clipboard.write.failure.description">
  <source>Clipboard not available. Please copy the value manually.</source>
</trans-unit>
<trans-unit id="se7385f882e2b8b7d">
  <source>An unknown error occurred while retrieving the token.</source>
</trans-unit>
<trans-unit id="totp.config">
  <source>TOTP Config</source>
</trans-unit>
<trans-unit id="totp.config.clipboard.description">
  <source>Paste this URL into your authenticator app to set up a time-based one-time password.</source>
</trans-unit>
<trans-unit id="totp.secret">
  <source>TOTP Secret</source>
</trans-unit>
<trans-unit id="totp.secret.clipboard.description">
  <source>Paste this secret into your authenticator app to set up a time-based one-time password.</source>
</trans-unit>
<trans-unit id="s2157b29f47940266">
  <source>Type a unique identifier for this token...</source>
</trans-unit>
<trans-unit id="s0950c703759a8746">
  <source>Type a description for this token...</source>
</trans-unit>
<trans-unit id="sd02d96c6930f31db">
  <source>Create App Password</source>
</trans-unit>
<trans-unit id="scf325f1039d7c82f">
  <source>New App Password</source>
</trans-unit>
<trans-unit id="saa02cc40143c291e">
  <source>Sidebar left (frame background)</source>
</trans-unit>
<trans-unit id="s7606cffc63e1b0a1">
  <source>Sidebar right (frame background)</source>
</trans-unit>
<trans-unit id="s92e22f9319fdb85d">
  <source>Configuration warning</source>
</trans-unit>
<trans-unit id="s304ca1e922bd3278">
  <source>Lifecycle Rules</source>
</trans-unit>
<trans-unit id="scd223a9aac742fcf">
  <source>Lifecycle</source>
</trans-unit>
<trans-unit id="sa9ebf2b039449d6c">
  <source>Object Lifecycle Management is in preview.</source>
</trans-unit>
<trans-unit id="s2b858c5186f8f2fd">
  <source>Select a group...</source>
</trans-unit>
<trans-unit id="s5e0fb3d421bb57cc">
  <source>Select a role...</source>
</trans-unit>
<trans-unit id="s8e5d1a84bd559a27">
  <source>Select an object...</source>
</trans-unit>
<trans-unit id="s69e44328a5b45aa2">
  <source>Rule Name</source>
</trans-unit>
<trans-unit id="se319064a2f20deba">
  <source>Type a name for this lifecycle rule...</source>
</trans-unit>
<trans-unit id="sb46d3613edb66558">
  <source>Interval</source>
</trans-unit>
<trans-unit id="s19feda58eae87c66">
  <source>The interval between opening new reviews for matching objects.</source>
</trans-unit>
<trans-unit id="s760c656016171d08">
  <source>Grace period</source>
</trans-unit>
<trans-unit id="s48a53c24fbbc8444">
  <source>The duration of time before an open review is considered overdue.</source>
</trans-unit>
<trans-unit id="s1b5d2f91633b74d6">
  <source>Reviewer groups</source>
</trans-unit>
<trans-unit id="s94c5d9fea467cdbb">
  <source>Min reviewers</source>
</trans-unit>
<trans-unit id="s693370c05900a1c6">
  <source>Number of users from the selected reviewer groups that must approve the review.</source>
</trans-unit>
<trans-unit id="s20c950d20c8aec84">
  <source>Min reviewers is per-group</source>
</trans-unit>
<trans-unit id="se4f63fe867f1714a">
  <source>If checked, approving a review will require at least that many users from _each_ of the selected groups. When disabled, the value is a total across all groups.</source>
</trans-unit>
<trans-unit id="s74906f78877111cb">
  <source>Reviewers</source>
</trans-unit>
<trans-unit id="sb42871a38d8b61ee">
  <source>Object type</source>
</trans-unit>
<trans-unit id="sd530d226f68ec351">
  <source>When set, the rule will apply to the selected individual object. Otherwise, the rule applies to all objects of the selected type.</source>
</trans-unit>
<trans-unit id="sea85769d2d8f3ea8">
  <source>Available Users</source>
</trans-unit>
<trans-unit id="s6251a3b1bbd7b124">
  <source>Selected Users</source>
</trans-unit>
<trans-unit id="s3899116cda378dcb">
  <source>A review will require approval from each of the users selected here in addition to group members as per above settings.</source>
</trans-unit>
<trans-unit id="s56511df6b44ad5cc">
  <source>Notification transports</source>
</trans-unit>
<trans-unit id="s6273aa020677fe75">
  <source>Select which transports should be used to notify the user.</source>
</trans-unit>
<trans-unit id="s78e31a199ca08cd9">
  <source>Object Lifecycle Rules</source>
</trans-unit>
<trans-unit id="s24cc4e5aa6446401">
  <source>Schedule periodic reviews for objects in authentik.</source>
</trans-unit>
<trans-unit id="s468f705986fff045">
  <source>Lifecycle rule(s)</source>
</trans-unit>
<trans-unit id="s73705b0f657e9866">
  <source>Update Lifecycle Rule</source>
</trans-unit>
<trans-unit id="safae3d983f6cc576">
  <source>Create Object Lifecycle Rule</source>
</trans-unit>
<trans-unit id="s9279704dfc98cdf9">
  <source>No reviews yet.</source>
</trans-unit>
<trans-unit id="s08400d94769ba771">
  <source>Reviewed on</source>
</trans-unit>
<trans-unit id="sb89da38bc0c0b3fa">
  <source>Reviewer</source>
</trans-unit>
<trans-unit id="s6686fcc6d2c8f0bd">
  <source>Note</source>
</trans-unit>
<trans-unit id="s5754eb43287dd6e5">
  <source>No review iteration found for this object.</source>
</trans-unit>
<trans-unit id="s68ea8ed25680242f">
  <source>At least <x id="0" equiv-text="${minReviewers}"/> user from this group: <x id="1" equiv-text="${groupList}"/>.</source>
</trans-unit>
<trans-unit id="sd9e03fcf99724085">
  <source>At least <x id="0" equiv-text="${minReviewers}"/> user from these groups: <x id="1" equiv-text="${groupList}"/>.</source>
</trans-unit>
<trans-unit id="sbbaa87f8826a0756">
  <source>At least <x id="0" equiv-text="${minReviewers}"/> users from this group: <x id="1" equiv-text="${groupList}"/>.</source>
</trans-unit>
<trans-unit id="s79ef398b6e3e2c44">
  <source>At least <x id="0" equiv-text="${minReviewers}"/> users from these groups: <x id="1" equiv-text="${groupList}"/>.</source>
</trans-unit>
<trans-unit id="s33d20c1a2e0bf773">
  <source>Review opened on</source>
</trans-unit>
<trans-unit id="s5e053bb69bf930b7">
  <source>Grace period till</source>
</trans-unit>
<trans-unit id="s310b639f39d731b0">
  <source>Next review date</source>
</trans-unit>
<trans-unit id="s3daaf5e7f16e2c52">
  <source>Latest review for this object</source>
</trans-unit>
<trans-unit id="s3be348f8aeeb6a64">
  <source>Review state</source>
</trans-unit>
<trans-unit id="s30c9ff051aa083b0">
  <source>Required reviewers</source>
</trans-unit>
<trans-unit id="scdef09f44b68b189">
  <source>Confirm Review</source>
</trans-unit>
<trans-unit id="sa89492933e1813ab">
  <source>Confirm this object has been reviewed</source>
</trans-unit>
<trans-unit id="s7f3437809d931336">
  <source>Reviews</source>
</trans-unit>
<trans-unit id="sc33f0df01dc32300">
  <source>Review Notes</source>
</trans-unit>
<trans-unit id="s86316abdd9054708">
  <source>Type optional notes to include in this review...</source>
</trans-unit>
<trans-unit id="s2430fb91fa928ae0">
  <source>Open Reviews</source>
</trans-unit>
<trans-unit id="s35d1f3a355ed1084">
  <source>See all currently open reviews.</source>
</trans-unit>
<trans-unit id="s71230441c759c9b1">
  <source>Only show reviews where I am a reviewer</source>
</trans-unit>
<trans-unit id="sce6a3502c71baa60">
  <source>Opened</source>
</trans-unit>
<trans-unit id="sea8d30456c79058a">
  <source>Grace period ends</source>
</trans-unit>
<trans-unit id="se6203ef69ff63548">
  <source>Pending review</source>
</trans-unit>
<trans-unit id="sb89d8d8bc0c08e98">
  <source>Reviewed</source>
</trans-unit>
<trans-unit id="sc68080ce046320cb">
  <source>Overdue</source>
</trans-unit>
<trans-unit id="sa30c4d3b566b6b1a">
  <source>Canceled</source>
</trans-unit>
<trans-unit id="s804ab712b1add3d3">
  <source>An unknown error occurred while submitting the form.</source>
</trans-unit>
</body>
</file>
</xliff>
