WIP

website/docs/users-sources/sources/directory-sync/active-directory/index.md

@@ -79,3 +79,11 @@ To support the integration of authentik with Active Directory, you will need to
 6. To finalise the Active Directory setup, you need to enable the backend "authentik LDAP" in the Password Stage.
 
     ![](./11_ak_stage.png)
+
+## Property mapping
+
+```python
+return {
+  "type": "external".
+}
+```

website/docs/users-sources/sources/property-mappings/expressions.md

@@ -19,3 +19,19 @@ import Objects from "../../../expressions/\_objects.md";
 import Functions from "../../../expressions/\_functions.mdx";
 
 <Functions />
+
+## Source property mapping examples
+
+### Set a user's type
+
+The following example is useful when users are being synced from a source such as LDAP and their authentik accounts need to be set as a certain type: external, internal, service account or internal service account.
+
+To set users as external, create the following source property mapping and add it to the source's settings.
+
+```python
+return {
+  "type": "external".
+}
+```
+
+###

website/docs/users-sources/user/user_ref.mdx

@@ -10,6 +10,7 @@ The User object has the following properties:
 - `email`: User's email.
 - `uid`: User's unique ID. Read-only.
 - `name`: User's display name.
+- `type`: User's account type; internal, external, service account or internal service account.
 - `is_staff`: Boolean field defining if user is staff.
 - `is_active`: Boolean field defining if user is active.
 - `date_joined`: Date user joined/was created. Read-only.