RAC - Guacamole Connection Settings are not applied, when in a Property Mapping bound to an Endpoint.

[liamfleming26]

Describe the bug
When using the RAC Provider, the documentation states that Guacamole connection settings (including SSH private keys and other properties like color-scheme) should be read from an associated property mapping. However, in practice, these settings are not being applied when establishing a connection. Specifically, even when an SSH private key without a passphrase is provided via a property mapping, the connection still prompts for a password. Similarly, a color-scheme setting defined in a property mapping is not applied to the terminal display.

Link to relevant Authentik doc.
Link to relevant Guacamole doc.

To Reproduce
Steps to reproduce the behavior:

1. Log in to authentik as an administrator, and open the authentik Admin interface.

2. Navigate to Customization > Property Mappings and click Create, then create a RAC Provider Property Mapping with the following settings:
   Name: Choose a descriptive name (e.g., "Guacamole SSH Key Mapping")
   Under Advanced Settings > Expression:

return {
"private-key": "-----BEGIN SSH PRIVATE KEY-----
SAMPLEgIBAAJBAKj34GkxFhD90vcNLYLInFEX6Ppy1tPf9Cnzj4p4WGeKLs1Pt8Qu
KUpRKfFLfRYC9AIKjbJTWit+CqvjWYzvQwECAwEAAQJAIJLixBy2qpFoS4DSmoEm
o3qGy0t6z09AIJtH+5OeRV1be+N4cDYJKffGzDa88vQENZiRm0GRq6a+HPGQMd2k
TQIhAKMSvzIBnni7ot/OSie2TmJLY4SwTQAevXysE2RbFDYdAiEBCUEaRQnMnbp7
9mxDXDf6AU0cN/RPBjb9qSHDcWZHGzUCIG2Es59z8ugGrDY+pxLQnwfotadxd+Uy
v/Ow5T0q5gIJAiEAyS4RaI9YG8EWx/2w0T67ZUVAw8eOMB6BIUg0Xcu+3okCIBOs
/5OiPgoTdSy7bcF9IGpSE8ZgGKzgYQVZeN97YE00
-----END SSH PRIVATE KEY-----",
}

(Optional: To test color-scheme as well, you could add it to the expression, e.g., "color-scheme": "green-black")

3. Click Finish.

4. Navigate to Applications > Providers.

5. Click the Edit icon on the RAC provider that requires public key authentication.

6. Under Protocol Settings add the newly created property mapping to Selected Property Mappings.

7. Click Update.

Attempt to connect to a target system via the RAC provider.

8. Observe that a password prompt appears despite the private key being provided, or that the color-scheme is not applied.

Expected behavior
When connecting via the RAC provider with a property mapping containing an SSH private key (without a passphrase), the SSH session should open directly, presenting the terminal of the remote host, mirroring native Guacamole behavior. Similarly, if a color-scheme connection setting is specified in the property mapping, the SSH session should open and display the terminal using that specified color scheme.

Screenshots
Unsure what to provide as there is no visual error. Let me know and I can add some.

Logs
Output of docker-compose logs:

authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/application/rac/remote-access/e9a2b522-3831-4504-9118-7d6facbc08dd/", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "3df5979a73384f3e9566051017e57223", "runtime": 62, "schema_name": "public", "scheme": "https", "status": 302, "timestamp": "2025-07-24T20:08:41.636496", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/if/flow/default-provider-authorization-explicit-consent/?inspector=available", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "e5472b29c75c4929ad723883fc45105e", "runtime": 38, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:41.698317", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"domain_url": null, "event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 40701, "remote": "192.0.2.111", "schema_name": "public", "scheme": "ws", "timestamp": "2025-07-24T20:08:41.788044", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/root/config/", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "23b6494e6224472c91a3417b0b9e1fe5", "runtime": 303, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:42.119418", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/core/brands/current/", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "70766dcc7417442e9ffa45a8bfa76d1e", "runtime": 312, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:42.125493", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/?query=inspector%3Davailable", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "bc9389e7aab744c3b273b10c4fd4e2e4", "runtime": 367, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:42.179469", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/?query=inspector%3Davailable", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 50584, "remote": "192.0.2.111", "request_id": "a39ccdeb59fd4d03878e0322dce2a09e", "runtime": 52, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:42.276207", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "Task published", "host": "auth.example.com", "level": "info", "logger": "authentik.root.celery", "pid": 50584, "request_id": "bca15861418c4f49a32195e13afb4891", "schema_name": "public", "task_id": "f2264254385740ac889a87bf15242ff1", "task_name": "authentik.enterprise.providers.ssf.tasks._send_ssf_event", "timestamp": "2025-07-24T20:08:44.769080"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "f2264254-3857-40ac-889a-87bf15242ff1", "task_name": "_send_ssf_event", "timestamp": "2025-07-24T20:08:44.773214"}
authentik-server      | {"action": "model_updated", "auth_via": "session", "client_ip": "192.0.2.111", "context": {"http_request": {"args": {"inspector": "available"}, "method": "POST", "path": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/", "request_id": "bca15861418c4f49a32195e13afb4891", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}, "model": {"app": "authentik_stages_authenticator_totp", "model_name": "totpdevice", "name": "TOTP Authenticator", "pk": 1}}, "domain_url": "auth.example.com", "event": "Created Event", "host": "auth.example.com", "level": "info", "logger": "authentik.events.models", "pid": 50584, "request_id": "bca15861418c4f49a32195e13afb4891", "schema_name": "public", "timestamp": "2025-07-24T20:08:44.775236", "user": {"email": "username@example.com", "pk": 5, "username": "username"}}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "f2264254385740ac889a87bf15242ff1", "task_name": "_send_ssf_event", "timestamp": "2025-07-24T20:08:44.777233"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "Task published", "host": "auth.example.com", "level": "info", "logger": "authentik.root.celery", "pid": 50584, "request_id": "bca15861418c4f49a32195e13afb4891", "schema_name": "public", "task_id": "7a69697922ff42a998064ad08a335bf4", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2025-07-24T20:08:44.781550"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "7a696979-22ff-42a9-9806-4ad08a335bf4", "task_name": "event_notification_handler", "timestamp": "2025-07-24T20:08:44.783250"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "Task published", "host": "auth.example.com", "level": "info", "logger": "authentik.root.celery", "pid": 50584, "request_id": "bca15861418c4f49a32195e13afb4891", "schema_name": "public", "task_id": "b439a33fa97446939ce59b04a2bf4910", "task_name": "authentik.enterprise.providers.ssf.tasks._send_ssf_event", "timestamp": "2025-07-24T20:08:44.792122"}
authentik-worker      | {"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "d3eba1190f9b40afbba81e931d6f3850", "task_name": "authentik.events.tasks.event_trigger_handler", "timestamp": "2025-07-24T20:08:44.812694"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/?query=inspector%3Davailable", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 50584, "remote": "192.0.2.111", "request_id": "bca15861418c4f49a32195e13afb4891", "runtime": 107, "schema_name": "public", "scheme": "https", "status": 302, "timestamp": "2025-07-24T20:08:44.814159", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-worker      | {"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "e4011235cb9c478ea00243bfaf1efb8a", "task_name": "authentik.events.tasks.event_trigger_handler", "timestamp": "2025-07-24T20:08:44.814748"}
authentik-worker      | {"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "4688a11578c94c15994422c4937ec76e", "task_name": "authentik.events.tasks.event_trigger_handler", "timestamp": "2025-07-24T20:08:44.816546"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "7a69697922ff42a998064ad08a335bf4", "task_name": "event_notification_handler", "timestamp": "2025-07-24T20:08:44.818088"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/?query=inspector%3Davailable", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "1d4c633430dd415b8fda632c68b964e8", "runtime": 78, "schema_name": "public", "scheme": "https", "status": 302, "timestamp": "2025-07-24T20:08:44.917588", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"action": "authorize_application", "auth_via": "session", "client_ip": "192.0.2.111", "context": {"authorized_application": {"app": "authentik_core", "model_name": "application", "name": "Remote Access", "pk": "ae59f657738e4eb4bb2ede7fd95663a3"}, "endpoint": "ssh priv key from dh1.internal.example.com", "flow": "60fb7bbe3a8d4e8c93b43d6bba7d2b5d", "http_request": {"args": {"inspector": "available"}, "method": "GET", "path": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/", "request_id": "a51ed3d061534195993158b2ac6877ab", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}}, "domain_url": "auth.example.com", "event": "Created Event", "host": "auth.example.com", "level": "info", "logger": "authentik.events.models", "pid": 50584, "request_id": "a51ed3d061534195993158b2ac6877ab", "schema_name": "public", "timestamp": "2025-07-24T20:08:44.998758", "user": {"email": "username@example.com", "pk": 5, "username": "username"}}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "Task published", "host": "auth.example.com", "level": "info", "logger": "authentik.root.celery", "pid": 50584, "request_id": "a51ed3d061534195993158b2ac6877ab", "schema_name": "public", "task_id": "7e47265d54cd450babc0d285ae8e1eed", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2025-07-24T20:08:45.017494"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "b439a33f-a974-4693-9ce5-9b04a2bf4910", "task_name": "_send_ssf_event", "timestamp": "2025-07-24T20:08:45.031312"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "b439a33fa97446939ce59b04a2bf4910", "task_name": "_send_ssf_event", "timestamp": "2025-07-24T20:08:45.032509"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "d3eba119-0f9b-40af-bba8-1e931d6f3850", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.035545"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/flows/executor/default-provider-authorization-explicit-consent/?query=inspector%3Davailable", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "a51ed3d061534195993158b2ac6877ab", "runtime": 101, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:45.046512", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "task_id": "7e47265d-54cd-450b-abc0-d285ae8e1eed", "task_name": "event_notification_handler", "timestamp": "2025-07-24T20:08:45.078588"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "d3eba1190f9b40afbba81e931d6f3850", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.085125"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "e4011235-cb9c-478e-a002-43bfaf1efb8a", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.086918"}
authentik-worker      | {"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "task_id": "72f70a3a90ab4c289207c5712ed96459", "task_name": "authentik.events.tasks.event_trigger_handler", "timestamp": "2025-07-24T20:08:45.106318"}
authentik-worker      | {"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "task_id": "0fb60a44480540b69416bdb66ce17f4d", "task_name": "authentik.events.tasks.event_trigger_handler", "timestamp": "2025-07-24T20:08:45.107707"}
authentik-worker      | {"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "task_id": "aaf04c8374c14e0e8cf036099370fd07", "task_name": "authentik.events.tasks.event_trigger_handler", "timestamp": "2025-07-24T20:08:45.108980"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "state": "SUCCESS", "task_id": "7e47265d54cd450babc0d285ae8e1eed", "task_name": "event_notification_handler", "timestamp": "2025-07-24T20:08:45.111239"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "task_id": "4688a115-78c9-4c15-9944-22c4937ec76e", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.113251"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "e4011235cb9c478ea00243bfaf1efb8a", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.132818"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "72f70a3a-90ab-4c28-9207-c5712ed96459", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.134600"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/if/rac/G4OVsRTDaaidFReULWFSeGrp3L7ZaUG3iSoVZO3agdvcf5JEneFl88OXSEv7/", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "dbefcd582653427aa73a22da0c3a14d0", "runtime": 57, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:45.141615", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "state": "SUCCESS", "task_id": "4688a11578c94c15994422c4937ec76e", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.167883"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "task_id": "0fb60a44-4805-40b6-9416-bdb66ce17f4d", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.169429"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "72f70a3a90ab4c289207c5712ed96459", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.173921"}
authentik-server      | {"event":"/if/rac/G4OVsRTDaaidFReULWFSeGrp3L7ZaUG3iSoVZO3agdvcf5JEneFl88OXSEv7/assets/fonts/RedHatText/RedHatText-Regular.woff2","host":"auth.example.com","level":"info","logger":"authentik.router","method":"GET","remote":"192.0.2.111","runtime":"0.238","scheme":"http","size":28169,"status":200,"timestamp":"2025-07-24T20:08:45Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-worker      | {"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "task_id": "aaf04c83-74c1-4e0e-8cf0-36099370fd07", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.176043"}
authentik-server      | {"domain_url": null, "event": "/ws/rac/G4OVsRTDaaidFReULWFSeGrp3L7ZaUG3iSoVZO3agdvcf5JEneFl88OXSEv7/", "level": "info", "logger": "authentik.asgi", "pid": 50584, "remote": "192.0.2.111", "schema_name": "public", "scheme": "ws", "timestamp": "2025-07-24T20:08:45.193168", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"event":"/if/rac/G4OVsRTDaaidFReULWFSeGrp3L7ZaUG3iSoVZO3agdvcf5JEneFl88OXSEv7/assets/fonts/RedHatDisplay/RedHatDisplay-Medium.woff2","host":"auth.example.com","level":"info","logger":"authentik.router","method":"GET","remote":"192.0.2.111","runtime":"0.240","scheme":"http","size":28661,"status":200,"timestamp":"2025-07-24T20:08:45Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47181, "schema_name": "public", "state": "SUCCESS", "task_id": "0fb60a44480540b69416bdb66ce17f4d", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.214838"}
authentik-worker      | {"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 47164, "schema_name": "public", "state": "SUCCESS", "task_id": "aaf04c8374c14e0e8cf036099370fd07", "task_name": "event_trigger_handler", "timestamp": "2025-07-24T20:08:45.228943"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/root/config/", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 40701, "remote": "192.0.2.111", "request_id": "c8aa5468c32c42ddb0adf3f96b6aac27", "runtime": 39, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:45.254255", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"auth_via": "session", "domain_url": "auth.example.com", "event": "/api/v3/core/brands/current/", "host": "auth.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 50584, "remote": "192.0.2.111", "request_id": "a1b57b2cfae5467182794be3cf49fad7", "runtime": 52, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-07-24T20:08:45.270393", "user": "username", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"}
authentik-server      | {"domain_url": null, "event": "/ws/outpost_rac/authentik_channels_specific.066588421f774d3ba921a2ffe573755e/", "level": "info", "logger": "authentik.asgi", "pid": 50584, "remote": "172.31.6.1", "schema_name": "public", "scheme": "ws", "timestamp": "2025-07-24T20:08:45.315258", "user_agent": "goauthentik.io/outpost/2025.6.4"}

• authentik version: 2025.6.4
• Deployment: Docker Compose version v2.32.4

Do let me know if there are any other logs or screenshots that I can provide.

[dewi-tik]

Could you please provide screenshots of the property mapping and RAC provider settings?

Could you also test one of the other methods of setting the private key that are mentioned in the guide? Such as setting the private key on the RAC provider or RAC endpoint. Just to see if the behavior is the same.

And I assume that connecting directly to the SSH endpoint outside of authentik using the same SSH key works as expected?