[GH-ISSUE #1717] User invites not avaliable on self-hosted deloyment using Authentik #3075

Closed
opened 2026-08-05 00:50:27 -04:00 by saavagebueno · 7 comments
Owner

Originally created by @callumgare on GitHub (Mar 15, 2024).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/1717

Describe the problem

The "Invite User" button you get on the cloud version of Netbird is not available when using the self-hosted service with Authentik IdP.

Cloud:
image

Self-hosted with Authentik:
image

To Reproduce

Steps to reproduce the behavior:

  1. Setup self-hosted Netbird with Authentik for the IdP following the official guide
  2. Go to the users tab in the Netbird web interface
  3. Observe that there is not "Invite User" button

Expected behavior

An "Invite User" button to be visible.

Are you using NetBird Cloud?

Self-hosted

NetBird version

0.26.3

NetBird status -d output:

N/A

Additional context

This issue is related but was for the "User Invites" button not showing for self-hosted developments in general and was closed after support was added for self-hosted setups using Keycloak which solved the problem for the original poster.

Originally created by @callumgare on GitHub (Mar 15, 2024). Original GitHub issue: https://github.com/netbirdio/netbird/issues/1717 **Describe the problem** The "Invite User" button you get on the cloud version of Netbird is not available when using the self-hosted service with Authentik IdP. Cloud: <img width="1512" alt="image" src="https://github.com/netbirdio/netbird/assets/346340/111418ac-7b61-436c-ba3e-ea2e8468fa85"> Self-hosted with Authentik: <img width="1512" alt="image" src="https://github.com/netbirdio/netbird/assets/346340/01c4a77f-8921-40cc-8486-3b515fe7003c"> **To Reproduce** Steps to reproduce the behavior: 1. Setup self-hosted Netbird with Authentik for the IdP following the [official guide](https://docs.netbird.io/selfhosted/identity-providers#authentik) 2. Go to the users tab in the Netbird web interface 3. Observe that there is not "Invite User" button **Expected behavior** An "Invite User" button to be visible. **Are you using NetBird Cloud?** Self-hosted **NetBird version** [0.26.3](https://hub.docker.com/layers/netbirdio/management/0.26.3/images/sha256-d6e26bad5f1aa1b8aac9b43a040c8f0748d8cdfda3852743ad9abf5ad64c523b?context=explore) **NetBird status -d output:** N/A **Additional context** [This issue](https://github.com/netbirdio/netbird/issues/855) is related but was for the "User Invites" button not showing for self-hosted developments in general and was closed after support was added for self-hosted setups using Keycloak which solved the problem for the original poster.
saavagebueno added the questionidpauthentikself-hosting labels 2026-08-05 00:50:27 -04:00
Author
Owner

@braginini commented on GitHub (Mar 16, 2024):

Hi @callumgare
There are two points here:

  1. In our opinion it doesn’t make sense to support invites in the self-hosted version as the administrators of self-hosted NetBird setups usually have a full control of the identity provider. They can create and invite users from there. It is more flexible and less error prone.
  2. Supporting this in the self-hosted might become a complex task as we would need to support different IdPs with different APIs. It can also cause a confusion because some users might assume that it would work out of the box, however a proper SMTP server must be configured in the IdP beforehand.

What do you think?

<!-- gh-comment-id:2001932113 --> @braginini commented on GitHub (Mar 16, 2024): Hi @callumgare There are two points here: 1. In our opinion it doesn’t make sense to support invites in the self-hosted version as the administrators of self-hosted NetBird setups usually have a full control of the identity provider. They can create and invite users from there. It is more flexible and less error prone. 2. Supporting this in the self-hosted might become a complex task as we would need to support different IdPs with different APIs. It can also cause a confusion because some users might assume that it would work out of the box, however a proper SMTP server must be configured in the IdP beforehand. What do you think?
Author
Owner

@callumgare commented on GitHub (Mar 17, 2024):

If it's possible to achieve the same result by adding users in the IdP that would certainly work for me. However when I create a new user (with an email in the same domain or not), grant that user access to Netbird then attempt to login to Netbird with that user, it always puts that user in new team rather than adding it to the existing team.

image image

Is it possible to add to the same team and do you know how I'd do that?

<!-- gh-comment-id:2002344595 --> @callumgare commented on GitHub (Mar 17, 2024): If it's possible to achieve the same result by adding users in the IdP that would certainly work for me. However when I create a new user (with an email in the same domain or not), grant that user access to Netbird then attempt to login to Netbird with that user, it always puts that user in new team rather than adding it to the existing team. <img width="1313" alt="image" src="https://github.com/netbirdio/netbird/assets/346340/f69a2973-f2c5-4a10-bfca-c505a0ae343a"> <img width="1180" alt="image" src="https://github.com/netbirdio/netbird/assets/346340/87be1621-533a-4ac2-b540-0a0cf4b0c8dc"> Is it possible to add to the same team and do you know how I'd do that?
Author
Owner

@callumgare commented on GitHub (Mar 17, 2024):

The only documentation I could find on the subject suggested the opposite should be happening:

"This feature isn't available in the self-hosted setup. By default, all users are joining the same network instead" -https://docs.netbird.io/how-to/add-users-to-your-network

<!-- gh-comment-id:2002346292 --> @callumgare commented on GitHub (Mar 17, 2024): The only documentation I could find on the subject suggested the opposite should be happening: "This feature isn't available in the self-hosted setup. By default, all users are joining the same network instead" -https://docs.netbird.io/how-to/add-users-to-your-network
Author
Owner

@braginini commented on GitHub (Mar 17, 2024):

It is possible @callumgare.
You have probably disabled the single account mode. By default netbird puts everyone under the same account in the self-hosted setups.

It will be now hard to reset the configuration as you already have multiple accounts. It will require a manual adjustment to merge the accounts.

Alternatively, you could just recreate NetBird management volumes to start with a clean state. Make sure that you keep the management section in the docker compose as in the example: 416f04c27a/infrastructure_files/docker-compose.yml.tmpl (L58)

<!-- gh-comment-id:2002389152 --> @braginini commented on GitHub (Mar 17, 2024): It is possible @callumgare. You have probably disabled the single account mode. By default netbird puts everyone under the same account in the self-hosted setups. It will be now hard to reset the configuration as you already have multiple accounts. It will require a manual adjustment to merge the accounts. Alternatively, you could just recreate NetBird management volumes to start with a clean state. Make sure that you keep the management section in the docker compose as in the example: https://github.com/netbirdio/netbird/blob/416f04c27a10309f70f1f376a0e8db0ed57f1aad/infrastructure_files/docker-compose.yml.tmpl#L58
Author
Owner

@callumgare commented on GitHub (Mar 17, 2024):

Ah I see! When I was setting up netbird I figured "disable single account" ment that it enabled the use of multiple users and thus that's what I wanted. I've reset everything and removed that flag and things seem to be working as expected now. Even if I add a user who's email has a different domain to the owner user. Thanks very much!
Screenshot 2024-03-18 at 14 26 16

<!-- gh-comment-id:2002873979 --> @callumgare commented on GitHub (Mar 17, 2024): Ah I see! When I was setting up netbird I figured "disable single account" ment that it enabled the use of multiple users and thus that's what I wanted. I've reset everything and removed that flag and things seem to be working as expected now. Even if I add a user who's email has a different domain to the owner user. Thanks very much! ![Screenshot 2024-03-18 at 14 26 16](https://github.com/netbirdio/netbird/assets/346340/b628f839-61d7-4129-86ba-abe973d20b33)
Author
Owner

@braginini commented on GitHub (Mar 18, 2024):

Awesome @callumgare. Enjoy :)

<!-- gh-comment-id:2003198673 --> @braginini commented on GitHub (Mar 18, 2024): Awesome @callumgare. Enjoy :)
Author
Owner

@BJorah commented on GitHub (Jul 22, 2024):

Hi !@callumgare
Are you disable signal-account-mode so that you can create multiple net on one self-hosted server?
Would you please tell me how to config it to disable the signal-account-mode?

<!-- gh-comment-id:2244105594 --> @BJorah commented on GitHub (Jul 22, 2024): Hi !@callumgare Are you disable signal-account-mode so that you can create multiple net on one self-hosted server? Would you please tell me how to config it to disable the signal-account-mode?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#3075