1 changed files with 12 additions and 0 deletions
@@ -23,6 +23,18 @@ data:
          title: matrix-invitation
          designation: enrollment

+      # The prompt stage had accumulated 16 unrelated system validation_policies
+      # (e.g. default-user-settings-authorization, default-oobe-password-usable)
+      # from manual UI setup, likely a "select all" slip in the policy picker.
+      # These crash on an anonymous enrollment context ('AnonymousUser' object
+      # has no attribute 'group_attributes', etc). A prompt stage needs none here.
+      - model: authentik_stages_prompt.promptstage
+        state: present
+        identifiers:
+          name: matrix-invitation-prompt
+        attrs:
+          validation_policies: []
+
      # Correct stage chain, mirroring the working matrix-enrollment flow:
      # Invite -> Prompt (username/email/password) -> Write -> Password -> Login
      # Root cause of the original bug: only Invite+Prompt were bound, both at