Expression policy error `builtins.KeyError: 'flow_plan'` about authentik HOT 3 CLOSED

The docs should be clearer on this, but the error happens due to the fact that the policies bound directly to a flow are evaluated before the flow planner starts - and as such there's no flow_plan available yet and it can't be accessed in policies

from authentik.

Hey @BeryJu ,

the policies bound directly to a flow are evaluated before the flow planner starts

Does this correspond with the "pre-flow policies" as denoted by the flow diagram?

and as such there's no flow_plan available yet and it can't be accessed in policies

Would you then have any suggestions or alternatives on how should I proceed? My objective is to add the users to one (or mulitple) groups automatically.

from authentik.

Hey @BeryJu

I'll close this as I figured out what I was doing wrong, which was that I added the policy to the "Policy / Group / User Bindings" tab (which are apparently "pre-flow policies"), but what I needed was to add the policy inside the "Stage bindings" tab under the default-source-enrollment-write.

I totally not notice or just overlooked the dropdown arrow icon there, so I had no idea I could open it to add policies to it🤦‍♂️ Makes a lot more sense now, as I see the policy in my flow diagram before the user write stage (which the docs do point out correctly).

from authentik.