authentik as an access review source

Access Review now connects to authentik. Add the instance URL and an API-intent token, and Probo pulls in users and their MFA status for the next campaign.

MFA status comes from authentik’s own authenticator devices. When a device type can’t be read, Probo marks that account’s MFA as unknown rather than guessing it’s off, so a review doesn’t quietly under-report weak accounts.

If your team self-hosts identity instead of using Okta or Google, this closes a gap that used to mean manual spreadsheets.