check for duplicate email address on enrollment?

[cheggerdev]

Describe your question/
On an enrollment it is possible to check if the user given mail address is already in use by another account
(in stage default-source-enrollment-prompt or in default-source-enrollment-write) ?
Applications like DokuWiki get confused when there are multiple accounts with the same mail address?
Basically I want to enforce that all accounts have an unique mail address.

Version and Deployment (please complete the following information):

• authentik version: 2024.12.1
• Deployment: docker-compose

[samip5]

There is with expression policys and some Python.

[cheggerdev]

Excellent. Is there an example or skeleton that shows how to do it?

[samip5]

Excellent. Is there an example or skeleton that shows how to do it?

It's a bit of trial and error.

This might also help: https://github.com/pikaviestin/documentation/blob/main/email_validation_policy.py
https://docs.goauthentik.io/docs/customize/policies/expression

[Chasethechicken]

We are using this expression policy to check for duplicate emails:

from authentik.core.models import User

email = request.context["prompt_data"]["email"]
if User.objects.filter(email__iexact=email).exists():
  ak_message("This email address is already in use.")
  return False
return True

[cheggerdev]

Thank you very much. All of it is very helpful.