https://integrations.goauthentik.io/chat-communication-collaboration/roundcube/

not sure if i missed a step or something but i cannot get this to work as is due to the active attribute missing in the request, but dovecot is expecting one, so it considers the response invalid.

i simply hardcoded it in the property mapping like so.

return {
"name": request.user.name,
"given_name": request.user.name,
"family_name": "",
"preferred_username": request.user.username,
"nickname": request.user.username,
"active" : True,
}

there is a better way to do this i am sure but it allowed me to login.

i also had an issue with the refresh token not being included in the request, so roundcube would start throwing errors after 5 min.

i fixed this by adding the offline access scope to the provider in authentik and in the roundcube config requesting the scope , not sure if it needs to be added to dovecot also.

$config['oauth_scope'] = 'email openid dovecotprofile offline_access';

just a few things to update in the documentation to help the next guy, or let me know where i went wrong in the setup.