--- title: "Render Integration, Authentik SSO support and more | Phase Changelog" description: "July was another busy month, with the platform seeing native integration for Render, support for Authentik SSO, new features, optimizations and bug fixes." url: https://phase.dev/changelog/render-authentik-and-more/ --- [Changelog](https://phase.dev/changelog/) 2025.08.13 # Render Integration, Authentik SSO support and more July was another busy month, with the platform seeing native integration for Render, support for Authentik SSO, new features, optimizations and bug fixes. [render](https://phase.dev/changelog/tag/render/)[authentik](https://phase.dev/changelog/tag/authentik/)[console](https://phase.dev/changelog/tag/console/)[secrets](https://phase.dev/changelog/tag/secrets/)[access](https://phase.dev/changelog/tag/access/)[logs](https://phase.dev/changelog/tag/logs/) July was another busy month, with the platform seeing native integration for Render, support for Authentik SSO, new features, optimizations and bug fixes. Here's a quick catch-up of everything we've shipped over the last few weeks. * * * ## Render integration ![render create sync button](https://phase.dev/assets/images/changelog/render-authentik/create-render-sync-button.png) You can now sync secrets to [Render](https://render.com/) via the native integration directly in the Console. To set up a sync, add your Render API key under Integrations > Third-party credentials. Check out the [docs](https://docs.phase.dev/integrations/platforms/render#step-1-authentication) for detailed instructions on how to get these from the Render dashboard. Next, set up the sync by choosing your source environment and path, and either a Render *Service* or *Environment Group* as the destination: ![sync to render service](https://phase.dev/assets/images/changelog/render-authentik/render-service-sync.png)Sync secrets to a Render Service ![sync to render env group](https://phase.dev/assets/images/changelog/render-authentik/render-envgroup-sync.png)Sync secrets to a Render Environment Group Secrets will now automatically sync to Render whenever you make changes to your environment. You can manage these syncs and view logs from Integrations > Syncs, or the Syncing tab in your App. ## Authentik SSO support So far the only SSO options for self-hosted instances of Phase were Google, GitHub, or GitLab. Although GitLab can be self-hosted, it was significant overkill for users who were just looking for an authentication solution without relying on a Cloud-based third party provider. [Authentik](https://goauthentik.io/) was the most [highly requested](https://github.com/phasehq/console/issues/361) alternative provider, and support for Authentik as an SSO provider is now available, allowing for a fully self-hosted authentication solution for your Phase instance. Create an Authentik app with an OAuth 2.0 / OpenID provider, set up the redirect URL, and bind your app to a policy, group or individual user. ![authentik app](https://phase.dev/assets/images/changelog/render-authentik/authentik-config.png) Once your Authentik App is set up, supply the `AUTHENTIK_CLIENT_ID`, `AUTHENTIK_CLIENT_SECRET`, `AUTHENTIK_URL`, and `AUTHENTIK_APP_SLUG` env vars to your Phase instance. Make sure to add `authentik` to your `SSO_PROVIDERS` and you should be all set. ![authentik app](https://phase.dev/assets/images/changelog/render-authentik/authentik-login.png) Check out the [docs](https://docs.phase.dev/access-control/authentication/oauth-sso#authentik) for complete instructions on setting up Authentik SSO for your Phase instance. ## Updated import behavior We've fixed a few bugs with the import feature in the Console and improved how imported secrets are parsed. The parser now recognizes pre-existing keys and updates their values rather than simply importing them as duplicate secrets: We've also made various bug fixes to the import UX when deselecting certain environments, or choosing to import values or comments into a subset of your App's environments. These updates make the import experience much more usable and help quickly populate or update your Apps and Environments with secrets from `.env` files or other platforms. ## New login screen We've reworked the login page with a fresh coat of paint, light and dark theme variants, a system status indicator, and information about the instance you're currently on. ![login page](https://phase.dev/assets/images/changelog/render-authentik/login-page.png) ## Miscellaneous other updates There's plenty more that we've shipped over the last month or so, but here are the highlights. ### Service account optimizations We made several performance updates and UX improvements to the Service Account pages. Data fetching on the account detail pages has been optimized to prevent long-running queries related to tokens from blocking rendering or interactivity on other parts of the page. We've also made significant performance improvements to how Service Account and Token *deletes* are handled on the backend, as well as better loading states and UI feedback on the frontend. Deleted accounts and tokens are now also shown in log data and secret history: ![deleted account in logs](https://phase.dev/assets/images/changelog/render-authentik/logs-deleted-account.png) ![deleted account in secret history](https://phase.dev/assets/images/changelog/render-authentik/history-deleted-account.png) ### Improved Subscription & Billing management Cloud users can now view and manage their subscription and account information in more detail by clicking the "Manage billing" button from Settings > Organisation > Billing. You can also view and download invoices, alter payment methods, and update tax or company information from this screen. ![manage billing button](https://phase.dev/assets/images/changelog/render-authentik/manage-billing.png) ### Updated Manager role permissions The Manager role has been updated to include Billing management permissions. | Resource | Access | Read | Create | Update | Delete | | --- | --- | --- | --- | --- | --- | | **Organisation** | Read access | ✅ | ❌ | ❌ | ❌ | | **Billing** | Full access | ✅ | ✅ | ✅ | ✅ | | **Apps** | Full access | ✅ | ✅ | ✅ | ✅ | | **Members** | Full access | ✅ | ✅ | ✅ | ✅ | | **Member Personal Access Tokens** | No access | ❌ | ❌ | ❌ | ❌ | | **Service Accounts** | Full access | ✅ | ✅ | ✅ | ✅ | | **Service Account Tokens** | Full access | ✅ | ✅ | ✅ | ✅ | | **Roles** | Full access | ✅ | ✅ | ✅ | ✅ | | **Integration Credentials** | Full access | ✅ | ✅ | ✅ | ✅ | | **Network Access Policies** | Full access | ✅ | ✅ | ✅ | ✅ | * * * All these features are live now on [Phase Cloud](https://console.phase.dev) and available in the latest release [v2.50.2](https://github.com/phasehq/console/releases/tag/v2.50.2) for self-hosted users. As always, we'd love your feedback — come say hi on [Slack](https://slack.phase.dev) or [GitHub](https://github.com/phasehq). RoadmapCommunity-driven Request a feature We build features based on community requests and feedback. Looking for a specific feature or have a use-case in mind? Reach out to us. [Feature request](https://github.com/phasehq/console/issues/new?template=feature_request.md) DeploymentSelf-hosted / Cloud Get started ## Keep your secrets Self-host or start on fully managed Cloud in under a minute. Self-hosted Run Phase on your own infrastructure. Free and open source. AI agent deployment skill [![Docker Compose logo](https://phase.dev/assets/images/docker.svg)](https://docs.phase.dev/self-hosting/docker-compose)[![Kubernetes logo](https://phase.dev/assets/images/kubernetes.svg)](https://docs.phase.dev/self-hosting/kubernetes)[![AWS logo](https://phase.dev/assets/images/aws.svg)](https://docs.phase.dev/self-hosting/aws-eks)[![GCP logo](https://phase.dev/assets/images/gcp.svg)](https://docs.phase.dev/self-hosting/gcp)[![Azure logo](https://phase.dev/assets/images/azure.svg)](https://docs.phase.dev/self-hosting/azure)[![Railway logo](https://phase.dev/assets/images/railway.svg)](https://docs.phase.dev/self-hosting/railway)[![Raspberry Pi logo](https://phase.dev/assets/images/raspberry.svg)](https://docs.phase.dev/self-hosting/raspberrypi) [Self-hosting guide](https://docs.phase.dev/self-hosting) Cloud Fully managed. From signup to your first secret in 60 seconds. Sign up with [Google](https://console.phase.dev/login?provider=google)[GitHub](https://console.phase.dev/login?provider=github)[GitLab](https://console.phase.dev/login?provider=gitlab)