# UltiSuite — branding + lien inscription sur le flow de connexion
version: 1
metadata:
  name: UltiSuite brand and authentication
  labels:
    blueprints.goauthentik.io/instantiate: "true"
entries:
  - model: authentik_flows.flow
    identifiers:
      slug: default-authentication-flow
    attrs:
      name: Connexion UltiSuite
      title: Connexion UltiSuite

  - model: authentik_stages_identification.identificationstage
    identifiers:
      name: default-authentication-identification
    attrs:
      user_fields:
        - email
        - username
      enrollment_flow: !Find [authentik_flows.flow, [slug, ulti-enrollment]]

  - model: authentik_brands.brand
    identifiers:
      domain: authentik-default
    attrs:
      branding_title: UltiSuite
      branding_logo: /static/dist/assets/branding/ultisuite-logo-%(theme)s.png
      branding_favicon: /static/dist/assets/branding/ultisuite-favicon.png
      branding_custom_css: |
        /* UltiSuite — masquer le branding Authentik */
        ak-branding-footer,
        .pf-c-login__footer,
        .pf-c-login__footer-text,
        a[href*="goauthentik.io"],
        a[href*="authentik.io"] {
          display: none !important;
          visibility: hidden !important;
          height: 0 !important;
          overflow: hidden !important;
        }
        ak-brand-logo img,
        .pf-c-brand img {
          max-height: 48px;
          width: auto;
          max-width: min(280px, 80vw);
          content: url("/auth/static/dist/assets/branding/ultisuite-logo-light.png");
        }
        @media (prefers-color-scheme: dark) {
          ak-brand-logo img,
          .pf-c-brand img {
            content: url("/auth/static/dist/assets/branding/ultisuite-logo-dark.png");
          }
        }
        ak-flow-executor::part(footer) {
          display: none !important;
        }
      attributes:
        settings:
          locale: fr
      flow_authentication: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
      flow_invalidation: !Find [authentik_flows.flow, [slug, default-invalidation-flow]]
      flow_user_settings: !Find [authentik_flows.flow, [slug, default-user-settings-flow]]