roles/authentik/defaults/main.yml

@@ -94,9 +94,9 @@ authentik_entra_sources: []
 #      # - https://graph.microsoft.com/GroupMember.Read.All
 
 
-# Show Entra on login screen:
-authentik_login_source_ids: []
-# - "source-entra-entra-id"
+# Show OAuth sources on login screen (list of source slugs):
+authentik_login_sources: []
+# - slug: entra-id
 authentik_identification_stage_name: default-authentication-identification
 
 # Local login fields to show on login screen (username, email, upn)

roles/authentik/templates/blueprints/blueprint-login-sources.yaml.j2

@@ -16,8 +16,8 @@ entries:
 {% for field in authentik_login_user_fields %}
         - {{ field }}
 {% endfor %}
-      # OAuth/social login sources
+      # OAuth/social login sources (use !Find to reference sources from other blueprints)
       sources:
-{% for src_id in authentik_login_source_ids %}
-        - !KeyOf {{ src_id }}
+{% for src in authentik_login_sources %}
+        - !Find [authentik_sources_oauth.oauthsource, [slug, {{ src.slug }}]]
 {% endfor %}