core: add support for hiding applications from the user dashboard

authentik/core/api/applications.py

@@ -116,6 +116,7 @@ class Meta:
             "meta_publisher",
             "policy_engine_mode",
             "group",
+            "meta_hide",
         ]
         extra_kwargs = {
             "backchannel_providers": {"required": False},
@@ -279,6 +280,7 @@ def list(self, request: Request) -> Response:
         ).lower()
 
         queryset = self._filter_queryset_for_list(self.get_queryset())
+        queryset = queryset.exclude(meta_hide=True)
         paginator: Pagination = self.paginator
         paginated_apps = paginator.paginate_queryset(queryset, request)
 

authentik/core/migrations/0058_add_application_meta_hide.py

@@ -0,0 +1,20 @@
+# Generated by Django 5.2.12 on 2026-04-09 18:04
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("authentik_core", "0057_remove_user_groups_remove_user_user_permissions_and_more"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="application",
+            name="meta_hide",
+            field=models.BooleanField(
+                default=False, help_text="Hide this application from the user dashboard."
+            ),
+        ),
+    ]

authentik/core/models.py

@@ -735,6 +735,9 @@ class Application(SerializerModel, PolicyBindingModel):
     meta_icon = FileField(default="", blank=True)
     meta_description = models.TextField(default="", blank=True)
     meta_publisher = models.TextField(default="", blank=True)
+    meta_hide = models.BooleanField(
+        default=False, help_text=_("Hide this application from the user dashboard.")
+    )
 
     objects = ApplicationQuerySet.as_manager()
 

blueprints/schema.json

@@ -5215,6 +5215,11 @@
                     "type": "string",
                     "title": "Group"
                 },
+                "meta_hide": {
+                    "type": "boolean",
+                    "title": "Meta hide",
+                    "description": "Hide this application from the user dashboard."
+                },
                 "icon": {
                     "type": "string",
                     "minLength": 1,

schema.yml

@@ -33861,6 +33861,9 @@ components:
           $ref: '#/components/schemas/PolicyEngineMode'
         group:
           type: string
+        meta_hide:
+          type: boolean
+          description: Hide this application from the user dashboard.
       required:
       - backchannel_providers_obj
       - launch_url
@@ -33942,6 +33945,9 @@ components:
           $ref: '#/components/schemas/PolicyEngineMode'
         group:
           type: string
+        meta_hide:
+          type: boolean
+          description: Hide this application from the user dashboard.
       required:
       - name
       - slug
@@ -47118,6 +47124,9 @@ components:
           $ref: '#/components/schemas/PolicyEngineMode'
         group:
           type: string
+        meta_hide:
+          type: boolean
+          description: Hide this application from the user dashboard.
     PatchedAuthenticatorDuoStageRequest:
       type: object
       description: AuthenticatorDuoStage Serializer

web/src/admin/applications/ApplicationForm.ts

@@ -199,6 +199,15 @@ export class ApplicationForm extends WithCapabilitiesConfig(ModelForm<Applicatio
                         )}
                     >
                     </ak-switch-input>
+                    <ak-switch-input
+                        name="metaHide"
+                        ?checked=${this.instance?.metaHide ?? false}
+                        label=${msg("Hide from user dashboard")}
+                        help=${msg(
+                            "If checked, this application will not be shown on the user's application library.",
+                        )}
+                    >
+                    </ak-switch-input>
                     <ak-file-search-input
                         name="metaIcon"
                         label=${msg("Icon")}

web/src/admin/applications/wizard/steps/ak-application-wizard-application-step.ts

@@ -188,6 +188,15 @@ export class ApplicationWizardApplicationStep extends ApplicationWizardStep {
                             )}
                         >
                         </ak-switch-input>
+                        <ak-switch-input
+                            name="metaHide"
+                            ?checked=${app.metaHide ?? false}
+                            label=${msg("Hide from user dashboard")}
+                            help=${msg(
+                                "If checked, this application will not be shown on the user's application library.",
+                            )}
+                        >
+                        </ak-switch-input>
                         <ak-file-search-input
                             name="metaIcon"
                             label=${msg("Icon")}