MIT License vs Enterprise License clarification

[josegomezr]

While reviewing the licenses (The main license file in the repo root /LICENSE and the Enterprise License under /authentik/enterprise/LICENSE).

I'm not very clear on the terms of the two documents; to be more precise on the enterprise license document, but let's go step by step.

The main license states:

Portions of this software are licensed as follows:

• All content residing under the "website/" directory of this repository is licensed under "Creative Commons: CC BY-SA 4.0 license".
• All content that resides under the "authentik/enterprise/" directory of this repository, if that directory exists, is licensed under the license defined in "authentik/enterprise/LICENSE".
• All client-side JavaScript (when served directly or after being compiled, arranged, augmented, or combined), is licensed under the "MIT Expat" license.
• All third party components incorporated into the authentik are licensed under the original license provided by the owner of the applicable component.
• Content outside of the above mentioned directories or restrictions above is available under the "MIT" license as defined below.

Which I understand as:

with the exception of listed items (website, enterprise, client-side JS and/or 3rd party libraries); everything is licensed under MIT License terms. Meaning: the software is provided as is, without restriction on its usage as long as the license document is kept as evidence.

And the enterprise license states:

This software and associated documentation files (the "Software") may only be
used in production, if you (and any entity that you represent) have agreed to,
and are in compliance with, the Authentik Subscription Terms of Service, available
at https://goauthentik.io/legal/terms (the "EE Terms"), or other
agreement governing the use of the Software, as agreed by you and authentik Security Inc,
and otherwise have a valid authentik Enterprise Edition subscription for the
correct number of user seats. Subject to the foregoing sentence, you are free to
modify this Software and publish patches to the Software.

Which I understand as:

You may only use the software components under the enterprise folder if you have a valid subscription with Authentik Security Inc covering the correct number of users.

However, there are software components being loaded in a clean vanilla "open source" installation of authentik.

See the authentik/root/settings.py file, under TENANT_APPS:

TENANT_APPS = [
    # [...]
    "authentik.enterprise",
	# [...]
]

Where unconditionally the authentik.enterprise app is loaded.

See also authentik/core/api/groups.py on GroupViewSet#get_ql_fields:

# [...]
def get_ql_fields(self):
    from djangoql.schema import BoolField, StrField

    from authentik.enterprise.search.fields import (
        JSONSearchField,
    )
# [...]

See also authentik/core/api/users.py on UserViewSet#get_ql_fields:

# [...]
def get_ql_fields(self):
    from djangoql.schema import BoolField, StrField

    from authentik.enterprise.search.fields import (
        ChoiceSearchField,
        JSONSearchField,
    )
# [...]

It seems to be impossible to run a vanilla installation of authentik, the MIT and other related OSS licensed content, without loading enterprise software components.

But consuming enterprise software components, as the enterprise license dictates, is allowed if and only if one has a valid subscription/license agreement with Authentik.

Is this intended? Do I miss a document to review?

[xpufx]

https://next.goauthentik.io/enterprise/get-started?utm_source=authentik

Enterprise features are enabled by installing a license.

I don't know if there is any actual code to prevent use of the enterprise features but the code and the installation procedure is the same as the OSS version. You enable features by installing a license.