diff --git a/locale/en/LC_MESSAGES/django.po b/locale/en/LC_MESSAGES/django.po
index 6f00b9ffc..ea846e868 100644
--- a/locale/en/LC_MESSAGES/django.po
+++ b/locale/en/LC_MESSAGES/django.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2022-12-21 18:14+0000\n"
+"POT-Creation-Date: 2022-12-25 14:08+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -35,11 +35,11 @@ msgstr ""
 msgid "Managed by authentik"
 msgstr ""
 
-#: authentik/blueprints/models.py:156
+#: authentik/blueprints/models.py:155
 msgid "Blueprint Instance"
 msgstr ""
 
-#: authentik/blueprints/models.py:157
+#: authentik/blueprints/models.py:156
 msgid "Blueprint Instances"
 msgstr ""
 
@@ -81,7 +81,7 @@ msgstr ""
 msgid "User's display name."
 msgstr ""
 
-#: authentik/core/models.py:263 authentik/providers/oauth2/models.py:331
+#: authentik/core/models.py:263 authentik/providers/oauth2/models.py:333
 msgid "User"
 msgstr ""
 
@@ -732,193 +732,193 @@ msgstr ""
 msgid "LDAP Providers"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:43
+#: authentik/providers/oauth2/models.py:45
 msgid "Confidential"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:44
+#: authentik/providers/oauth2/models.py:46
 msgid "Public"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:66
+#: authentik/providers/oauth2/models.py:68
 msgid "Based on the Hashed User ID"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:67
+#: authentik/providers/oauth2/models.py:69
 msgid "Based on the username"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:70
+#: authentik/providers/oauth2/models.py:72
 msgid "Based on the User's Email. This is recommended over the UPN method."
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:86
+#: authentik/providers/oauth2/models.py:88
 msgid "Same identifier is used for all providers"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:88
+#: authentik/providers/oauth2/models.py:90
 msgid "Each provider has a different issuer, based on the application slug."
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:95
+#: authentik/providers/oauth2/models.py:97
 msgid "code (Authorization Code Flow)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:96
+#: authentik/providers/oauth2/models.py:98
 msgid "id_token (Implicit Flow)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:97
+#: authentik/providers/oauth2/models.py:99
 msgid "id_token token (Implicit Flow)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:98
+#: authentik/providers/oauth2/models.py:100
 msgid "code token (Hybrid Flow)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:99
+#: authentik/providers/oauth2/models.py:101
 msgid "code id_token (Hybrid Flow)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:100
+#: authentik/providers/oauth2/models.py:102
 msgid "code id_token token (Hybrid Flow)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:106
+#: authentik/providers/oauth2/models.py:108
 msgid "HS256 (Symmetric Encryption)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:107
+#: authentik/providers/oauth2/models.py:109
 msgid "RS256 (Asymmetric Encryption)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:108
+#: authentik/providers/oauth2/models.py:110
 msgid "ES256 (Asymmetric Encryption)"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:114
+#: authentik/providers/oauth2/models.py:116
 msgid "Scope used by the client"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:140
+#: authentik/providers/oauth2/models.py:142
 msgid "Scope Mapping"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:141
+#: authentik/providers/oauth2/models.py:143
 msgid "Scope Mappings"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:151
+#: authentik/providers/oauth2/models.py:153
 msgid "Client Type"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:153
+#: authentik/providers/oauth2/models.py:155
 msgid ""
 "Confidential clients are capable of maintaining the confidentiality of their "
 "credentials. Public clients are incapable"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:160
+#: authentik/providers/oauth2/models.py:162
 msgid "Client ID"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:166
+#: authentik/providers/oauth2/models.py:168
 msgid "Client Secret"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:172
+#: authentik/providers/oauth2/models.py:174
 msgid "Redirect URIs"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:173
+#: authentik/providers/oauth2/models.py:175
 msgid "Enter each URI on a new line."
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:178
+#: authentik/providers/oauth2/models.py:180
 msgid "Include claims in id_token"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:226
+#: authentik/providers/oauth2/models.py:228
 msgid "Signing Key"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:230
+#: authentik/providers/oauth2/models.py:232
 msgid ""
 "Key used to sign the tokens. Only required when JWT Algorithm is set to "
 "RS256."
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:237
+#: authentik/providers/oauth2/models.py:239
 msgid ""
 "Any JWT signed by the JWK of the selected source can be used to authenticate."
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:323
+#: authentik/providers/oauth2/models.py:325
 msgid "OAuth2/OpenID Provider"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:324
+#: authentik/providers/oauth2/models.py:326
 msgid "OAuth2/OpenID Providers"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:333
-#: authentik/providers/oauth2/models.py:550
+#: authentik/providers/oauth2/models.py:335
+#: authentik/providers/oauth2/models.py:552
 msgid "Scopes"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:351
+#: authentik/providers/oauth2/models.py:353
 msgid "Code"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:352
+#: authentik/providers/oauth2/models.py:354
 msgid "Nonce"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:353
+#: authentik/providers/oauth2/models.py:355
 msgid "Is Authentication?"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:354
+#: authentik/providers/oauth2/models.py:356
 msgid "Code Challenge"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:356
+#: authentik/providers/oauth2/models.py:358
 msgid "Code Challenge Method"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:376
+#: authentik/providers/oauth2/models.py:378
 msgid "Authorization Code"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:377
+#: authentik/providers/oauth2/models.py:379
 msgid "Authorization Codes"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:428
+#: authentik/providers/oauth2/models.py:430
 msgid "Access Token"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:429
+#: authentik/providers/oauth2/models.py:431
 msgid "Refresh Token"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:430
+#: authentik/providers/oauth2/models.py:432
 msgid "ID Token"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:439
+#: authentik/providers/oauth2/models.py:441
 msgid "OAuth2 Token"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:440
+#: authentik/providers/oauth2/models.py:442
 msgid "OAuth2 Tokens"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:562
+#: authentik/providers/oauth2/models.py:564
 msgid "Device Token"
 msgstr ""
 
-#: authentik/providers/oauth2/models.py:563
+#: authentik/providers/oauth2/models.py:565
 msgid "Device Tokens"
 msgstr ""
 
@@ -1763,19 +1763,23 @@ msgstr ""
 msgid "Invitation Stages"
 msgstr ""
 
-#: authentik/stages/invitation/models.py:60
-msgid "When enabled, the invitation will be deleted after usage."
+#: authentik/stages/invitation/models.py:63
+msgid "When set, only the configured flow can use this invitation."
 msgstr ""
 
 #: authentik/stages/invitation/models.py:67
+msgid "When enabled, the invitation will be deleted after usage."
+msgstr ""
+
+#: authentik/stages/invitation/models.py:74
 msgid "Optional fixed data to enforce on user enrollment."
 msgstr ""
 
-#: authentik/stages/invitation/models.py:81
+#: authentik/stages/invitation/models.py:88
 msgid "Invitation"
 msgstr ""
 
-#: authentik/stages/invitation/models.py:82
+#: authentik/stages/invitation/models.py:89
 msgid "Invitations"
 msgstr ""
 
@@ -1907,26 +1911,34 @@ msgstr ""
 msgid "User Logout Stages"
 msgstr ""
 
-#: authentik/stages/user_write/models.py:18
+#: authentik/stages/user_write/models.py:28
 msgid "When set, newly created users are inactive and cannot login."
 msgstr ""
 
-#: authentik/stages/user_write/models.py:26
+#: authentik/stages/user_write/models.py:36
 msgid "Optionally add newly created users to this group."
 msgstr ""
 
-#: authentik/stages/user_write/models.py:52
+#: authentik/stages/user_write/models.py:62
 msgid "User Write Stage"
 msgstr ""
 
-#: authentik/stages/user_write/models.py:53
+#: authentik/stages/user_write/models.py:63
 msgid "User Write Stages"
 msgstr ""
 
-#: authentik/stages/user_write/stage.py:114
+#: authentik/stages/user_write/stage.py:117
 msgid "No Pending data."
 msgstr ""
 
+#: authentik/stages/user_write/stage.py:123
+msgid "No user found and can't create new user."
+msgstr ""
+
+#: authentik/stages/user_write/stage.py:150
+msgid "Failed to save user"
+msgstr ""
+
 #: authentik/tenants/models.py:23
 msgid ""
 "Domain that activates this tenant. Can be a superset, i.e. `a.b` for `aa.b` "
diff --git a/web/src/admin/flows/BoundStagesList.ts b/web/src/admin/flows/BoundStagesList.ts
index 9c4d86776..e038c1759 100644
--- a/web/src/admin/flows/BoundStagesList.ts
+++ b/web/src/admin/flows/BoundStagesList.ts
@@ -141,14 +141,18 @@ export class BoundStagesList extends Table<FlowStageBinding> {
 
     renderToolbar(): TemplateResult {
         return html`
+            <ak-stage-wizard
+                createText=${t`Create & bind Stage`}
+                ?showBindingPage=${true}
+                bindingTarget=${ifDefined(this.target)}
+            ></ak-stage-wizard>
             <ak-forms-modal>
                 <span slot="submit"> ${t`Create`} </span>
                 <span slot="header"> ${t`Create Stage binding`} </span>
                 <ak-stage-binding-form slot="form" targetPk=${ifDefined(this.target)}>
                 </ak-stage-binding-form>
-                <button slot="trigger" class="pf-c-button pf-m-primary">${t`Bind stage`}</button>
+                <button slot="trigger" class="pf-c-button pf-m-primary">${t`Bind existing stage`}</button>
             </ak-forms-modal>
-            <ak-stage-wizard createText=${t`Create Stage`}></ak-stage-wizard>
             ${super.renderToolbar()}
         `;
     }
diff --git a/web/src/admin/flows/StageBindingForm.ts b/web/src/admin/flows/StageBindingForm.ts
index 0aa6aec1a..1802d6700 100644
--- a/web/src/admin/flows/StageBindingForm.ts
+++ b/web/src/admin/flows/StageBindingForm.ts
@@ -31,7 +31,7 @@ export class StageBindingForm extends ModelForm<FlowStageBinding, string> {
     targetPk?: string;
 
     getSuccessMessage(): string {
-        if (this.instance) {
+        if (this.instance?.pk) {
             return t`Successfully updated binding.`;
         } else {
             return t`Successfully created binding.`;
@@ -39,9 +39,9 @@ export class StageBindingForm extends ModelForm<FlowStageBinding, string> {
     }
 
     send = (data: FlowStageBinding): Promise<FlowStageBinding> => {
-        if (this.instance) {
+        if (this.instance?.pk) {
             return new FlowsApi(DEFAULT_CONFIG).flowsBindingsUpdate({
-                fsbUuid: this.instance.pk || "",
+                fsbUuid: this.instance.pk,
                 flowStageBindingRequest: data,
             });
         } else {
@@ -67,21 +67,18 @@ export class StageBindingForm extends ModelForm<FlowStageBinding, string> {
         `;
     }
 
-    getOrder(): Promise<number> {
-        if (this.instance) {
-            return Promise.resolve(this.instance.order);
+    async getOrder(): Promise<number> {
+        if (this.instance?.pk) {
+            return this.instance.order;
         }
-        return new FlowsApi(DEFAULT_CONFIG)
-            .flowsBindingsList({
-                target: this.targetPk || "",
-            })
-            .then((bindings) => {
-                const orders = bindings.results.map((binding) => binding.order);
-                if (orders.length < 1) {
-                    return 0;
-                }
-                return Math.max(...orders) + 1;
-            });
+        const bindings = await new FlowsApi(DEFAULT_CONFIG).flowsBindingsList({
+            target: this.targetPk || "",
+        });
+        const orders = bindings.results.map((binding) => binding.order);
+        if (orders.length < 1) {
+            return 0;
+        }
+        return Math.max(...orders) + 1;
     }
 
     renderTarget(): TemplateResult {
diff --git a/web/src/admin/policies/BoundPoliciesList.ts b/web/src/admin/policies/BoundPoliciesList.ts
index 0647316ca..8263f3d8e 100644
--- a/web/src/admin/policies/BoundPoliciesList.ts
+++ b/web/src/admin/policies/BoundPoliciesList.ts
@@ -186,7 +186,12 @@ export class BoundPoliciesList extends Table<PolicyBinding> {
     }
 
     renderToolbar(): TemplateResult {
-        return html`<ak-forms-modal size=${PFSize.Medium}>
+        return html`<ak-policy-wizard
+                createText=${t`Create & bind Policy`}
+                ?showBindingPage=${true}
+                bindingTarget=${ifDefined(this.target)}
+            ></ak-policy-wizard>
+            <ak-forms-modal size=${PFSize.Medium}>
                 <span slot="submit"> ${t`Create`} </span>
                 <span slot="header"> ${t`Create Binding`} </span>
                 <ak-policy-binding-form
@@ -196,13 +201,8 @@ export class BoundPoliciesList extends Table<PolicyBinding> {
                 >
                 </ak-policy-binding-form>
                 <button slot="trigger" class="pf-c-button pf-m-primary">
-                    ${t`Create Binding`}
+                    ${t`Bind existing policy`}
                 </button>
-            </ak-forms-modal>
-            <ak-policy-wizard
-                createText=${t`Create Policy`}
-                ?showBindingPage=${true}
-                bindingTarget=${ifDefined(this.target)}
-            ></ak-policy-wizard> `;
+            </ak-forms-modal> `;
     }
 }
diff --git a/web/src/admin/policies/PolicyWizard.ts b/web/src/admin/policies/PolicyWizard.ts
index 0a27075c0..fdd7e9b22 100644
--- a/web/src/admin/policies/PolicyWizard.ts
+++ b/web/src/admin/policies/PolicyWizard.ts
@@ -49,6 +49,11 @@ export class InitialPolicyWizardPage extends WizardPage {
                         id=${`${type.component}-${type.modelName}`}
                         @change=${() => {
                             const idx = this.host.steps.indexOf("initial") + 1;
+                            // Exclude all current steps starting with type-,
+                            // this happens when the user selects a type and then goes back
+                            this.host.steps = this.host.steps.filter(
+                                (step) => !step.startsWith("type-"),
+                            );
                             this.host.steps.splice(
                                 idx,
                                 0,
diff --git a/web/src/admin/stages/StageWizard.ts b/web/src/admin/stages/StageWizard.ts
index b1938b1ff..98fd9cd48 100644
--- a/web/src/admin/stages/StageWizard.ts
+++ b/web/src/admin/stages/StageWizard.ts
@@ -1,3 +1,4 @@
+import { StageBindingForm } from "@goauthentik/admin/flows/StageBindingForm";
 import "@goauthentik/admin/stages/authenticator_duo/AuthenticatorDuoStageForm";
 import "@goauthentik/admin/stages/authenticator_sms/AuthenticatorSMSStageForm";
 import "@goauthentik/admin/stages/authenticator_static/AuthenticatorStaticStageForm";
@@ -21,6 +22,7 @@ import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { AKElement } from "@goauthentik/elements/Base";
 import "@goauthentik/elements/forms/ProxyForm";
 import "@goauthentik/elements/wizard/FormWizardPage";
+import { FormWizardPage } from "@goauthentik/elements/wizard/FormWizardPage";
 import "@goauthentik/elements/wizard/Wizard";
 import { WizardPage } from "@goauthentik/elements/wizard/WizardPage";
 
@@ -36,7 +38,7 @@ import PFForm from "@patternfly/patternfly/components/Form/form.css";
 import PFRadio from "@patternfly/patternfly/components/Radio/radio.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";
 
-import { StagesApi, TypeCreate } from "@goauthentik/api";
+import { FlowStageBinding, Stage, StagesApi, TypeCreate } from "@goauthentik/api";
 
 @customElement("ak-stage-wizard-initial")
 export class InitialStageWizardPage extends WizardPage {
@@ -58,10 +60,17 @@ export class InitialStageWizardPage extends WizardPage {
                         name="type"
                         id=${`${type.component}-${type.modelName}`}
                         @change=${() => {
-                            this.host.steps = [
-                                "initial",
+                            const idx = this.host.steps.indexOf("initial") + 1;
+                            // Exclude all current steps starting with type-,
+                            // this happens when the user selects a type and then goes back
+                            this.host.steps = this.host.steps.filter(
+                                (step) => !step.startsWith("type-"),
+                            );
+                            this.host.steps.splice(
+                                idx,
+                                0,
                                 `type-${type.component}-${type.modelName}`,
-                            ];
+                            );
                             this.host.isValid = true;
                         }}
                     />
@@ -84,6 +93,12 @@ export class StageWizard extends AKElement {
     @property()
     createText = t`Create`;
 
+    @property({ type: Boolean })
+    showBindingPage = false;
+
+    @property()
+    bindingTarget?: string;
+
     @property({ attribute: false })
     stageTypes: TypeCreate[] = [];
 
@@ -96,7 +111,7 @@ export class StageWizard extends AKElement {
     render(): TemplateResult {
         return html`
             <ak-wizard
-                .steps=${["initial"]}
+                .steps=${this.showBindingPage ? ["initial", "create-binding"] : ["initial"]}
                 header=${t`New stage`}
                 description=${t`Create a new stage.`}
             >
@@ -112,6 +127,25 @@ export class StageWizard extends AKElement {
                         </ak-wizard-page-form>
                     `;
                 })}
+                ${this.showBindingPage
+                    ? html`<ak-wizard-page-form
+                          slot="create-binding"
+                          .sidebarLabel=${() => t`Create Binding`}
+                          .activePageCallback=${async (context: FormWizardPage) => {
+                              const createSlot = context.host.steps[1];
+                              const bindingForm =
+                                  context.querySelector<StageBindingForm>("ak-stage-binding-form");
+                              if (!bindingForm) return;
+                              bindingForm.instance = {
+                                  stage: (context.host.state[createSlot] as Stage).pk,
+                              } as FlowStageBinding;
+                          }}
+                      >
+                          <ak-stage-binding-form
+                              .targetPk=${this.bindingTarget}
+                          ></ak-stage-binding-form>
+                      </ak-wizard-page-form>`
+                    : html``}
                 <button slot="trigger" class="pf-c-button pf-m-primary">${this.createText}</button>
             </ak-wizard>
         `;
diff --git a/web/src/locales/de.po b/web/src/locales/de.po
index 586cd6ee3..2a7e00c86 100644
--- a/web/src/locales/de.po
+++ b/web/src/locales/de.po
@@ -786,6 +786,14 @@ msgstr "Bind DN"
 msgid "Bind Password"
 msgstr "Bind Password"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Ablauf-Verknüpfung"
@@ -794,7 +802,6 @@ msgstr "Ablauf-Verknüpfung"
 msgid "Bind mode"
 msgstr "Bindungsmodus"
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Phasen-Verknüpfung"
@@ -892,6 +899,10 @@ msgstr "Callback URL"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "Kann das Format 'unix://' haben, wenn eine Verbindung zu einem lokalen Docker-Daemon hergestellt wird, oder 'ssh://', wenn eine Verbindung über SSH hergestellt wird, oder 'https://:2376', wenn eine Verbindung zu einem entfernten System hergestellt wird."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1428,6 +1439,14 @@ msgstr "Wiederherstellungslink kopieren"
 msgid "Create"
 msgstr "Erstellen"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1441,7 +1460,8 @@ msgstr "Anwendung erstellen"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "Verknüpfung erstellen"
 
@@ -1482,8 +1502,8 @@ msgid "Create Outpost"
 msgstr "Außenposten erstellen"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "Richtlinie erstellen"
+#~ msgid "Create Policy"
+#~ msgstr "Richtlinie erstellen"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1498,8 +1518,8 @@ msgid "Create Service account"
 msgstr "Internes Konto erstellen"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "Stufe erstellen"
+#~ msgid "Create Stage"
+#~ msgstr "Stufe erstellen"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1883,6 +1903,11 @@ msgstr "Verbindung trennen"
 msgid "Docker URL"
 msgstr "Docker URL"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2419,6 +2444,7 @@ msgid "Finish"
 msgstr "Fertig"
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "Ablauf"
 
@@ -3022,6 +3048,10 @@ msgstr "Ablauf der Invalidierung"
 #~ msgid "Invitation"
 #~ msgstr "Einladung"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "Einladung verwendet"
@@ -3305,6 +3335,7 @@ msgstr "Wird geladen"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3333,6 +3364,10 @@ msgstr "Lokal"
 msgid "Local (notifications will be created within authentik)"
 msgstr "Lokal (Benachrichtigungen werden innerhalb von authentik erstellt)"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "Gebietsschema"
 
@@ -3962,6 +3997,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -5014,6 +5057,14 @@ msgstr "Authentifikator für Sicherheitsschlüssel"
 msgid "See documentation for a list of all variables."
 msgstr "Eine Liste aller Variablen finden Sie in der Dokumentation."
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "Wählen Sie einen Anbieter aus, den diese Anwendung verwenden soll. Alternativ erstellen Sie einen neuen Anbieter."
@@ -6363,6 +6414,10 @@ msgstr "UID-Startnummer"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "URL-Einstellungen"
@@ -7106,6 +7161,10 @@ msgstr "Wenn diese Option aktiviert ist, werden die globalen E-Mail Verbindungse
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "Wenn diese Option aktiviert ist, wird die Einladung nach ihrer Benutzung gelöscht."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "Wenn diese Option aktiviert ist, werden Benutzerfelder unabhängig von ihrem Format abgeglichen."
@@ -7122,6 +7181,10 @@ msgstr "Wenn diese Option ausgewählt ist, wird ein Passwortfeld auf derselben S
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "Wenn diese Option ausgewählt ist, werden die Signaturen eingehender Behauptungen anhand dieses Zertifikats validiert. Um nicht signierte Anfragen zuzulassen, belassen Sie die Standardeinstellung."
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/en.po b/web/src/locales/en.po
index 58942353c..83e70388b 100644
--- a/web/src/locales/en.po
+++ b/web/src/locales/en.po
@@ -777,6 +777,14 @@ msgstr "Bind DN"
 msgid "Bind Password"
 msgstr "Bind Password"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr "Bind existing policy"
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr "Bind existing stage"
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Bind flow"
@@ -785,7 +793,6 @@ msgstr "Bind flow"
 msgid "Bind mode"
 msgstr "Bind mode"
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Bind stage"
@@ -885,6 +892,10 @@ msgstr "Callback URL"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr "Can create users"
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1432,6 +1443,14 @@ msgstr "Copy recovery link"
 msgid "Create"
 msgstr "Create"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr "Create & bind Policy"
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr "Create & bind Stage"
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1445,7 +1464,8 @@ msgstr "Create Application"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "Create Binding"
 
@@ -1486,8 +1506,8 @@ msgid "Create Outpost"
 msgstr "Create Outpost"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "Create Policy"
+#~ msgid "Create Policy"
+#~ msgstr "Create Policy"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1502,8 +1522,8 @@ msgid "Create Service account"
 msgstr "Create Service account"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "Create Stage"
+#~ msgid "Create Stage"
+#~ msgstr "Create Stage"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1903,6 +1923,11 @@ msgstr "Disconnect"
 msgid "Docker URL"
 msgstr "Docker URL"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr "Documentation"
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2456,6 +2481,7 @@ msgid "Finish"
 msgstr "Finish"
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "Flow"
 
@@ -3073,6 +3099,10 @@ msgstr "Invalidation flow"
 #~ msgid "Invitation"
 #~ msgstr "Invitation"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr "Invitation not limited to any flow, and can be used with any enrollment flow."
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "Invitation used"
@@ -3360,6 +3390,7 @@ msgstr "Loading"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3388,6 +3419,10 @@ msgstr "Local"
 msgid "Local (notifications will be created within authentik)"
 msgstr "Local (notifications will be created within authentik)"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr "Local path"
+
 #: src/user/user-settings/details/UserDetailsForm.ts
 #~ msgid "Locale"
 #~ msgstr "Locale"
@@ -4027,6 +4062,14 @@ msgstr "OAuth Source {0}"
 msgid "OAuth2/OIDC"
 msgstr "OAuth2/OIDC"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr "OCI Registry"
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr "OIDC JWKS"
@@ -5119,6 +5162,14 @@ msgstr "Security key authenticator"
 msgid "See documentation for a list of all variables."
 msgstr "See documentation for a list of all variables."
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr "See more about OCI support here:"
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr "See more here:"
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "Select a provider that this application should use. Alternatively, create a new provider."
@@ -6511,6 +6562,10 @@ msgstr "UID start number"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr "URL"
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "URL settings"
@@ -7265,6 +7320,10 @@ msgstr "When enabled, global Email connection settings will be used and connecti
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "When enabled, the invitation will be deleted after usage."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "When enabled, user fields are matched regardless of their casing."
@@ -7281,6 +7340,10 @@ msgstr "When selected, a password field is shown on the same page instead of a s
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/es.po b/web/src/locales/es.po
index c74a68ae1..393d23961 100644
--- a/web/src/locales/es.po
+++ b/web/src/locales/es.po
@@ -764,6 +764,14 @@ msgstr "DN de enlace"
 msgid "Bind Password"
 msgstr "Contraseña de enlace"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Flujo de enlace"
@@ -772,7 +780,6 @@ msgstr "Flujo de enlace"
 msgid "Bind mode"
 msgstr ""
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Etapa de enlace"
@@ -870,6 +877,10 @@ msgstr "URL de devolución de llamada"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "Puede tener el formato 'unix: //' cuando se conecta a un servicio local de docker, usando 'ssh: //' para conectarse a través de SSH, o 'https://:2376' cuando se conecta a un sistema remoto."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1404,6 +1415,14 @@ msgstr "Copiar enlace de recuperación"
 msgid "Create"
 msgstr "Crear"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1417,7 +1436,8 @@ msgstr "Crear aplicación"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "Crear vínculo"
 
@@ -1458,8 +1478,8 @@ msgid "Create Outpost"
 msgstr "Crear controlador"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "Crear política"
+#~ msgid "Create Policy"
+#~ msgstr "Crear política"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1474,8 +1494,8 @@ msgid "Create Service account"
 msgstr "Crear cuenta de servicio"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "Crear etapa"
+#~ msgid "Create Stage"
+#~ msgstr "Crear etapa"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1859,6 +1879,11 @@ msgstr "Desconectar"
 msgid "Docker URL"
 msgstr "URL de Docker"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2395,6 +2420,7 @@ msgid "Finish"
 msgstr ""
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "Flujo"
 
@@ -2998,6 +3024,10 @@ msgstr "Flujo de invalidación"
 #~ msgid "Invitation"
 #~ msgstr "Invitación"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "Invitación utilizada"
@@ -3281,6 +3311,7 @@ msgstr "Cargando"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3309,6 +3340,10 @@ msgstr "Local"
 msgid "Local (notifications will be created within authentik)"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "Idioma"
 
@@ -3938,6 +3973,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -4990,6 +5033,14 @@ msgstr "Autenticador clave de seguridad"
 msgid "See documentation for a list of all variables."
 msgstr "Consulte la documentación para obtener una lista de todas las variables."
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "Seleccione el proveedor que debe usar esta aplicación. También puede crear un nuevo proveedor."
@@ -6339,6 +6390,10 @@ msgstr "Número inicial de UID"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "Configuración de URL"
@@ -7082,6 +7137,10 @@ msgstr "Cuando se habilita, se utilizará la configuración global de conexión
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "Cuando se habilita, la invitación se eliminará después de su uso."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "Cuando se habilita, los campos de usuario coinciden independientemente de su carcasa."
@@ -7098,6 +7157,10 @@ msgstr "Cuando se selecciona, se muestra un campo de contraseña en la misma pá
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "Cuando se selecciona, las firmas de la aserción entrante se validarán con este certificado. Para permitir solicitudes sin firmar, déjelo en el valor predeterminado."
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/fr_FR.po b/web/src/locales/fr_FR.po
index a58798de5..181d5e2f4 100644
--- a/web/src/locales/fr_FR.po
+++ b/web/src/locales/fr_FR.po
@@ -769,6 +769,14 @@ msgstr ""
 msgid "Bind Password"
 msgstr "Mot de passe"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Lier un flux"
@@ -777,7 +785,6 @@ msgstr "Lier un flux"
 msgid "Bind mode"
 msgstr ""
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Lier une étape"
@@ -875,6 +882,10 @@ msgstr "URL de rappel"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr ""
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1409,6 +1420,14 @@ msgstr "Copier le lien de récupération"
 msgid "Create"
 msgstr "Créer"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1422,7 +1441,8 @@ msgstr "Créer une application"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "Créer une liaison"
 
@@ -1463,8 +1483,8 @@ msgid "Create Outpost"
 msgstr "Créer un avant-poste"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "Créer une politique"
+#~ msgid "Create Policy"
+#~ msgstr "Créer une politique"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1479,8 +1499,8 @@ msgid "Create Service account"
 msgstr "Créer un compte de service"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "Créer une étape"
+#~ msgid "Create Stage"
+#~ msgstr "Créer une étape"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1862,6 +1882,11 @@ msgstr "Déconnecter"
 msgid "Docker URL"
 msgstr "URL Docker"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2398,6 +2423,7 @@ msgid "Finish"
 msgstr ""
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "Flux"
 
@@ -2999,6 +3025,10 @@ msgstr "Flux d'invalidation"
 #~ msgid "Invitation"
 #~ msgstr "Invitation"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "Invitation utilisée"
@@ -3282,6 +3312,7 @@ msgstr "Chargement en cours"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3310,6 +3341,10 @@ msgstr "Local"
 msgid "Local (notifications will be created within authentik)"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr ""
 
@@ -3939,6 +3974,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -4991,6 +5034,14 @@ msgstr ""
 msgid "See documentation for a list of all variables."
 msgstr "Consultez la documentation pour la liste de toutes les variables."
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "Sélectionnez un fournisseur que cette application devra utiliser. Sinon, créez un nouveau fournisseur."
@@ -6330,6 +6381,10 @@ msgstr "Numéro de départ d'UID"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "Paramètres d'URL"
@@ -7073,6 +7128,10 @@ msgstr "Si activé, les paramètres globaux de connexion email seront utilisés
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "Si activée, l'invitation sera supprimée après utilisation."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "Si activé, les champs de l'utilisateur sont mis en correspondance en ignorant leur casse."
@@ -7089,6 +7148,10 @@ msgstr "Si activée, un champ de mot de passe est affiché sur la même page au
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "Si activée, les signatures des assertions entrantes seront validées par rapport à ce certificat. Pour autoriser les requêtes non signées, laissez la valeur par défaut."
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/pl.po b/web/src/locales/pl.po
index d143d1689..fb05c1dfc 100644
--- a/web/src/locales/pl.po
+++ b/web/src/locales/pl.po
@@ -768,6 +768,14 @@ msgstr "Bind DN"
 msgid "Bind Password"
 msgstr "Powiąż hasło"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Powiąż przepływ"
@@ -776,7 +784,6 @@ msgstr "Powiąż przepływ"
 msgid "Bind mode"
 msgstr "Tryb powiązania"
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Powiąż etap"
@@ -874,6 +881,10 @@ msgstr "URL wywołania zwrotnego"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "Może mieć format „unix://” podczas łączenia się z lokalnym demonem dockera, używając „ssh://” do łączenia się przez SSH lub „https://:2376” podczas łączenia się z systemem zdalnym."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1410,6 +1421,14 @@ msgstr "Skopiuj link odzyskiwania"
 msgid "Create"
 msgstr "Utwórz"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1423,7 +1442,8 @@ msgstr "Utwórz aplikację"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "Utwórz powiązanie"
 
@@ -1464,8 +1484,8 @@ msgid "Create Outpost"
 msgstr "Utwórz placówkę"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "Utwórz zasadę"
+#~ msgid "Create Policy"
+#~ msgstr "Utwórz zasadę"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1480,8 +1500,8 @@ msgid "Create Service account"
 msgstr "Utwórz konto usługi"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "Utwórz etap"
+#~ msgid "Create Stage"
+#~ msgstr "Utwórz etap"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1865,6 +1885,11 @@ msgstr "Rozłącz"
 msgid "Docker URL"
 msgstr "URL Dockera"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2401,6 +2426,7 @@ msgid "Finish"
 msgstr "Zakończ"
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "Przepływ"
 
@@ -3006,6 +3032,10 @@ msgstr "Przepływ unieważnienia"
 #~ msgid "Invitation"
 #~ msgstr "Zaproszenie"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "Wykorzystano zaproszenie"
@@ -3289,6 +3319,7 @@ msgstr "Ładowanie"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3317,6 +3348,10 @@ msgstr "Lokalny"
 msgid "Local (notifications will be created within authentik)"
 msgstr "Lokalny (powiadomienia będą tworzone w ramach authentik)"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "Język"
 
@@ -3946,6 +3981,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr "OIDC JWKS"
@@ -5000,6 +5043,14 @@ msgstr "Uwierzytelniający klucz bezpieczeństwa"
 msgid "See documentation for a list of all variables."
 msgstr "Zobacz dokumentację, aby zobaczyć listę wszystkich zmiennych."
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "Wybierz dostawcę, z którego ma korzystać ta aplikacja. Alternatywnie utwórz nowego dostawcę."
@@ -6349,6 +6400,10 @@ msgstr "Numer początkowy UID"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "Ustawienia URL"
@@ -7094,6 +7149,10 @@ msgstr "Po włączeniu będą używane globalne ustawienia połączenia poczty e
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "Po włączeniu zaproszenie zostanie usunięte po użyciu."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "Po włączeniu pola użytkownika są dopasowywane niezależnie od wielkości liter."
@@ -7110,6 +7169,10 @@ msgstr "Po wybraniu pole hasła jest wyświetlane na tej samej stronie zamiast n
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "Po wybraniu, przychodzące podpisy asercji będą sprawdzane względem tego certyfikatu. Aby zezwolić na niepodpisane żądania, pozostaw domyślnie."
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/pseudo-LOCALE.po b/web/src/locales/pseudo-LOCALE.po
index 0bfb41f08..9029e793b 100644
--- a/web/src/locales/pseudo-LOCALE.po
+++ b/web/src/locales/pseudo-LOCALE.po
@@ -769,6 +769,14 @@ msgstr ""
 msgid "Bind Password"
 msgstr ""
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr ""
@@ -777,7 +785,6 @@ msgstr ""
 msgid "Bind mode"
 msgstr ""
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr ""
@@ -877,6 +884,10 @@ msgstr ""
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr ""
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1420,6 +1431,14 @@ msgstr ""
 msgid "Create"
 msgstr ""
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1433,7 +1452,8 @@ msgstr ""
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr ""
 
@@ -1474,8 +1494,8 @@ msgid "Create Outpost"
 msgstr ""
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr ""
+#~ msgid "Create Policy"
+#~ msgstr ""
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1490,8 +1510,8 @@ msgid "Create Service account"
 msgstr ""
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr ""
+#~ msgid "Create Stage"
+#~ msgstr ""
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1889,6 +1909,11 @@ msgstr ""
 msgid "Docker URL"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2442,6 +2467,7 @@ msgid "Finish"
 msgstr ""
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr ""
 
@@ -3055,6 +3081,10 @@ msgstr ""
 #~ msgid "Invitation"
 #~ msgstr ""
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr ""
@@ -3342,6 +3372,7 @@ msgstr ""
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3370,6 +3401,10 @@ msgstr ""
 msgid "Local (notifications will be created within authentik)"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #: src/user/user-settings/details/UserDetailsForm.ts
 #~ msgid "Locale"
 #~ msgstr ""
@@ -4009,6 +4044,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -5099,6 +5142,14 @@ msgstr ""
 msgid "See documentation for a list of all variables."
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr ""
@@ -6481,6 +6532,10 @@ msgstr ""
 msgid "UPN"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr ""
@@ -7233,6 +7288,10 @@ msgstr ""
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr ""
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr ""
@@ -7249,6 +7308,10 @@ msgstr ""
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr ""
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/tr.po b/web/src/locales/tr.po
index 87b87db35..63ecccac7 100644
--- a/web/src/locales/tr.po
+++ b/web/src/locales/tr.po
@@ -764,6 +764,14 @@ msgstr "Bağlama DN"
 msgid "Bind Password"
 msgstr "Parola Bağla"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Bağlama akışı"
@@ -772,7 +780,6 @@ msgstr "Bağlama akışı"
 msgid "Bind mode"
 msgstr ""
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Bağlama aşaması"
@@ -870,6 +877,10 @@ msgstr "Geri arama URL'si"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "SSH üzerinden bağlanmak için 'ssh: //' veya uzak bir sisteme bağlanırken 'https://:2376' kullanarak yerel bir docker daemonuna bağlanırken 'unix: //' biçiminde olabilir."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1404,6 +1415,14 @@ msgstr "Kurtarma bağlantısı kopyalama"
 msgid "Create"
 msgstr "Oluştur"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1417,7 +1436,8 @@ msgstr "Uygulama Oluştur"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "Bağlama Oluştur"
 
@@ -1458,8 +1478,8 @@ msgid "Create Outpost"
 msgstr "Üs Oluştur"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "İlke Oluştur"
+#~ msgid "Create Policy"
+#~ msgstr "İlke Oluştur"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1474,8 +1494,8 @@ msgid "Create Service account"
 msgstr "Hizmet hesabı oluştur"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "Aşama Oluştur"
+#~ msgid "Create Stage"
+#~ msgstr "Aşama Oluştur"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1859,6 +1879,11 @@ msgstr "Bağlantıyı kes"
 msgid "Docker URL"
 msgstr "Docker URL'si"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2395,6 +2420,7 @@ msgid "Finish"
 msgstr ""
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "Akış"
 
@@ -2998,6 +3024,10 @@ msgstr "Geçersizleştirme akışı"
 #~ msgid "Invitation"
 #~ msgstr "Davetiye"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "Kullanılan davetiye"
@@ -3281,6 +3311,7 @@ msgstr "Yükleniyor"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3309,6 +3340,10 @@ msgstr "Yerel"
 msgid "Local (notifications will be created within authentik)"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "Yerelleştirme"
 
@@ -3938,6 +3973,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -4990,6 +5033,14 @@ msgstr "Güvenlik anahtarı kimlik doğrulayıcısı"
 msgid "See documentation for a list of all variables."
 msgstr "Tüm değişkenlerin listesi için belgelere bakın."
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "Bu uygulamanın kullanması gereken bir sağlayıcı seçin. Alternatif olarak, yeni bir sağlayıcı oluşturun."
@@ -6339,6 +6390,10 @@ msgstr "UID başlangıç numarası"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "URL ayarları"
@@ -7082,6 +7137,10 @@ msgstr "Etkinleştirildiğinde, genel E-posta bağlantısı ayarları kullanıl
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "Etkinleştirildiğinde, davetiye kullanımdan sonra silinir."
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "Etkinleştirildiğinde, kullanıcı alanları muhafazası ne olursa olsun eşleştirilir."
@@ -7098,6 +7157,10 @@ msgstr "Seçildiğinde, ayrı bir sayfa yerine aynı sayfada bir parola alanı g
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "Seçildiğinde, gelen onaylama öğesinin İmzaları bu sertifikaya göre doğrulanır. İmzasız İsteklere izin vermek için varsayılan olarak bırakın."
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/zh-Hans.po b/web/src/locales/zh-Hans.po
index 0270c6f28..a202c21ff 100644
--- a/web/src/locales/zh-Hans.po
+++ b/web/src/locales/zh-Hans.po
@@ -770,6 +770,14 @@ msgstr "Bind DN"
 msgid "Bind Password"
 msgstr "Bind 密码"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Bind 流程"
@@ -778,7 +786,6 @@ msgstr "Bind 流程"
 msgid "Bind mode"
 msgstr "绑定模式"
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "绑定阶段"
@@ -876,6 +883,10 @@ msgstr "回调 URL"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "连接到本地 Docker 守护进程时可以采用 'unix://' 格式，通过 SSH 连接时采用 'ssh://' 格式，或者在连接到远程系统时采用 'https://:2376' 格式。"
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1412,6 +1423,14 @@ msgstr "复制恢复链接"
 msgid "Create"
 msgstr "创建"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1425,7 +1444,8 @@ msgstr "创建应用程序"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "创建绑定"
 
@@ -1466,8 +1486,8 @@ msgid "Create Outpost"
 msgstr "创建前哨"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "创建策略"
+#~ msgid "Create Policy"
+#~ msgstr "创建策略"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1482,8 +1502,8 @@ msgid "Create Service account"
 msgstr "创建服务账户"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "创建阶段"
+#~ msgid "Create Stage"
+#~ msgstr "创建阶段"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1867,6 +1887,11 @@ msgstr "断开连接"
 msgid "Docker URL"
 msgstr "Docker URL"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2403,6 +2428,7 @@ msgid "Finish"
 msgstr "完成"
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "流程"
 
@@ -3006,6 +3032,10 @@ msgstr "失效流程"
 #~ msgid "Invitation"
 #~ msgstr "邀请"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "已使用邀请"
@@ -3289,6 +3319,7 @@ msgstr "正在加载"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3317,6 +3348,10 @@ msgstr "本地"
 msgid "Local (notifications will be created within authentik)"
 msgstr "本地（通知在 authentik 内创建）"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "区域设置"
 
@@ -3946,6 +3981,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr "OIDC JWKS"
@@ -4998,6 +5041,14 @@ msgstr "安全密钥身份验证器"
 msgid "See documentation for a list of all variables."
 msgstr "请阅读文档了解完整变量列表。"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "选择此应用程序应使用的提供程序。或者创建一个新的提供程序。"
@@ -6347,6 +6398,10 @@ msgstr "UID 起始编号"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "URL 设置"
@@ -7092,6 +7147,10 @@ msgstr "启用后，将使用全局电子邮件连接设置，下面的连接设
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "启用后，邀请将在使用后被删除。"
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "启用后，无论大小写如何，都将匹配用户字段。"
@@ -7108,6 +7167,10 @@ msgstr "选中后，密码字段将显示在同一页面，而不是单独的页
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "选中后，传入断言的签名将根据此证书进行验证。要允许未签名的请求，请保留默认值。"
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/zh-Hant.po b/web/src/locales/zh-Hant.po
index 207fc7a78..ebe606198 100644
--- a/web/src/locales/zh-Hant.po
+++ b/web/src/locales/zh-Hant.po
@@ -770,6 +770,14 @@ msgstr "Bind DN"
 msgid "Bind Password"
 msgstr "Bind 密码"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Bind 流程"
@@ -778,7 +786,6 @@ msgstr "Bind 流程"
 msgid "Bind mode"
 msgstr ""
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Bind 阶段"
@@ -876,6 +883,10 @@ msgstr "回调 URL"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "连接到本地 docker 守护进程时可以采用 'unix: //' 的格式，通过 SSH 连接时使用 'ssh: //'，或者在连接到远程系统时使用 'https://:2376' 的格式。"
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1412,6 +1423,14 @@ msgstr "复制恢复链接"
 msgid "Create"
 msgstr "创建"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1425,7 +1444,8 @@ msgstr "创建应用程序"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "创建绑定"
 
@@ -1466,8 +1486,8 @@ msgid "Create Outpost"
 msgstr "创建 Outpost"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "创建策略"
+#~ msgid "Create Policy"
+#~ msgstr "创建策略"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1482,8 +1502,8 @@ msgid "Create Service account"
 msgstr "创建服务账户"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "创建 Stage"
+#~ msgid "Create Stage"
+#~ msgstr "创建 Stage"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1867,6 +1887,11 @@ msgstr "断开连接"
 msgid "Docker URL"
 msgstr "Docker URL"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2403,6 +2428,7 @@ msgid "Finish"
 msgstr "完成"
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "流程"
 
@@ -3006,6 +3032,10 @@ msgstr "失效流程"
 #~ msgid "Invitation"
 #~ msgstr "邀请"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "已使用邀请"
@@ -3289,6 +3319,7 @@ msgstr "正在加载"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3317,6 +3348,10 @@ msgstr "本地"
 msgid "Local (notifications will be created within authentik)"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "区域设置"
 
@@ -3946,6 +3981,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -4998,6 +5041,14 @@ msgstr "安全密钥身份验证器"
 msgid "See documentation for a list of all variables."
 msgstr "有关所有变量的列表，请参阅文档。"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "选择此应用程序应使用的提供程序。或者，创建一个新的提供商。"
@@ -6347,6 +6398,10 @@ msgstr "UID 起始编号"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "URL 设置"
@@ -7092,6 +7147,10 @@ msgstr "启用后，将使用全局电子邮件连接设置，而下面的连接
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "启用后，邀请将在使用后被删除。"
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "启用后，无论用户字段大小写如何，都将匹配用户字段。"
@@ -7108,6 +7167,10 @@ msgstr "选中后，密码字段将显示在同一页面上，而不是单独的
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "选中后，传入声明的签名将根据此证书进行验证。要允许未签名的请求，请保留默认值。"
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts
diff --git a/web/src/locales/zh_TW.po b/web/src/locales/zh_TW.po
index 42df9e737..006d9364b 100644
--- a/web/src/locales/zh_TW.po
+++ b/web/src/locales/zh_TW.po
@@ -770,6 +770,14 @@ msgstr "Bind DN"
 msgid "Bind Password"
 msgstr "Bind 密码"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Bind existing policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Bind existing stage"
+msgstr ""
+
 #: src/admin/providers/ldap/LDAPProviderForm.ts
 msgid "Bind flow"
 msgstr "Bind 流程"
@@ -778,7 +786,6 @@ msgstr "Bind 流程"
 msgid "Bind mode"
 msgstr ""
 
-#: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
 msgid "Bind stage"
 msgstr "Bind 阶段"
@@ -876,6 +883,10 @@ msgstr "回调 URL"
 msgid "Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system."
 msgstr "连接到本地 docker 守护进程时可以采用 'unix: //' 的格式，通过 SSH 连接时使用 'ssh: //'，或者在连接到远程系统时使用 'https://:2376' 的格式。"
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "Can create users"
+msgstr ""
+
 #: src/admin/groups/MemberSelectModal.ts
 #: src/admin/users/GroupSelectModal.ts
 #: src/admin/users/UserActiveForm.ts
@@ -1412,6 +1423,14 @@ msgstr "复制恢复链接"
 msgid "Create"
 msgstr "创建"
 
+#: src/admin/policies/BoundPoliciesList.ts
+msgid "Create & bind Policy"
+msgstr ""
+
+#: src/admin/flows/BoundStagesList.ts
+msgid "Create & bind Stage"
+msgstr ""
+
 #: src/user/user-settings/tokens/UserTokenList.ts
 #: src/user/user-settings/tokens/UserTokenList.ts
 msgid "Create App password"
@@ -1425,7 +1444,8 @@ msgstr "创建应用程序"
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
 #: src/admin/policies/BoundPoliciesList.ts
-#: src/admin/policies/BoundPoliciesList.ts
+#: src/admin/policies/PolicyWizard.ts
+#: src/admin/stages/StageWizard.ts
 msgid "Create Binding"
 msgstr "创建绑定"
 
@@ -1466,8 +1486,8 @@ msgid "Create Outpost"
 msgstr "创建 Outpost"
 
 #: src/admin/policies/BoundPoliciesList.ts
-msgid "Create Policy"
-msgstr "创建策略"
+#~ msgid "Create Policy"
+#~ msgstr "创建策略"
 
 #: src/admin/stages/prompt/PromptListPage.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -1482,8 +1502,8 @@ msgid "Create Service account"
 msgstr "创建服务账户"
 
 #: src/admin/flows/BoundStagesList.ts
-msgid "Create Stage"
-msgstr "创建 Stage"
+#~ msgid "Create Stage"
+#~ msgstr "创建 Stage"
 
 #: src/admin/flows/BoundStagesList.ts
 #: src/admin/flows/BoundStagesList.ts
@@ -1867,6 +1887,11 @@ msgstr "断开连接"
 msgid "Docker URL"
 msgstr "Docker URL"
 
+#: src/admin/blueprints/BlueprintForm.ts
+#: src/admin/outposts/OutpostForm.ts
+msgid "Documentation"
+msgstr ""
+
 #: src/admin/tenants/TenantForm.ts
 #: src/admin/tenants/TenantListPage.ts
 #: src/admin/tenants/TenantListPage.ts
@@ -2403,6 +2428,7 @@ msgid "Finish"
 msgstr "完成"
 
 #: src/admin/flows/FlowImportForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 msgid "Flow"
 msgstr "流程"
 
@@ -3006,6 +3032,10 @@ msgstr "失效流程"
 #~ msgid "Invitation"
 #~ msgstr "邀请"
 
+#: src/admin/stages/invitation/InvitationListPage.ts
+msgid "Invitation not limited to any flow, and can be used with any enrollment flow."
+msgstr ""
+
 #: src/admin/events/utils.ts
 msgid "Invitation used"
 msgstr "已使用邀请"
@@ -3289,6 +3319,7 @@ msgstr "正在加载"
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
 #: src/admin/stages/identification/IdentificationStageForm.ts
+#: src/admin/stages/invitation/InvitationForm.ts
 #: src/admin/stages/invitation/InvitationListLink.ts
 #: src/admin/stages/password/PasswordStageForm.ts
 #: src/admin/stages/prompt/PromptStageForm.ts
@@ -3317,6 +3348,10 @@ msgstr "本地"
 msgid "Local (notifications will be created within authentik)"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "Local path"
+msgstr ""
+
 #~ msgid "Locale"
 #~ msgstr "区域设置"
 
@@ -3946,6 +3981,14 @@ msgstr ""
 msgid "OAuth2/OIDC"
 msgstr ""
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI Registry"
+msgstr ""
+
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "OCI URL, in the format of oci://registry.domain.tld/path/to/manifest."
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "OIDC JWKS"
 msgstr ""
@@ -4998,6 +5041,14 @@ msgstr "安全密钥身份验证器"
 msgid "See documentation for a list of all variables."
 msgstr "有关所有变量的列表，请参阅文档。"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "See more about OCI support here:"
+msgstr ""
+
+#: src/admin/outposts/OutpostForm.ts
+msgid "See more here:"
+msgstr ""
+
 #: src/admin/applications/ApplicationForm.ts
 msgid "Select a provider that this application should use. Alternatively, create a new provider."
 msgstr "选择此应用程序应使用的提供程序。或者，创建一个新的提供商。"
@@ -6347,6 +6398,10 @@ msgstr "UID 起始编号"
 msgid "UPN"
 msgstr "UPN"
 
+#: src/admin/blueprints/BlueprintForm.ts
+msgid "URL"
+msgstr ""
+
 #: src/admin/sources/oauth/OAuthSourceForm.ts
 msgid "URL settings"
 msgstr "URL 设置"
@@ -7092,6 +7147,10 @@ msgstr "启用后，将使用全局电子邮件连接设置，而下面的连接
 msgid "When enabled, the invitation will be deleted after usage."
 msgstr "启用后，邀请将在使用后被删除。"
 
+#: src/admin/stages/user_write/UserWriteStageForm.ts
+msgid "When enabled, this stage has the ability to create new users. If no user is available in the flow with this disabled, the stage will fail."
+msgstr ""
+
 #: src/admin/stages/identification/IdentificationStageForm.ts
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "启用后，无论用户字段大小写如何，都将匹配用户字段。"
@@ -7108,6 +7167,10 @@ msgstr "选中后，密码字段将显示在同一页面上，而不是单独的
 msgid "When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default."
 msgstr "选中后，传入声明的签名将根据此证书进行验证。要允许未签名的请求，请保留默认值。"
 
+#: src/admin/stages/invitation/InvitationForm.ts
+msgid "When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages."
+msgstr ""
+
 #: src/admin/policies/dummy/DummyPolicyForm.ts
 #: src/admin/policies/event_matcher/EventMatcherPolicyForm.ts
 #: src/admin/policies/expiry/ExpiryPolicyForm.ts