diff --git a/web/xliff/zh_CN.xlf b/web/xliff/zh_CN.xlf
index acee9dc6b..411ef8e82 100644
--- a/web/xliff/zh_CN.xlf
+++ b/web/xliff/zh_CN.xlf
@@ -1295,11 +1295,6 @@
Validate SSL Certificates of upstream servers.验证上游服务器的 SSL 证书。
-
-
- Use this provider with nginx's auth_request or traefik's forwardAuth. Each application/domain needs its own provider. Additionally, on each domain, /outpost.goauthentik.io must be routed to the outpost (when using a manged outpost, this is done for you).
- 与 nginx 的 auth_request 或 traefik 的 ForwardAuth 一起使用此提供程序。每个应用程序/域名都需要自己的提供程序。此外，在每个域名上，/outpost.goauthentik.io 必须路由到前哨（在使用托管的 Outpost 时，这已经为您处理好了）。
-
Use this provider with nginx's auth_request or traefik's forwardAuth. Only a single provider is required per root domain. You can't do per-application authorization, but you don't have to create a provider for each application.
@@ -7818,6 +7813,18 @@ Bindings to groups/users are checked against the user of the event.
WebAuthn not supported by browser.浏览器不支持 WebAuthn。
+
+
+ Use this provider with nginx's auth_request or traefik's forwardAuth. Each application/domain needs its own provider. Additionally, on each domain, /outpost.goauthentik.io must be routed to the outpost (when using a managed outpost, this is done for you).
+ 与 nginx 的 auth_request 或 traefik 的 ForwardAuth 一起使用此提供程序。每个应用程序/域名都需要自己的提供程序。此外，在每个域名上，/outpost.goauthentik.io 必须路由到前哨（在使用托管的 Outpost 时，这已经为您处理好了）。
+
+
+ Default relay state
+ 默认中继状态
+
+
+ When using IDP-initiated logins, the relay state will be set to this value.
+ 当使用 IDP 发起的登录时，中继状态会被设置为此值。