diff --git a/web/src/locales/en.po b/web/src/locales/en.po
index 4a5285bc7..86eb8d162 100644
--- a/web/src/locales/en.po
+++ b/web/src/locales/en.po
@@ -17,11 +17,11 @@ msgstr ""
 msgid "-"
 msgstr "-"
 
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:69
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:72
 msgid "6 digits, widely compatible"
 msgstr "6 digits, widely compatible"
 
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:72
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:75
 msgid "8 digits, not compatible with apps like Google Authenticator"
 msgstr "8 digits, not compatible with apps like Google Authenticator"
 
@@ -147,7 +147,7 @@ msgstr "Allows/denys requests based on the users and/or the IPs reputation."
 msgid "Also known as Entity ID. Defaults the Metadata URL."
 msgstr "Also known as Entity ID. Defaults the Metadata URL."
 
-#: src/pages/stages/consent/ConsentStageForm.ts:78
+#: src/pages/stages/consent/ConsentStageForm.ts:81
 msgid "Always require consent"
 msgstr "Always require consent"
 
@@ -302,7 +302,7 @@ msgstr "Authorize URL"
 msgid "Authorized application:"
 msgstr "Authorized application:"
 
-#: src/pages/stages/password/PasswordStageForm.ts:71
+#: src/pages/stages/password/PasswordStageForm.ts:74
 msgid "Backends"
 msgstr "Backends"
 
@@ -410,7 +410,7 @@ msgstr "Can be in the format of 'unix://' when connecting to a local docker daem
 msgid "Cancel"
 msgstr "Cancel"
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:89
+#: src/pages/stages/identification/IdentificationStageForm.ts:92
 msgid "Case insensitive matching"
 msgstr "Case insensitive matching"
 
@@ -569,10 +569,10 @@ msgstr "Confidential clients are capable of maintaining the confidentiality of t
 msgid "Configuration"
 msgstr "Configuration"
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:71
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:77
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:115
-#: src/pages/stages/password/PasswordStageForm.ts:86
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:74
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:80
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:118
+#: src/pages/stages/password/PasswordStageForm.ts:89
 msgid "Configuration flow"
 msgstr "Configuration flow"
 
@@ -617,15 +617,15 @@ msgstr "Connection settings"
 msgid "Consent"
 msgstr "Consent"
 
-#: src/pages/stages/consent/ConsentStageForm.ts:90
+#: src/pages/stages/consent/ConsentStageForm.ts:93
 msgid "Consent expires in"
 msgstr "Consent expires in"
 
-#: src/pages/stages/consent/ConsentStageForm.ts:84
+#: src/pages/stages/consent/ConsentStageForm.ts:87
 msgid "Consent expires."
 msgstr "Consent expires."
 
-#: src/pages/stages/consent/ConsentStageForm.ts:81
+#: src/pages/stages/consent/ConsentStageForm.ts:84
 msgid "Consent given last indefinitely"
 msgstr "Consent given last indefinitely"
 
@@ -661,11 +661,11 @@ msgstr "Context"
 #: src/flows/stages/dummy/DummyStage.ts:39
 #: src/flows/stages/password/PasswordStage.ts:71
 #: src/flows/stages/prompt/PromptStage.ts:155
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:91
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:94
 msgid "Continue"
 msgstr "Continue"
 
-#: src/pages/stages/invitation/InvitationStageForm.ts:67
+#: src/pages/stages/invitation/InvitationStageForm.ts:70
 msgid "Continue flow without invitation"
 msgstr "Continue flow without invitation"
 
@@ -721,8 +721,8 @@ msgstr "Copy Key"
 #: src/pages/stages/invitation/InvitationListPage.ts:85
 #: src/pages/stages/prompt/PromptListPage.ts:96
 #: src/pages/stages/prompt/PromptListPage.ts:104
-#: src/pages/stages/prompt/PromptStageForm.ts:87
-#: src/pages/stages/prompt/PromptStageForm.ts:95
+#: src/pages/stages/prompt/PromptStageForm.ts:90
+#: src/pages/stages/prompt/PromptStageForm.ts:98
 #: src/pages/user-settings/tokens/UserTokenList.ts:50
 #: src/pages/user-settings/tokens/UserTokenList.ts:58
 #: src/pages/users/UserListPage.ts:143
@@ -779,7 +779,7 @@ msgid "Create Policy"
 msgstr "Create Policy"
 
 #: src/pages/stages/prompt/PromptListPage.ts:99
-#: src/pages/stages/prompt/PromptStageForm.ts:90
+#: src/pages/stages/prompt/PromptStageForm.ts:93
 msgid "Create Prompt"
 msgstr "Create Prompt"
 
@@ -902,11 +902,19 @@ msgstr "Delete account"
 msgid "Delete temporary users after"
 msgstr "Delete temporary users after"
 
+#: src/pages/stages/user_delete/UserDeleteStageForm.ts:51
+msgid ""
+"Delete the currently pending user. CAUTION, this stage does not ask for\n"
+"confirmation. Use a consent stage to ensure the user is aware of their actions."
+msgstr ""
+"Delete the currently pending user. CAUTION, this stage does not ask for\n"
+"confirmation. Use a consent stage to ensure the user is aware of their actions."
+
 #: src/elements/forms/DeleteForm.ts:62
 msgid "Delete {0}"
 msgstr "Delete {0}"
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:88
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:91
 msgid "Deny the user access"
 msgstr "Deny the user access"
 
@@ -934,11 +942,11 @@ msgstr "Designation"
 msgid "Determines how authentik sends the response back to the Service Provider."
 msgstr "Determines how authentik sends the response back to the Service Provider."
 
-#: src/pages/stages/user_login/UserLoginStageForm.ts:67
+#: src/pages/stages/user_login/UserLoginStageForm.ts:70
 msgid "Determines how long a session lasts. Default of 0 seconds means that the sessions lasts until the browser is closed. (Format: hours=-1;minutes=-2;seconds=-3)."
 msgstr "Determines how long a session lasts. Default of 0 seconds means that the sessions lasts until the browser is closed. (Format: hours=-1;minutes=-2;seconds=-3)."
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:110
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:113
 msgid "Device classes which can be used to authenticate."
 msgstr "Device classes which can be used to authenticate."
 
@@ -951,7 +959,7 @@ msgstr "Device name"
 msgid "Digest algorithm"
 msgstr "Digest algorithm"
 
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:64
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:67
 msgid "Digits"
 msgstr "Digits"
 
@@ -985,6 +993,10 @@ msgstr "Docker URL"
 msgid "Download"
 msgstr "Download"
 
+#: src/pages/stages/dummy/DummyStageForm.ts:51
+msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
+msgstr "Dummy stage used for testing. Shows a simple continue button and always passes."
+
 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:226
 msgid "Each provider has a different issuer, based on the application slug."
 msgstr "Each provider has a different issuer, based on the application slug."
@@ -1043,7 +1055,7 @@ msgid "Either no applications are defined, or you don't have access to any."
 msgstr "Either no applications are defined, or you don't have access to any."
 
 #: src/pages/events/TransportForm.ts:46
-#: src/pages/stages/identification/IdentificationStageForm.ts:79
+#: src/pages/stages/identification/IdentificationStageForm.ts:82
 #: src/pages/user-settings/UserDetailsPage.ts:71
 #: src/pages/users/UserForm.ts:61
 #: src/pages/users/UserViewPage.ts:101
@@ -1093,7 +1105,7 @@ msgstr "Enrollment"
 
 #: src/pages/sources/oauth/OAuthSourceForm.ts:186
 #: src/pages/sources/saml/SAMLSourceForm.ts:266
-#: src/pages/stages/identification/IdentificationStageForm.ts:104
+#: src/pages/stages/identification/IdentificationStageForm.ts:107
 msgid "Enrollment flow"
 msgstr "Enrollment flow"
 
@@ -1241,7 +1253,7 @@ msgstr "External Host"
 msgid "External host"
 msgstr "External host"
 
-#: src/pages/stages/password/PasswordStageForm.ts:108
+#: src/pages/stages/password/PasswordStageForm.ts:111
 msgid "Failed attempts before cancel"
 msgstr "Failed attempts before cancel"
 
@@ -1286,11 +1298,11 @@ msgstr "Field which contains a unique Identifier."
 msgid "Field which contains members of a group."
 msgstr "Field which contains members of a group."
 
-#: src/pages/stages/prompt/PromptStageForm.ts:66
+#: src/pages/stages/prompt/PromptStageForm.ts:69
 msgid "Fields"
 msgstr "Fields"
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:82
+#: src/pages/stages/identification/IdentificationStageForm.ts:85
 msgid "Fields a user can identify themselves with."
 msgstr "Fields a user can identify themselves with."
 
@@ -1322,12 +1334,12 @@ msgstr "Flow to use when enrolling new users."
 msgid "Flow used before authentication."
 msgstr "Flow used before authentication."
 
-#: src/pages/stages/password/PasswordStageForm.ts:105
+#: src/pages/stages/password/PasswordStageForm.ts:108
 msgid "Flow used by an authenticated user to configure their password. If empty, user will not be able to configure change their password."
 msgstr "Flow used by an authenticated user to configure their password. If empty, user will not be able to configure change their password."
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:89
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:95
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:93
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:98
 msgid "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
 msgstr "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
 
@@ -1349,7 +1361,7 @@ msgstr "Flows"
 msgid "Flows describe a chain of Stages to authenticate, enroll or recover a user. Stages are chosen based on policies applied to them."
 msgstr "Flows describe a chain of Stages to authenticate, enroll or recover a user. Stages are chosen based on policies applied to them."
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:85
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:88
 msgid "Force the user to configure an authenticator"
 msgstr "Force the user to configure an authenticator"
 
@@ -1453,15 +1465,15 @@ msgstr "Hide managed mappings"
 #: src/pages/providers/saml/SAMLProviderForm.ts:171
 #: src/pages/sources/ldap/LDAPSourceForm.ts:167
 #: src/pages/sources/ldap/LDAPSourceForm.ts:193
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:111
-#: src/pages/stages/identification/IdentificationStageForm.ts:83
-#: src/pages/stages/password/PasswordStageForm.ts:83
-#: src/pages/stages/prompt/PromptStageForm.ts:84
-#: src/pages/stages/prompt/PromptStageForm.ts:118
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:114
+#: src/pages/stages/identification/IdentificationStageForm.ts:86
+#: src/pages/stages/password/PasswordStageForm.ts:86
+#: src/pages/stages/prompt/PromptStageForm.ts:87
+#: src/pages/stages/prompt/PromptStageForm.ts:121
 msgid "Hold control/command to select multiple items."
 msgstr "Hold control/command to select multiple items."
 
-#: src/pages/stages/password/PasswordStageForm.ts:112
+#: src/pages/stages/password/PasswordStageForm.ts:115
 msgid "How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage."
 msgstr "How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage."
 
@@ -1494,7 +1506,7 @@ msgstr "If enabled, use the local connection. Required Docker socket/Kubernetes
 msgid "If left empty, authentik will try to extract the launch URL based on the selected provider."
 msgstr "If left empty, authentik will try to extract the launch URL based on the selected provider."
 
-#: src/pages/stages/invitation/InvitationStageForm.ts:70
+#: src/pages/stages/invitation/InvitationStageForm.ts:73
 msgid "If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given."
 msgstr "If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given."
 
@@ -1630,6 +1642,10 @@ msgstr "Last sync: {0}"
 msgid "Launch URL"
 msgstr "Launch URL"
 
+#: src/pages/stages/identification/IdentificationStageForm.ts:60
+msgid "Let the user identify themselves with their username or Email address."
+msgstr "Let the user identify themselves with their username or Email address."
+
 #: src/interfaces/AdminInterface.ts:16
 msgid "Library"
 msgstr "Library"
@@ -1696,15 +1712,15 @@ msgstr "Loading"
 #: src/pages/sources/saml/SAMLSourceForm.ts:240
 #: src/pages/sources/saml/SAMLSourceForm.ts:261
 #: src/pages/sources/saml/SAMLSourceForm.ts:282
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:87
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:93
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:128
-#: src/pages/stages/email/EmailStageForm.ts:169
-#: src/pages/stages/identification/IdentificationStageForm.ts:117
-#: src/pages/stages/identification/IdentificationStageForm.ts:135
-#: src/pages/stages/password/PasswordStageForm.ts:103
-#: src/pages/stages/prompt/PromptStageForm.ts:82
-#: src/pages/stages/prompt/PromptStageForm.ts:115
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:90
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:96
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:131
+#: src/pages/stages/email/EmailStageForm.ts:172
+#: src/pages/stages/identification/IdentificationStageForm.ts:120
+#: src/pages/stages/identification/IdentificationStageForm.ts:138
+#: src/pages/stages/password/PasswordStageForm.ts:106
+#: src/pages/stages/prompt/PromptStageForm.ts:85
+#: src/pages/stages/prompt/PromptStageForm.ts:118
 msgid "Loading..."
 msgstr "Loading..."
 
@@ -1714,6 +1730,10 @@ msgstr "Loading..."
 msgid "Local"
 msgstr "Local"
 
+#: src/pages/stages/user_login/UserLoginStageForm.ts:52
+msgid "Log the currently pending user in."
+msgstr "Log the currently pending user in."
+
 #: src/pages/sources/ldap/LDAPSourceForm.ts:88
 msgid "Login password is synced from LDAP into authentik automatically. Enable this option only to write password changes in authentik back to LDAP."
 msgstr "Login password is synced from LDAP into authentik automatically. Enable this option only to write password changes in authentik back to LDAP."
@@ -1799,7 +1819,7 @@ msgstr "Minimum length"
 
 #: src/pages/events/TransportForm.ts:79
 #: src/pages/events/TransportListPage.ts:47
-#: src/pages/stages/consent/ConsentStageForm.ts:65
+#: src/pages/stages/consent/ConsentStageForm.ts:68
 msgid "Mode"
 msgstr "Mode"
 
@@ -1858,23 +1878,23 @@ msgstr "Monitor"
 #: src/pages/sources/saml/SAMLSourceForm.ts:54
 #: src/pages/sources/saml/SAMLSourceViewPage.ts:77
 #: src/pages/stages/StageListPage.ts:65
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:54
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:53
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:61
-#: src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts:51
-#: src/pages/stages/captcha/CaptchaStageForm.ts:52
-#: src/pages/stages/consent/ConsentStageForm.ts:54
-#: src/pages/stages/deny/DenyStageForm.ts:51
-#: src/pages/stages/dummy/DummyStageForm.ts:51
-#: src/pages/stages/email/EmailStageForm.ts:121
-#: src/pages/stages/identification/IdentificationStageForm.ts:60
-#: src/pages/stages/invitation/InvitationStageForm.ts:53
-#: src/pages/stages/password/PasswordStageForm.ts:60
-#: src/pages/stages/prompt/PromptStageForm.ts:55
-#: src/pages/stages/user_delete/UserDeleteStageForm.ts:51
-#: src/pages/stages/user_login/UserLoginStageForm.ts:52
-#: src/pages/stages/user_logout/UserLogoutStageForm.ts:51
-#: src/pages/stages/user_write/UserWriteStageForm.ts:51
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:57
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:56
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:64
+#: src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts:54
+#: src/pages/stages/captcha/CaptchaStageForm.ts:55
+#: src/pages/stages/consent/ConsentStageForm.ts:57
+#: src/pages/stages/deny/DenyStageForm.ts:54
+#: src/pages/stages/dummy/DummyStageForm.ts:54
+#: src/pages/stages/email/EmailStageForm.ts:124
+#: src/pages/stages/identification/IdentificationStageForm.ts:63
+#: src/pages/stages/invitation/InvitationStageForm.ts:56
+#: src/pages/stages/password/PasswordStageForm.ts:63
+#: src/pages/stages/prompt/PromptStageForm.ts:58
+#: src/pages/stages/user_delete/UserDeleteStageForm.ts:55
+#: src/pages/stages/user_login/UserLoginStageForm.ts:55
+#: src/pages/stages/user_logout/UserLogoutStageForm.ts:54
+#: src/pages/stages/user_write/UserWriteStageForm.ts:55
 #: src/pages/user-settings/UserDetailsPage.ts:64
 #: src/pages/users/UserForm.ts:54
 #: src/pages/users/UserListPage.ts:49
@@ -1975,7 +1995,7 @@ msgstr "None (rule disabled)"
 msgid "Not available"
 msgstr "Not available"
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:72
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:75
 msgid "Not configured action"
 msgstr "Not configured action"
 
@@ -2063,7 +2083,7 @@ msgstr "Object field"
 msgid "Object uniqueness field"
 msgstr "Object uniqueness field"
 
-#: src/pages/stages/consent/ConsentStageForm.ts:94
+#: src/pages/stages/consent/ConsentStageForm.ts:97
 msgid "Offset after which consent expires. (Format: hours=1;minutes=2;seconds=3)."
 msgstr "Offset after which consent expires. (Format: hours=1;minutes=2;seconds=3)."
 
@@ -2104,11 +2124,11 @@ msgstr "Optional URL if the IDP supports Single-Logout."
 msgid "Optional data which is loaded into the flow's 'prompt_data' context variable. YAML or JSON."
 msgstr "Optional data which is loaded into the flow's 'prompt_data' context variable. YAML or JSON."
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:119
+#: src/pages/stages/identification/IdentificationStageForm.ts:122
 msgid "Optional enrollment flow, which is linked at the bottom of the page."
 msgstr "Optional enrollment flow, which is linked at the bottom of the page."
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:137
+#: src/pages/stages/identification/IdentificationStageForm.ts:140
 msgid "Optional recovery flow, which is linked at the bottom of the page."
 msgstr "Optional recovery flow, which is linked at the bottom of the page."
 
@@ -2291,7 +2311,7 @@ msgid "Pre-authentication flow"
 msgstr "Pre-authentication flow"
 
 #: src/pages/crypto/CertificateKeyPairForm.ts:61
-#: src/pages/stages/captcha/CaptchaStageForm.ts:70
+#: src/pages/stages/captcha/CaptchaStageForm.ts:73
 msgid "Private Key"
 msgstr "Private Key"
 
@@ -2299,7 +2319,7 @@ msgstr "Private Key"
 msgid "Private key available?"
 msgstr "Private key available?"
 
-#: src/pages/stages/captcha/CaptchaStageForm.ts:75
+#: src/pages/stages/captcha/CaptchaStageForm.ts:78
 msgid "Private key, acquired from https://www.google.com/recaptcha/intro/v3.html."
 msgstr "Private key, acquired from https://www.google.com/recaptcha/intro/v3.html."
 
@@ -2312,6 +2332,10 @@ msgstr "Profile URL"
 msgid "Prompt"
 msgstr "Prompt"
 
+#: src/pages/stages/consent/ConsentStageForm.ts:54
+msgid "Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time."
+msgstr "Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time."
+
 #: src/interfaces/AdminInterface.ts:29
 #: src/pages/stages/prompt/PromptListPage.ts:28
 msgid "Prompts"
@@ -2387,11 +2411,11 @@ msgstr "Proxy Provider {0}"
 msgid "Public"
 msgstr "Public"
 
-#: src/pages/stages/captcha/CaptchaStageForm.ts:63
+#: src/pages/stages/captcha/CaptchaStageForm.ts:66
 msgid "Public Key"
 msgstr "Public Key"
 
-#: src/pages/stages/captcha/CaptchaStageForm.ts:67
+#: src/pages/stages/captcha/CaptchaStageForm.ts:70
 msgid "Public key, acquired from https://www.google.com/recaptcha/intro/v3.html."
 msgstr "Public key, acquired from https://www.google.com/recaptcha/intro/v3.html."
 
@@ -2435,7 +2459,7 @@ msgstr "Re-evaluate policies"
 msgid "Recovery"
 msgstr "Recovery"
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:122
+#: src/pages/stages/identification/IdentificationStageForm.ts:125
 msgid "Recovery flow"
 msgstr "Recovery flow"
 
@@ -2477,6 +2501,10 @@ msgstr "Regular expressions for which authentication is not required. Each new l
 msgid "Related"
 msgstr "Related"
 
+#: src/pages/stages/user_logout/UserLogoutStageForm.ts:51
+msgid "Remove the user from the current session."
+msgstr "Remove the user from the current session."
+
 #: src/pages/events/EventInfo.ts:145
 #: src/pages/events/EventInfo.ts:164
 msgid "Request"
@@ -2646,7 +2674,7 @@ msgstr "Select which scopes can be used by the client. The client stil has to sp
 msgid "Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI."
 msgstr "Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI."
 
-#: src/pages/stages/prompt/PromptStageForm.ts:117
+#: src/pages/stages/prompt/PromptStageForm.ts:120
 msgid "Selected policies are executed when the stage is submitted to validate the data."
 msgstr "Selected policies are executed when the stage is submitted to validate the data."
 
@@ -2654,7 +2682,7 @@ msgstr "Selected policies are executed when the stage is submitted to validate t
 msgid "Selecting a service-connection enables the management of the outpost by authentik."
 msgstr "Selecting a service-connection enables the management of the outpost by authentik."
 
-#: src/pages/stages/password/PasswordStageForm.ts:82
+#: src/pages/stages/password/PasswordStageForm.ts:85
 msgid "Selection of backends to test the password against."
 msgstr "Selection of backends to test the password against."
 
@@ -2695,7 +2723,7 @@ msgstr "Service Provider Binding"
 msgid "Service connection"
 msgstr "Service connection"
 
-#: src/pages/stages/user_login/UserLoginStageForm.ts:63
+#: src/pages/stages/user_login/UserLoginStageForm.ts:66
 msgid "Session duration"
 msgstr "Session duration"
 
@@ -2728,7 +2756,11 @@ msgstr "Set custom attributes using YAML or JSON."
 msgid "Severity"
 msgstr "Severity"
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:98
+#: src/pages/stages/prompt/PromptStageForm.ts:55
+msgid "Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable."
+msgstr "Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable."
+
+#: src/pages/stages/identification/IdentificationStageForm.ts:101
 msgid "Show matched user"
 msgstr "Show matched user"
 
@@ -2808,21 +2840,37 @@ msgstr "Stage Configuration"
 msgid "Stage binding"
 msgstr "Stage binding"
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:130
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:133
 msgid "Stage used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again."
 msgstr "Stage used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again."
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:61
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:60
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:68
-#: src/pages/stages/captcha/CaptchaStageForm.ts:59
-#: src/pages/stages/consent/ConsentStageForm.ts:61
-#: src/pages/stages/email/EmailStageForm.ts:128
-#: src/pages/stages/identification/IdentificationStageForm.ts:67
-#: src/pages/stages/invitation/InvitationStageForm.ts:60
-#: src/pages/stages/password/PasswordStageForm.ts:67
-#: src/pages/stages/prompt/PromptStageForm.ts:62
-#: src/pages/stages/user_login/UserLoginStageForm.ts:59
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:53
+msgid "Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator)."
+msgstr "Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator)."
+
+#: src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts:51
+msgid "Stage used to configure a WebAutnn authenticator (i.e. Yubikey, FaceID/Windows Hello)."
+msgstr "Stage used to configure a WebAutnn authenticator (i.e. Yubikey, FaceID/Windows Hello)."
+
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:54
+msgid "Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows."
+msgstr "Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows."
+
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:61
+msgid "Stage used to validate any authenticator. This stage should be used during authentication or authorization flows."
+msgstr "Stage used to validate any authenticator. This stage should be used during authentication or authorization flows."
+
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:64
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:63
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:71
+#: src/pages/stages/captcha/CaptchaStageForm.ts:62
+#: src/pages/stages/consent/ConsentStageForm.ts:64
+#: src/pages/stages/email/EmailStageForm.ts:131
+#: src/pages/stages/identification/IdentificationStageForm.ts:70
+#: src/pages/stages/invitation/InvitationStageForm.ts:63
+#: src/pages/stages/password/PasswordStageForm.ts:70
+#: src/pages/stages/prompt/PromptStageForm.ts:65
+#: src/pages/stages/user_login/UserLoginStageForm.ts:62
 msgid "Stage-specific settings"
 msgstr "Stage-specific settings"
 
@@ -2834,14 +2882,14 @@ msgid "Stages"
 msgstr "Stages"
 
 #: src/pages/stages/StageListPage.ts:47
-msgid "Stages are single steps of a Flow that a user is guided through."
-msgstr "Stages are single steps of a Flow that a user is guided through."
+msgid "Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow."
+msgstr "Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow."
 
 #: src/pages/outposts/ServiceConnectionListPage.ts:56
 msgid "State"
 msgstr "State"
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:101
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:104
 #: src/pages/user-settings/settings/UserSettingsAuthenticatorTOTP.ts:77
 msgid "Static Tokens"
 msgstr "Static Tokens"
@@ -2850,6 +2898,10 @@ msgstr "Static Tokens"
 msgid "Static: Static value, displayed as-is."
 msgstr "Static: Static value, displayed as-is."
 
+#: src/pages/stages/deny/DenyStageForm.ts:51
+msgid "Statically deny the flow. To use this stage effectively, disable *Evaluate on plan* on the respective binding."
+msgstr "Statically deny the flow. To use this stage effectively, disable *Evaluate on plan* on the respective binding."
+
 #: src/pages/system-tasks/SystemTaskListPage.ts:57
 msgid "Status"
 msgstr "Status"
@@ -2868,7 +2920,7 @@ msgstr "Status: Enabled"
 msgid "Stop impersonation"
 msgstr "Stop impersonation"
 
-#: src/pages/stages/email/EmailStageForm.ts:151
+#: src/pages/stages/email/EmailStageForm.ts:154
 msgid "Subject"
 msgstr "Subject"
 
@@ -3187,7 +3239,7 @@ msgstr "TLS Authentication Certificate"
 msgid "TLS Verification Certificate"
 msgstr "TLS Verification Certificate"
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:104
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:107
 msgid "TOTP Authenticators"
 msgstr "TOTP Authenticators"
 
@@ -3203,7 +3255,7 @@ msgstr "Task finished with errors"
 msgid "Task finished with warnings"
 msgstr "Task finished with warnings"
 
-#: src/pages/stages/email/EmailStageForm.ts:157
+#: src/pages/stages/email/EmailStageForm.ts:160
 msgid "Template"
 msgstr "Template"
 
@@ -3260,11 +3312,19 @@ msgstr "These policies control which users can access this flow."
 msgid "These policies control which users can access this source."
 msgstr "These policies control which users can access this source."
 
+#: src/pages/stages/invitation/InvitationStageForm.ts:53
+msgid "This stage can be included in enrollment flows to accept invitations."
+msgstr "This stage can be included in enrollment flows to accept invitations."
+
+#: src/pages/stages/captcha/CaptchaStageForm.ts:52
+msgid "This stage checks the user's current session against the Google reCaptcha service."
+msgstr "This stage checks the user's current session against the Google reCaptcha service."
+
 #: src/pages/policies/reputation/ReputationPolicyForm.ts:94
 msgid "Threshold"
 msgstr "Threshold"
 
-#: src/pages/stages/email/EmailStageForm.ts:148
+#: src/pages/stages/email/EmailStageForm.ts:151
 msgid "Time in minutes the token sent is valid."
 msgstr "Time in minutes the token sent is valid."
 
@@ -3296,11 +3356,11 @@ msgstr "Token"
 msgid "Token URL"
 msgstr "Token URL"
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:65
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:68
 msgid "Token count"
 msgstr "Token count"
 
-#: src/pages/stages/email/EmailStageForm.ts:144
+#: src/pages/stages/email/EmailStageForm.ts:147
 msgid "Token expiry"
 msgstr "Token expiry"
 
@@ -3537,7 +3597,7 @@ msgstr "Use a code-based authenticator."
 msgid "Use a security key to prove your identity."
 msgstr "Use a security key to prove your identity."
 
-#: src/pages/stages/email/EmailStageForm.ts:138
+#: src/pages/stages/email/EmailStageForm.ts:141
 msgid "Use global settings"
 msgstr "Use global settings"
 
@@ -3571,8 +3631,8 @@ msgstr "User Settings"
 msgid "User details"
 msgstr "User details"
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:96
-#: src/pages/stages/identification/IdentificationStageForm.ts:71
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:99
+#: src/pages/stages/identification/IdentificationStageForm.ts:74
 msgid "User fields"
 msgstr "User fields"
 
@@ -3610,7 +3670,7 @@ msgstr "User/Group Attribute used for the user part of the HTTP-Basic Header. If
 msgid "Userinfo URL"
 msgstr "Userinfo URL"
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:76
+#: src/pages/stages/identification/IdentificationStageForm.ts:79
 #: src/pages/user-settings/UserDetailsPage.ts:57
 #: src/pages/users/UserForm.ts:47
 #: src/pages/users/UserViewPage.ts:85
@@ -3643,7 +3703,11 @@ msgstr "Using source"
 msgid "Validate SSL Certificates of upstream servers."
 msgstr "Validate SSL Certificates of upstream servers."
 
-#: src/pages/stages/prompt/PromptStageForm.ts:100
+#: src/pages/stages/password/PasswordStageForm.ts:60
+msgid "Validate the user's password against the selected backend(s)."
+msgstr "Validate the user's password against the selected backend(s)."
+
+#: src/pages/stages/prompt/PromptStageForm.ts:103
 msgid "Validation Policies"
 msgstr "Validation Policies"
 
@@ -3655,6 +3719,10 @@ msgstr "Validity days"
 msgid "Verification Certificate"
 msgstr "Verification Certificate"
 
+#: src/pages/stages/email/EmailStageForm.ts:121
+msgid "Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity."
+msgstr "Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity."
+
 #: src/pages/admin-overview/AdminOverviewPage.ts:56
 msgid "Version"
 msgstr "Version"
@@ -3700,7 +3768,7 @@ msgstr "Warning: Policy is not assigned."
 msgid "Warning: Provider not assigned to any application."
 msgstr "Warning: Provider not assigned to any application."
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:107
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:110
 msgid "WebAuthn Authenticators"
 msgstr "WebAuthn Authenticators"
 
@@ -3720,15 +3788,15 @@ msgstr "Webhook (generic)"
 msgid "Webhook URL"
 msgstr "Webhook URL"
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:101
+#: src/pages/stages/identification/IdentificationStageForm.ts:104
 msgid "When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown."
 msgstr "When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown."
 
-#: src/pages/stages/email/EmailStageForm.ts:141
+#: src/pages/stages/email/EmailStageForm.ts:144
 msgid "When enabled, global Email connection settings will be used and connection settings below will be ignored."
 msgstr "When enabled, global Email connection settings will be used and connection settings below will be ignored."
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:92
+#: src/pages/stages/identification/IdentificationStageForm.ts:95
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr "When enabled, user fields are matched regardless of their casing."
 
@@ -3758,6 +3826,14 @@ msgstr "Windows"
 msgid "Workers"
 msgstr "Workers"
 
+#: src/pages/stages/user_write/UserWriteStageForm.ts:51
+msgid ""
+"Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user\n"
+"is pending, a new user is created, and data is written to them."
+msgstr ""
+"Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user\n"
+"is pending, a new user is created, and data is written to them."
+
 #: src/pages/sources/saml/SAMLSourceForm.ts:161
 msgid "X509 Subject"
 msgstr "X509 Subject"
@@ -3778,11 +3854,11 @@ msgstr "Yes"
 msgid "You're currently impersonating {0}."
 msgstr "You're currently impersonating {0}."
 
-#: src/pages/stages/password/PasswordStageForm.ts:76
+#: src/pages/stages/password/PasswordStageForm.ts:79
 msgid "authentik Builtin Database"
 msgstr "authentik Builtin Database"
 
-#: src/pages/stages/password/PasswordStageForm.ts:79
+#: src/pages/stages/password/PasswordStageForm.ts:82
 msgid "authentik LDAP Backend"
 msgstr "authentik LDAP Backend"
 
@@ -3797,11 +3873,11 @@ msgstr "no tabs defined"
 msgid "{0}"
 msgstr "{0}"
 
-#: src/pages/stages/prompt/PromptStageForm.ts:79
+#: src/pages/stages/prompt/PromptStageForm.ts:82
 msgid "{0} (\"{1}\", of type {2})"
 msgstr "{0} (\"{1}\", of type {2})"
 
-#: src/pages/stages/prompt/PromptStageForm.ts:112
+#: src/pages/stages/prompt/PromptStageForm.ts:115
 msgid "{0} ({1})"
 msgstr "{0} ({1})"
 
diff --git a/web/src/locales/pseudo-LOCALE.po b/web/src/locales/pseudo-LOCALE.po
index ca03632d3..b54ff72c4 100644
--- a/web/src/locales/pseudo-LOCALE.po
+++ b/web/src/locales/pseudo-LOCALE.po
@@ -17,11 +17,11 @@ msgstr ""
 msgid "-"
 msgstr ""
 
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:69
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:72
 msgid "6 digits, widely compatible"
 msgstr ""
 
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:72
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:75
 msgid "8 digits, not compatible with apps like Google Authenticator"
 msgstr ""
 
@@ -147,7 +147,7 @@ msgstr ""
 msgid "Also known as Entity ID. Defaults the Metadata URL."
 msgstr ""
 
-#: src/pages/stages/consent/ConsentStageForm.ts:78
+#: src/pages/stages/consent/ConsentStageForm.ts:81
 msgid "Always require consent"
 msgstr ""
 
@@ -298,7 +298,7 @@ msgstr ""
 msgid "Authorized application:"
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:71
+#: src/pages/stages/password/PasswordStageForm.ts:74
 msgid "Backends"
 msgstr ""
 
@@ -406,7 +406,7 @@ msgstr ""
 msgid "Cancel"
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:89
+#: src/pages/stages/identification/IdentificationStageForm.ts:92
 msgid "Case insensitive matching"
 msgstr ""
 
@@ -563,10 +563,10 @@ msgstr ""
 msgid "Configuration"
 msgstr ""
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:71
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:77
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:115
-#: src/pages/stages/password/PasswordStageForm.ts:86
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:74
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:80
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:118
+#: src/pages/stages/password/PasswordStageForm.ts:89
 msgid "Configuration flow"
 msgstr ""
 
@@ -611,15 +611,15 @@ msgstr ""
 msgid "Consent"
 msgstr ""
 
-#: src/pages/stages/consent/ConsentStageForm.ts:90
+#: src/pages/stages/consent/ConsentStageForm.ts:93
 msgid "Consent expires in"
 msgstr ""
 
-#: src/pages/stages/consent/ConsentStageForm.ts:84
+#: src/pages/stages/consent/ConsentStageForm.ts:87
 msgid "Consent expires."
 msgstr ""
 
-#: src/pages/stages/consent/ConsentStageForm.ts:81
+#: src/pages/stages/consent/ConsentStageForm.ts:84
 msgid "Consent given last indefinitely"
 msgstr ""
 
@@ -655,11 +655,11 @@ msgstr ""
 #: src/flows/stages/dummy/DummyStage.ts:39
 #: src/flows/stages/password/PasswordStage.ts:71
 #: src/flows/stages/prompt/PromptStage.ts:155
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:91
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:94
 msgid "Continue"
 msgstr ""
 
-#: src/pages/stages/invitation/InvitationStageForm.ts:67
+#: src/pages/stages/invitation/InvitationStageForm.ts:70
 msgid "Continue flow without invitation"
 msgstr ""
 
@@ -715,8 +715,8 @@ msgstr ""
 #: src/pages/stages/invitation/InvitationListPage.ts:85
 #: src/pages/stages/prompt/PromptListPage.ts:96
 #: src/pages/stages/prompt/PromptListPage.ts:104
-#: src/pages/stages/prompt/PromptStageForm.ts:87
-#: src/pages/stages/prompt/PromptStageForm.ts:95
+#: src/pages/stages/prompt/PromptStageForm.ts:90
+#: src/pages/stages/prompt/PromptStageForm.ts:98
 #: src/pages/user-settings/tokens/UserTokenList.ts:50
 #: src/pages/user-settings/tokens/UserTokenList.ts:58
 #: src/pages/users/UserListPage.ts:143
@@ -773,7 +773,7 @@ msgid "Create Policy"
 msgstr ""
 
 #: src/pages/stages/prompt/PromptListPage.ts:99
-#: src/pages/stages/prompt/PromptStageForm.ts:90
+#: src/pages/stages/prompt/PromptStageForm.ts:93
 msgid "Create Prompt"
 msgstr ""
 
@@ -896,11 +896,17 @@ msgstr ""
 msgid "Delete temporary users after"
 msgstr ""
 
+#: src/pages/stages/user_delete/UserDeleteStageForm.ts:51
+msgid ""
+"Delete the currently pending user. CAUTION, this stage does not ask for\n"
+"confirmation. Use a consent stage to ensure the user is aware of their actions."
+msgstr ""
+
 #: src/elements/forms/DeleteForm.ts:62
 msgid "Delete {0}"
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:88
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:91
 msgid "Deny the user access"
 msgstr ""
 
@@ -928,11 +934,11 @@ msgstr ""
 msgid "Determines how authentik sends the response back to the Service Provider."
 msgstr ""
 
-#: src/pages/stages/user_login/UserLoginStageForm.ts:67
+#: src/pages/stages/user_login/UserLoginStageForm.ts:70
 msgid "Determines how long a session lasts. Default of 0 seconds means that the sessions lasts until the browser is closed. (Format: hours=-1;minutes=-2;seconds=-3)."
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:110
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:113
 msgid "Device classes which can be used to authenticate."
 msgstr ""
 
@@ -945,7 +951,7 @@ msgstr ""
 msgid "Digest algorithm"
 msgstr ""
 
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:64
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:67
 msgid "Digits"
 msgstr ""
 
@@ -979,6 +985,10 @@ msgstr ""
 msgid "Download"
 msgstr ""
 
+#: src/pages/stages/dummy/DummyStageForm.ts:51
+msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
+msgstr ""
+
 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:226
 msgid "Each provider has a different issuer, based on the application slug."
 msgstr ""
@@ -1037,7 +1047,7 @@ msgid "Either no applications are defined, or you don't have access to any."
 msgstr ""
 
 #: src/pages/events/TransportForm.ts:46
-#: src/pages/stages/identification/IdentificationStageForm.ts:79
+#: src/pages/stages/identification/IdentificationStageForm.ts:82
 #: src/pages/user-settings/UserDetailsPage.ts:71
 #: src/pages/users/UserForm.ts:61
 #: src/pages/users/UserViewPage.ts:101
@@ -1087,7 +1097,7 @@ msgstr ""
 
 #: src/pages/sources/oauth/OAuthSourceForm.ts:186
 #: src/pages/sources/saml/SAMLSourceForm.ts:266
-#: src/pages/stages/identification/IdentificationStageForm.ts:104
+#: src/pages/stages/identification/IdentificationStageForm.ts:107
 msgid "Enrollment flow"
 msgstr ""
 
@@ -1235,7 +1245,7 @@ msgstr ""
 msgid "External host"
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:108
+#: src/pages/stages/password/PasswordStageForm.ts:111
 msgid "Failed attempts before cancel"
 msgstr ""
 
@@ -1280,11 +1290,11 @@ msgstr ""
 msgid "Field which contains members of a group."
 msgstr ""
 
-#: src/pages/stages/prompt/PromptStageForm.ts:66
+#: src/pages/stages/prompt/PromptStageForm.ts:69
 msgid "Fields"
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:82
+#: src/pages/stages/identification/IdentificationStageForm.ts:85
 msgid "Fields a user can identify themselves with."
 msgstr ""
 
@@ -1316,12 +1326,12 @@ msgstr ""
 msgid "Flow used before authentication."
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:105
+#: src/pages/stages/password/PasswordStageForm.ts:108
 msgid "Flow used by an authenticated user to configure their password. If empty, user will not be able to configure change their password."
 msgstr ""
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:89
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:95
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:93
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:98
 msgid "Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage."
 msgstr ""
 
@@ -1343,7 +1353,7 @@ msgstr ""
 msgid "Flows describe a chain of Stages to authenticate, enroll or recover a user. Stages are chosen based on policies applied to them."
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:85
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:88
 msgid "Force the user to configure an authenticator"
 msgstr ""
 
@@ -1447,15 +1457,15 @@ msgstr ""
 #: src/pages/providers/saml/SAMLProviderForm.ts:171
 #: src/pages/sources/ldap/LDAPSourceForm.ts:167
 #: src/pages/sources/ldap/LDAPSourceForm.ts:193
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:111
-#: src/pages/stages/identification/IdentificationStageForm.ts:83
-#: src/pages/stages/password/PasswordStageForm.ts:83
-#: src/pages/stages/prompt/PromptStageForm.ts:84
-#: src/pages/stages/prompt/PromptStageForm.ts:118
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:114
+#: src/pages/stages/identification/IdentificationStageForm.ts:86
+#: src/pages/stages/password/PasswordStageForm.ts:86
+#: src/pages/stages/prompt/PromptStageForm.ts:87
+#: src/pages/stages/prompt/PromptStageForm.ts:121
 msgid "Hold control/command to select multiple items."
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:112
+#: src/pages/stages/password/PasswordStageForm.ts:115
 msgid "How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage."
 msgstr ""
 
@@ -1488,7 +1498,7 @@ msgstr ""
 msgid "If left empty, authentik will try to extract the launch URL based on the selected provider."
 msgstr ""
 
-#: src/pages/stages/invitation/InvitationStageForm.ts:70
+#: src/pages/stages/invitation/InvitationStageForm.ts:73
 msgid "If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given."
 msgstr ""
 
@@ -1624,6 +1634,10 @@ msgstr ""
 msgid "Launch URL"
 msgstr ""
 
+#: src/pages/stages/identification/IdentificationStageForm.ts:60
+msgid "Let the user identify themselves with their username or Email address."
+msgstr ""
+
 #: src/interfaces/AdminInterface.ts:16
 msgid "Library"
 msgstr ""
@@ -1690,15 +1704,15 @@ msgstr ""
 #: src/pages/sources/saml/SAMLSourceForm.ts:240
 #: src/pages/sources/saml/SAMLSourceForm.ts:261
 #: src/pages/sources/saml/SAMLSourceForm.ts:282
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:87
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:93
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:128
-#: src/pages/stages/email/EmailStageForm.ts:169
-#: src/pages/stages/identification/IdentificationStageForm.ts:117
-#: src/pages/stages/identification/IdentificationStageForm.ts:135
-#: src/pages/stages/password/PasswordStageForm.ts:103
-#: src/pages/stages/prompt/PromptStageForm.ts:82
-#: src/pages/stages/prompt/PromptStageForm.ts:115
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:90
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:96
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:131
+#: src/pages/stages/email/EmailStageForm.ts:172
+#: src/pages/stages/identification/IdentificationStageForm.ts:120
+#: src/pages/stages/identification/IdentificationStageForm.ts:138
+#: src/pages/stages/password/PasswordStageForm.ts:106
+#: src/pages/stages/prompt/PromptStageForm.ts:85
+#: src/pages/stages/prompt/PromptStageForm.ts:118
 msgid "Loading..."
 msgstr ""
 
@@ -1708,6 +1722,10 @@ msgstr ""
 msgid "Local"
 msgstr ""
 
+#: src/pages/stages/user_login/UserLoginStageForm.ts:52
+msgid "Log the currently pending user in."
+msgstr ""
+
 #: src/pages/sources/ldap/LDAPSourceForm.ts:88
 msgid "Login password is synced from LDAP into authentik automatically. Enable this option only to write password changes in authentik back to LDAP."
 msgstr ""
@@ -1793,7 +1811,7 @@ msgstr ""
 
 #: src/pages/events/TransportForm.ts:79
 #: src/pages/events/TransportListPage.ts:47
-#: src/pages/stages/consent/ConsentStageForm.ts:65
+#: src/pages/stages/consent/ConsentStageForm.ts:68
 msgid "Mode"
 msgstr ""
 
@@ -1852,23 +1870,23 @@ msgstr ""
 #: src/pages/sources/saml/SAMLSourceForm.ts:54
 #: src/pages/sources/saml/SAMLSourceViewPage.ts:77
 #: src/pages/stages/StageListPage.ts:65
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:54
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:53
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:61
-#: src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts:51
-#: src/pages/stages/captcha/CaptchaStageForm.ts:52
-#: src/pages/stages/consent/ConsentStageForm.ts:54
-#: src/pages/stages/deny/DenyStageForm.ts:51
-#: src/pages/stages/dummy/DummyStageForm.ts:51
-#: src/pages/stages/email/EmailStageForm.ts:121
-#: src/pages/stages/identification/IdentificationStageForm.ts:60
-#: src/pages/stages/invitation/InvitationStageForm.ts:53
-#: src/pages/stages/password/PasswordStageForm.ts:60
-#: src/pages/stages/prompt/PromptStageForm.ts:55
-#: src/pages/stages/user_delete/UserDeleteStageForm.ts:51
-#: src/pages/stages/user_login/UserLoginStageForm.ts:52
-#: src/pages/stages/user_logout/UserLogoutStageForm.ts:51
-#: src/pages/stages/user_write/UserWriteStageForm.ts:51
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:57
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:56
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:64
+#: src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts:54
+#: src/pages/stages/captcha/CaptchaStageForm.ts:55
+#: src/pages/stages/consent/ConsentStageForm.ts:57
+#: src/pages/stages/deny/DenyStageForm.ts:54
+#: src/pages/stages/dummy/DummyStageForm.ts:54
+#: src/pages/stages/email/EmailStageForm.ts:124
+#: src/pages/stages/identification/IdentificationStageForm.ts:63
+#: src/pages/stages/invitation/InvitationStageForm.ts:56
+#: src/pages/stages/password/PasswordStageForm.ts:63
+#: src/pages/stages/prompt/PromptStageForm.ts:58
+#: src/pages/stages/user_delete/UserDeleteStageForm.ts:55
+#: src/pages/stages/user_login/UserLoginStageForm.ts:55
+#: src/pages/stages/user_logout/UserLogoutStageForm.ts:54
+#: src/pages/stages/user_write/UserWriteStageForm.ts:55
 #: src/pages/user-settings/UserDetailsPage.ts:64
 #: src/pages/users/UserForm.ts:54
 #: src/pages/users/UserListPage.ts:49
@@ -1969,7 +1987,7 @@ msgstr ""
 msgid "Not available"
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:72
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:75
 msgid "Not configured action"
 msgstr ""
 
@@ -2057,7 +2075,7 @@ msgstr ""
 msgid "Object uniqueness field"
 msgstr ""
 
-#: src/pages/stages/consent/ConsentStageForm.ts:94
+#: src/pages/stages/consent/ConsentStageForm.ts:97
 msgid "Offset after which consent expires. (Format: hours=1;minutes=2;seconds=3)."
 msgstr ""
 
@@ -2098,11 +2116,11 @@ msgstr ""
 msgid "Optional data which is loaded into the flow's 'prompt_data' context variable. YAML or JSON."
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:119
+#: src/pages/stages/identification/IdentificationStageForm.ts:122
 msgid "Optional enrollment flow, which is linked at the bottom of the page."
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:137
+#: src/pages/stages/identification/IdentificationStageForm.ts:140
 msgid "Optional recovery flow, which is linked at the bottom of the page."
 msgstr ""
 
@@ -2285,7 +2303,7 @@ msgid "Pre-authentication flow"
 msgstr ""
 
 #: src/pages/crypto/CertificateKeyPairForm.ts:61
-#: src/pages/stages/captcha/CaptchaStageForm.ts:70
+#: src/pages/stages/captcha/CaptchaStageForm.ts:73
 msgid "Private Key"
 msgstr ""
 
@@ -2293,7 +2311,7 @@ msgstr ""
 msgid "Private key available?"
 msgstr ""
 
-#: src/pages/stages/captcha/CaptchaStageForm.ts:75
+#: src/pages/stages/captcha/CaptchaStageForm.ts:78
 msgid "Private key, acquired from https://www.google.com/recaptcha/intro/v3.html."
 msgstr ""
 
@@ -2306,6 +2324,10 @@ msgstr ""
 msgid "Prompt"
 msgstr ""
 
+#: src/pages/stages/consent/ConsentStageForm.ts:54
+msgid "Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time."
+msgstr ""
+
 #: src/interfaces/AdminInterface.ts:29
 #: src/pages/stages/prompt/PromptListPage.ts:28
 msgid "Prompts"
@@ -2381,11 +2403,11 @@ msgstr ""
 msgid "Public"
 msgstr ""
 
-#: src/pages/stages/captcha/CaptchaStageForm.ts:63
+#: src/pages/stages/captcha/CaptchaStageForm.ts:66
 msgid "Public Key"
 msgstr ""
 
-#: src/pages/stages/captcha/CaptchaStageForm.ts:67
+#: src/pages/stages/captcha/CaptchaStageForm.ts:70
 msgid "Public key, acquired from https://www.google.com/recaptcha/intro/v3.html."
 msgstr ""
 
@@ -2429,7 +2451,7 @@ msgstr ""
 msgid "Recovery"
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:122
+#: src/pages/stages/identification/IdentificationStageForm.ts:125
 msgid "Recovery flow"
 msgstr ""
 
@@ -2471,6 +2493,10 @@ msgstr ""
 msgid "Related"
 msgstr ""
 
+#: src/pages/stages/user_logout/UserLogoutStageForm.ts:51
+msgid "Remove the user from the current session."
+msgstr ""
+
 #: src/pages/events/EventInfo.ts:145
 #: src/pages/events/EventInfo.ts:164
 msgid "Request"
@@ -2640,7 +2666,7 @@ msgstr ""
 msgid "Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI."
 msgstr ""
 
-#: src/pages/stages/prompt/PromptStageForm.ts:117
+#: src/pages/stages/prompt/PromptStageForm.ts:120
 msgid "Selected policies are executed when the stage is submitted to validate the data."
 msgstr ""
 
@@ -2648,7 +2674,7 @@ msgstr ""
 msgid "Selecting a service-connection enables the management of the outpost by authentik."
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:82
+#: src/pages/stages/password/PasswordStageForm.ts:85
 msgid "Selection of backends to test the password against."
 msgstr ""
 
@@ -2689,7 +2715,7 @@ msgstr ""
 msgid "Service connection"
 msgstr ""
 
-#: src/pages/stages/user_login/UserLoginStageForm.ts:63
+#: src/pages/stages/user_login/UserLoginStageForm.ts:66
 msgid "Session duration"
 msgstr ""
 
@@ -2722,7 +2748,11 @@ msgstr ""
 msgid "Severity"
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:98
+#: src/pages/stages/prompt/PromptStageForm.ts:55
+msgid "Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable."
+msgstr ""
+
+#: src/pages/stages/identification/IdentificationStageForm.ts:101
 msgid "Show matched user"
 msgstr ""
 
@@ -2802,21 +2832,37 @@ msgstr ""
 msgid "Stage binding"
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:130
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:133
 msgid "Stage used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again."
 msgstr ""
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:61
-#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:60
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:68
-#: src/pages/stages/captcha/CaptchaStageForm.ts:59
-#: src/pages/stages/consent/ConsentStageForm.ts:61
-#: src/pages/stages/email/EmailStageForm.ts:128
-#: src/pages/stages/identification/IdentificationStageForm.ts:67
-#: src/pages/stages/invitation/InvitationStageForm.ts:60
-#: src/pages/stages/password/PasswordStageForm.ts:67
-#: src/pages/stages/prompt/PromptStageForm.ts:62
-#: src/pages/stages/user_login/UserLoginStageForm.ts:59
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:53
+msgid "Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator)."
+msgstr ""
+
+#: src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts:51
+msgid "Stage used to configure a WebAutnn authenticator (i.e. Yubikey, FaceID/Windows Hello)."
+msgstr ""
+
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:54
+msgid "Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows."
+msgstr ""
+
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:61
+msgid "Stage used to validate any authenticator. This stage should be used during authentication or authorization flows."
+msgstr ""
+
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:64
+#: src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts:63
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:71
+#: src/pages/stages/captcha/CaptchaStageForm.ts:62
+#: src/pages/stages/consent/ConsentStageForm.ts:64
+#: src/pages/stages/email/EmailStageForm.ts:131
+#: src/pages/stages/identification/IdentificationStageForm.ts:70
+#: src/pages/stages/invitation/InvitationStageForm.ts:63
+#: src/pages/stages/password/PasswordStageForm.ts:70
+#: src/pages/stages/prompt/PromptStageForm.ts:65
+#: src/pages/stages/user_login/UserLoginStageForm.ts:62
 msgid "Stage-specific settings"
 msgstr ""
 
@@ -2828,14 +2874,14 @@ msgid "Stages"
 msgstr ""
 
 #: src/pages/stages/StageListPage.ts:47
-msgid "Stages are single steps of a Flow that a user is guided through."
+msgid "Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow."
 msgstr ""
 
 #: src/pages/outposts/ServiceConnectionListPage.ts:56
 msgid "State"
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:101
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:104
 #: src/pages/user-settings/settings/UserSettingsAuthenticatorTOTP.ts:77
 msgid "Static Tokens"
 msgstr ""
@@ -2844,6 +2890,10 @@ msgstr ""
 msgid "Static: Static value, displayed as-is."
 msgstr ""
 
+#: src/pages/stages/deny/DenyStageForm.ts:51
+msgid "Statically deny the flow. To use this stage effectively, disable *Evaluate on plan* on the respective binding."
+msgstr ""
+
 #: src/pages/system-tasks/SystemTaskListPage.ts:57
 msgid "Status"
 msgstr ""
@@ -2862,7 +2912,7 @@ msgstr ""
 msgid "Stop impersonation"
 msgstr ""
 
-#: src/pages/stages/email/EmailStageForm.ts:151
+#: src/pages/stages/email/EmailStageForm.ts:154
 msgid "Subject"
 msgstr ""
 
@@ -3181,7 +3231,7 @@ msgstr ""
 msgid "TLS Verification Certificate"
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:104
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:107
 msgid "TOTP Authenticators"
 msgstr ""
 
@@ -3197,7 +3247,7 @@ msgstr ""
 msgid "Task finished with warnings"
 msgstr ""
 
-#: src/pages/stages/email/EmailStageForm.ts:157
+#: src/pages/stages/email/EmailStageForm.ts:160
 msgid "Template"
 msgstr ""
 
@@ -3252,11 +3302,19 @@ msgstr ""
 msgid "These policies control which users can access this source."
 msgstr ""
 
+#: src/pages/stages/invitation/InvitationStageForm.ts:53
+msgid "This stage can be included in enrollment flows to accept invitations."
+msgstr ""
+
+#: src/pages/stages/captcha/CaptchaStageForm.ts:52
+msgid "This stage checks the user's current session against the Google reCaptcha service."
+msgstr ""
+
 #: src/pages/policies/reputation/ReputationPolicyForm.ts:94
 msgid "Threshold"
 msgstr ""
 
-#: src/pages/stages/email/EmailStageForm.ts:148
+#: src/pages/stages/email/EmailStageForm.ts:151
 msgid "Time in minutes the token sent is valid."
 msgstr ""
 
@@ -3288,11 +3346,11 @@ msgstr ""
 msgid "Token URL"
 msgstr ""
 
-#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:65
+#: src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts:68
 msgid "Token count"
 msgstr ""
 
-#: src/pages/stages/email/EmailStageForm.ts:144
+#: src/pages/stages/email/EmailStageForm.ts:147
 msgid "Token expiry"
 msgstr ""
 
@@ -3529,7 +3587,7 @@ msgstr ""
 msgid "Use a security key to prove your identity."
 msgstr ""
 
-#: src/pages/stages/email/EmailStageForm.ts:138
+#: src/pages/stages/email/EmailStageForm.ts:141
 msgid "Use global settings"
 msgstr ""
 
@@ -3563,8 +3621,8 @@ msgstr ""
 msgid "User details"
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:96
-#: src/pages/stages/identification/IdentificationStageForm.ts:71
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:99
+#: src/pages/stages/identification/IdentificationStageForm.ts:74
 msgid "User fields"
 msgstr ""
 
@@ -3602,7 +3660,7 @@ msgstr ""
 msgid "Userinfo URL"
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:76
+#: src/pages/stages/identification/IdentificationStageForm.ts:79
 #: src/pages/user-settings/UserDetailsPage.ts:57
 #: src/pages/users/UserForm.ts:47
 #: src/pages/users/UserViewPage.ts:85
@@ -3635,7 +3693,11 @@ msgstr ""
 msgid "Validate SSL Certificates of upstream servers."
 msgstr ""
 
-#: src/pages/stages/prompt/PromptStageForm.ts:100
+#: src/pages/stages/password/PasswordStageForm.ts:60
+msgid "Validate the user's password against the selected backend(s)."
+msgstr ""
+
+#: src/pages/stages/prompt/PromptStageForm.ts:103
 msgid "Validation Policies"
 msgstr ""
 
@@ -3647,6 +3709,10 @@ msgstr ""
 msgid "Verification Certificate"
 msgstr ""
 
+#: src/pages/stages/email/EmailStageForm.ts:121
+msgid "Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity."
+msgstr ""
+
 #: src/pages/admin-overview/AdminOverviewPage.ts:56
 msgid "Version"
 msgstr ""
@@ -3692,7 +3758,7 @@ msgstr ""
 msgid "Warning: Provider not assigned to any application."
 msgstr ""
 
-#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:107
+#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:110
 msgid "WebAuthn Authenticators"
 msgstr ""
 
@@ -3712,15 +3778,15 @@ msgstr ""
 msgid "Webhook URL"
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:101
+#: src/pages/stages/identification/IdentificationStageForm.ts:104
 msgid "When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown."
 msgstr ""
 
-#: src/pages/stages/email/EmailStageForm.ts:141
+#: src/pages/stages/email/EmailStageForm.ts:144
 msgid "When enabled, global Email connection settings will be used and connection settings below will be ignored."
 msgstr ""
 
-#: src/pages/stages/identification/IdentificationStageForm.ts:92
+#: src/pages/stages/identification/IdentificationStageForm.ts:95
 msgid "When enabled, user fields are matched regardless of their casing."
 msgstr ""
 
@@ -3750,6 +3816,12 @@ msgstr ""
 msgid "Workers"
 msgstr ""
 
+#: src/pages/stages/user_write/UserWriteStageForm.ts:51
+msgid ""
+"Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user\n"
+"is pending, a new user is created, and data is written to them."
+msgstr ""
+
 #: src/pages/sources/saml/SAMLSourceForm.ts:161
 msgid "X509 Subject"
 msgstr ""
@@ -3770,11 +3842,11 @@ msgstr ""
 msgid "You're currently impersonating {0}."
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:76
+#: src/pages/stages/password/PasswordStageForm.ts:79
 msgid "authentik Builtin Database"
 msgstr ""
 
-#: src/pages/stages/password/PasswordStageForm.ts:79
+#: src/pages/stages/password/PasswordStageForm.ts:82
 msgid "authentik LDAP Backend"
 msgstr ""
 
@@ -3789,11 +3861,11 @@ msgstr ""
 msgid "{0}"
 msgstr ""
 
-#: src/pages/stages/prompt/PromptStageForm.ts:79
+#: src/pages/stages/prompt/PromptStageForm.ts:82
 msgid "{0} (\"{1}\", of type {2})"
 msgstr ""
 
-#: src/pages/stages/prompt/PromptStageForm.ts:112
+#: src/pages/stages/prompt/PromptStageForm.ts:115
 msgid "{0} ({1})"
 msgstr ""
 
diff --git a/web/src/pages/stages/StageListPage.ts b/web/src/pages/stages/StageListPage.ts
index db25eaa82..4b82fcb4e 100644
--- a/web/src/pages/stages/StageListPage.ts
+++ b/web/src/pages/stages/StageListPage.ts
@@ -39,7 +39,7 @@ export class StageListPage extends TablePage<Stage> {
         return t`Stages`;
     }
     pageDescription(): string | undefined {
-        return t`Stages are single steps of a Flow that a user is guided through.`;
+        return t`Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow.`;
     }
     pageIcon(): string {
         return "pf-icon pf-icon-plugged";
diff --git a/web/src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts b/web/src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts
index 180f9ac2e..1ee32055f 100644
--- a/web/src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts
+++ b/web/src/pages/stages/authenticator_static/AuthenticatorStaticStageForm.ts
@@ -47,6 +47,9 @@ export class AuthenticatorStaticStageForm extends Form<AuthenticatorStaticStage>
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
@@ -82,7 +85,9 @@ export class AuthenticatorStaticStageForm extends Form<AuthenticatorStaticStage>
                                 });
                             }), html`<option>${t`Loading...`}</option>`)}
                         </select>
-                        <p class="pf-c-form__helper-text">${t`Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage.`}</p>
+                        <p class="pf-c-form__helper-text">
+                            ${t`Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage.`}
+                        </p>
                     </ak-form-element-horizontal>
                 </div>
             </ak-form-group>
diff --git a/web/src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts b/web/src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts
index 55eec164b..4ca56ad86 100644
--- a/web/src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts
+++ b/web/src/pages/stages/authenticator_totp/AuthenticatorTOTPStageForm.ts
@@ -46,6 +46,9 @@ export class AuthenticatorTOTPStageForm extends Form<AuthenticatorTOTPStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator).`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts b/web/src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
index bfdecc280..189f52a77 100644
--- a/web/src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
+++ b/web/src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts
@@ -56,6 +56,9 @@ export class AuthenticatorValidateStageForm extends Form<AuthenticatorValidateSt
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Stage used to validate any authenticator. This stage should be used during authentication or authorization flows.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts b/web/src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts
index 8ca59f94c..06a561d4e 100644
--- a/web/src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts
+++ b/web/src/pages/stages/authenticator_webauthn/AuthenticateWebAuthnStageForm.ts
@@ -44,6 +44,9 @@ export class AuthenticateWebAuthnStageForm extends Form<AuthenticateWebAuthnStag
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Stage used to configure a WebAutnn authenticator (i.e. Yubikey, FaceID/Windows Hello).`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/captcha/CaptchaStageForm.ts b/web/src/pages/stages/captcha/CaptchaStageForm.ts
index 3da01e454..970fd1f70 100644
--- a/web/src/pages/stages/captcha/CaptchaStageForm.ts
+++ b/web/src/pages/stages/captcha/CaptchaStageForm.ts
@@ -45,6 +45,9 @@ export class CaptchaStageForm extends Form<CaptchaStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`This stage checks the user's current session against the Google reCaptcha service.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/consent/ConsentStageForm.ts b/web/src/pages/stages/consent/ConsentStageForm.ts
index 096b350ac..c33810525 100644
--- a/web/src/pages/stages/consent/ConsentStageForm.ts
+++ b/web/src/pages/stages/consent/ConsentStageForm.ts
@@ -49,6 +49,9 @@ export class ConsentStageForm extends Form<ConsentStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/deny/DenyStageForm.ts b/web/src/pages/stages/deny/DenyStageForm.ts
index 7259c00ca..0f585a576 100644
--- a/web/src/pages/stages/deny/DenyStageForm.ts
+++ b/web/src/pages/stages/deny/DenyStageForm.ts
@@ -44,6 +44,9 @@ export class DenyStageForm extends Form<DenyStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Statically deny the flow. To use this stage effectively, disable *Evaluate on plan* on the respective binding.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/dummy/DummyStageForm.ts b/web/src/pages/stages/dummy/DummyStageForm.ts
index b0f3d41a4..bd0f6f22c 100644
--- a/web/src/pages/stages/dummy/DummyStageForm.ts
+++ b/web/src/pages/stages/dummy/DummyStageForm.ts
@@ -44,6 +44,9 @@ export class DummyStageForm extends Form<DummyStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Dummy stage used for testing. Shows a simple continue button and always passes.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/email/EmailStageForm.ts b/web/src/pages/stages/email/EmailStageForm.ts
index 431aed7d3..f7917358d 100644
--- a/web/src/pages/stages/email/EmailStageForm.ts
+++ b/web/src/pages/stages/email/EmailStageForm.ts
@@ -116,6 +116,9 @@ export class EmailStageForm extends Form<EmailStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/identification/IdentificationStageForm.ts b/web/src/pages/stages/identification/IdentificationStageForm.ts
index 154910d18..989c55645 100644
--- a/web/src/pages/stages/identification/IdentificationStageForm.ts
+++ b/web/src/pages/stages/identification/IdentificationStageForm.ts
@@ -53,6 +53,9 @@ export class IdentificationStageForm extends Form<IdentificationStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Let the user identify themselves with their username or Email address.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/invitation/InvitationStageForm.ts b/web/src/pages/stages/invitation/InvitationStageForm.ts
index 90ebcbd25..b9917ac78 100644
--- a/web/src/pages/stages/invitation/InvitationStageForm.ts
+++ b/web/src/pages/stages/invitation/InvitationStageForm.ts
@@ -46,6 +46,9 @@ export class InvitationStageForm extends Form<InvitationStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`This stage can be included in enrollment flows to accept invitations.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/password/PasswordStageForm.ts b/web/src/pages/stages/password/PasswordStageForm.ts
index 649bf1da8..38de2f949 100644
--- a/web/src/pages/stages/password/PasswordStageForm.ts
+++ b/web/src/pages/stages/password/PasswordStageForm.ts
@@ -53,6 +53,9 @@ export class PasswordStageForm extends Form<PasswordStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Validate the user's password against the selected backend(s).`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/prompt/PromptStageForm.ts b/web/src/pages/stages/prompt/PromptStageForm.ts
index c0bfd0cd5..c18963165 100644
--- a/web/src/pages/stages/prompt/PromptStageForm.ts
+++ b/web/src/pages/stages/prompt/PromptStageForm.ts
@@ -48,6 +48,9 @@ export class PromptStageForm extends Form<PromptStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/user_delete/UserDeleteStageForm.ts b/web/src/pages/stages/user_delete/UserDeleteStageForm.ts
index ee154950a..15aaa2f27 100644
--- a/web/src/pages/stages/user_delete/UserDeleteStageForm.ts
+++ b/web/src/pages/stages/user_delete/UserDeleteStageForm.ts
@@ -44,6 +44,10 @@ export class UserDeleteStageForm extends Form<UserDeleteStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Delete the currently pending user. CAUTION, this stage does not ask for
+                confirmation. Use a consent stage to ensure the user is aware of their actions.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/user_login/UserLoginStageForm.ts b/web/src/pages/stages/user_login/UserLoginStageForm.ts
index 0b58db0e9..d436933b7 100644
--- a/web/src/pages/stages/user_login/UserLoginStageForm.ts
+++ b/web/src/pages/stages/user_login/UserLoginStageForm.ts
@@ -45,6 +45,9 @@ export class UserLoginStageForm extends Form<UserLoginStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Log the currently pending user in.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/user_logout/UserLogoutStageForm.ts b/web/src/pages/stages/user_logout/UserLogoutStageForm.ts
index 2cd6795f1..9e5579191 100644
--- a/web/src/pages/stages/user_logout/UserLogoutStageForm.ts
+++ b/web/src/pages/stages/user_logout/UserLogoutStageForm.ts
@@ -44,6 +44,9 @@ export class UserLogoutStageForm extends Form<UserLogoutStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Remove the user from the current session.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}
diff --git a/web/src/pages/stages/user_write/UserWriteStageForm.ts b/web/src/pages/stages/user_write/UserWriteStageForm.ts
index 803ea2a8b..7aee974ec 100644
--- a/web/src/pages/stages/user_write/UserWriteStageForm.ts
+++ b/web/src/pages/stages/user_write/UserWriteStageForm.ts
@@ -44,6 +44,10 @@ export class UserWriteStageForm extends Form<UserWriteStage> {
 
     renderForm(): TemplateResult {
         return html`<form class="pf-c-form pf-m-horizontal">
+            <div class="form-help-text">
+                ${t`Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user
+                is pending, a new user is created, and data is written to them.`}
+            </div>
             <ak-form-element-horizontal
                 label=${t`Name`}
                 ?required=${true}