So the issue ended up being that Active Directory and Authentik were using the email address david@domain.com for the administrative account, and Bookstack's administrative account, named david was also associated with the email address david@domain.com, which was trying to sync to my Active Directory/