We assume that you are already familiar with Authentik.

This example has been tested with a Proxy in Forward auth (domain level) mode (see here for more information).