We assume that you are already familiar with Authentik.
This example has been tested with a Proxy in Forward auth (domain level) mode (see here for more information).