authentik

I use this for SSO, MFA and for protecting unauthenticated access