Learn Authentik from the ground up to production grade: prerequisites & environment setup, history & background, architecture & core concepts, installation, understanding flows & stages, users, groups & attributes, policies, authentication stages & MFA, OAuth2/OIDC provider setup, property mappings & claims, integrating applications with OIDC, proxy provider fundamentals, Traefik integration, NGINX & Caddy integration, SAML provider configuration, SAML service provider integrations, OAuth sources for social login, LDAP & Active Directory sources, LDAP outpost provider, reputation & threat detection, branding & theming, API & automation, events & auditing, high availability, Kubernetes deployment, monitoring & performance, backup & disaster recovery, security hardening, troubleshooting & debugging, migrating from another identity provider, and a production checklist & best practices across 31 episodes in total.
Laying the foundations before you touch Authentik: the core skills of authentication versus authorization, OAuth2, OIDC, SAML, JWT, Docker, YAML, and networking, the required software and minimum hardware specifications, and the lab topology used throughout this entire series.

Exploring the problem of many applications with many separate login systems, the identity provider landscape from Okta to Keycloak, the birth of Authentik by the goauthentik project, and an honest comparison with Keycloak, Authelia, and Zitadel.

Dissecting Authentik's architecture: server, worker, PostgreSQL, Redis, and outposts; understanding core concepts such as tenant, application, provider, flow, stage, and policy; following an end-to-end authentication flow from browser to token; and a glossary of key terms.

Installing Authentik with Docker Compose: assembling the server, worker, PostgreSQL, Redis, and proxy stack; managing secrets and environment variables through the .env file; bootstrapping the akadmin admin; verifying the first UI; and a safe upgrade path.

Understanding the heart of Authentik: the flow concept with designations and stage bindings, the stage types from identification to consent, analyzing the built-in flows, creating a custom flow, and debugging with the flow inspector.

Managing identity in Authentik: creating users and groups, understanding user properties and active/inactive status, service accounts and impersonation, custom attributes used by policies, user sources from LDAP to social login, and bulk import via the API.

Understanding the Authentik policy engine: policy types, Python-based expression policies with user and request context, binding policies to flows, stages, and applications, Any versus All evaluation logic, and examples of access policies based on group, working hours, and IP address.

Breaking open Authentik's authentication flow: the identification stage for finding a user, the password stage for validating credentials, the authenticator validate stage for MFA verification, the range of TOTP, WebAuthn, and static OTP methods, and the device enrollment and recovery flows.

Configuring the OAuth2 and OIDC provider in Authentik: confidential and public client types, redirect URIs, signing keys, scopes, and sub-modes, plus how to test the authorization code flow end-to-end with token and userinfo endpoints.

Understanding property mappings in Authentik: the Python expressions that determine OIDC claim contents, built-in mappings for profile, email, and groups, custom scope mappings, and how to debug mappings with the tester and token preview.
