howto/ldap.md

@@ -2157,6 +2157,7 @@ using the [django-auth-ldap][] authentication plugin.
  * [FreeIPA][]: similar, except built on top of 389 DS, the Fedora
    LDAP thing
  * [Authelia][]: single sign-on, 2fa, OIDC connect
+ * [Authentik][]: single sign-on, 2fa, OIDC, SAML, LDAP, proxy, metrics
 
 A solution could be to deploy Keycloak or some SSO server on *top* of
 the current LDAP server to provide other applications with a single
@@ -2164,6 +2165,7 @@ authentication layer. Then the underlying backend could be changed to
 swap ud-ldap out if we need to, replacing bits of it as we go.
 
 [Authelia]: https://www.authelia.com/
+[Authentik]: https://goauthentik.io/
 
 ### Others