Hi @flyingfish,
Why do you have an authentik provider and app? To me, it seems not necessary.
And yes, if you are using the "Single Provider" proxy provider, you have to create a router to redirect /outpost.goauthentik to your outpost (which is authentik if you are using the embedded one).
For "domain level" proxy provider, it is not necessary as it redirects to auth.domain.com in all cases.
Maxence