diff --git a/nodes/heimdall/wizarr/compose.yaml b/nodes/heimdall/wizarr/compose.yaml
index 00be102..88cfbc0 100644
--- a/nodes/heimdall/wizarr/compose.yaml
+++ b/nodes/heimdall/wizarr/compose.yaml
@@ -19,6 +19,18 @@ services:
       - "traefik.http.routers.wizarr.service=wizarr"
       - "traefik.http.services.wizarr.loadbalancer.server.port=5690"
 
+  authentik_ldap:
+      image: ghcr.io/goauthentik/ldap:2026.5.3
+      networks:
+        - proxy-net
+      ports:
+          - 389:3389
+          - 636:6636
+      environment:
+          AUTHENTIK_HOST: https://sso.castaldifamily.com
+          AUTHENTIK_INSECURE: "false"
+          AUTHENTIK_TOKEN: ${AUTHENTIK_TOKEN}
+
 networks:
   proxy-net:
     name: proxy-net