diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 4ac28e8ebe..40448047a4 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -10,6 +10,21 @@ aliases:
     - sttts
     - tallclair
 
+  sig-auth-authenticators-approvers:
+    - deads2k
+    - liggitt
+    - mikedanese
+  sig-auth-authenticators-reviewers:
+    - deads2k
+    - enj
+    - jianhuiz
+    - lavalamp
+    - liggitt
+    - mbohlool
+    - mikedanese
+    - sttts
+    - wojtek-t
+
   sig-storage-reviewers:
     - saad-ali
     - childsb
diff --git a/pkg/apis/authentication/OWNERS b/pkg/apis/authentication/OWNERS
index 2bdfd0ce5b..3b7ea1b131 100755
--- a/pkg/apis/authentication/OWNERS
+++ b/pkg/apis/authentication/OWNERS
@@ -1,9 +1,7 @@
+# approval on api packages bubbles to api-approvers
 reviewers:
-- liggitt
-- lavalamp
-- wojtek-t
-- deads2k
-- sttts
-- mbohlool
-- jianhuiz
-- enj
+- sig-auth-authenticators-approvers
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/pkg/kubeapiserver/authenticator/OWNERS b/pkg/kubeapiserver/authenticator/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/pkg/kubeapiserver/authenticator/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/pkg/registry/authentication/OWNERS b/pkg/registry/authentication/OWNERS
index 81919881ff..c607d2aa8c 100755
--- a/pkg/registry/authentication/OWNERS
+++ b/pkg/registry/authentication/OWNERS
@@ -1,2 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
 reviewers:
-- deads2k
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/plugin/pkg/auth/authenticator/OWNERS b/plugin/pkg/auth/authenticator/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/plugin/pkg/auth/authenticator/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/api/authentication/OWNERS b/staging/src/k8s.io/api/authentication/OWNERS
index 2bdfd0ce5b..1b888f0b80 100755
--- a/staging/src/k8s.io/api/authentication/OWNERS
+++ b/staging/src/k8s.io/api/authentication/OWNERS
@@ -1,9 +1,6 @@
 reviewers:
-- liggitt
-- lavalamp
-- wojtek-t
-- deads2k
-- sttts
-- mbohlool
-- jianhuiz
-- enj
+- sig-auth-authenticators-approvers
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/apiserver/pkg/authentication/OWNERS b/staging/src/k8s.io/apiserver/pkg/authentication/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/staging/src/k8s.io/apiserver/pkg/authentication/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/OWNERS b/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/client-go/kubernetes/typed/authentication/OWNERS b/staging/src/k8s.io/client-go/kubernetes/typed/authentication/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/staging/src/k8s.io/client-go/kubernetes/typed/authentication/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/client-go/listers/authentication/OWNERS b/staging/src/k8s.io/client-go/listers/authentication/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/staging/src/k8s.io/client-go/listers/authentication/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/client-go/pkg/apis/clientauthentication/OWNERS b/staging/src/k8s.io/client-go/pkg/apis/clientauthentication/OWNERS
new file mode 100644
index 0000000000..3b7ea1b131
--- /dev/null
+++ b/staging/src/k8s.io/client-go/pkg/apis/clientauthentication/OWNERS
@@ -0,0 +1,7 @@
+# approval on api packages bubbles to api-approvers
+reviewers:
+- sig-auth-authenticators-approvers
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/client-go/plugin/pkg/client/auth/OWNERS b/staging/src/k8s.io/client-go/plugin/pkg/client/auth/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/staging/src/k8s.io/client-go/plugin/pkg/client/auth/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/staging/src/k8s.io/client-go/tools/auth/OWNERS b/staging/src/k8s.io/client-go/tools/auth/OWNERS
new file mode 100644
index 0000000000..c607d2aa8c
--- /dev/null
+++ b/staging/src/k8s.io/client-go/tools/auth/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+