From a82c705bf63f5a12ff40876e99de0d551e4f2c89 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Sat, 21 Feb 2026 20:08:57 -0800
Subject: [PATCH] Add SSO login button to Jellyfin login page

Deploy branding.xml with a "Sign in with Authentik" button in the
login disclaimer. Local password login remains available.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 ansible/roles/jellyfin/tasks/main.yml            | 14 ++++++++++++++
 ansible/roles/jellyfin/templates/branding.xml.j2 |  7 +++++++
 2 files changed, 21 insertions(+)
 create mode 100644 ansible/roles/jellyfin/templates/branding.xml.j2

diff --git a/ansible/roles/jellyfin/tasks/main.yml b/ansible/roles/jellyfin/tasks/main.yml
index bf213ee..a588a72 100644
--- a/ansible/roles/jellyfin/tasks/main.yml
+++ b/ansible/roles/jellyfin/tasks/main.yml
@@ -61,3 +61,17 @@
     dest: "{{ jellyfin_plugins_dir }}/configurations/SSO-Auth.xml"
     mode: '0644'
   notify: Reload jellyfin
+
+# Branding — add SSO login button to login page
+- name: Ensure Jellyfin config directory exists
+  ansible.builtin.file:
+    path: "{{ jellyfin_data_dir }}/config"
+    state: directory
+    mode: '0755'
+
+- name: Deploy Jellyfin branding configuration
+  ansible.builtin.template:
+    src: branding.xml.j2
+    dest: "{{ jellyfin_data_dir }}/config/branding.xml"
+    mode: '0644'
+  notify: Reload jellyfin
diff --git a/ansible/roles/jellyfin/templates/branding.xml.j2 b/ansible/roles/jellyfin/templates/branding.xml.j2
new file mode 100644
index 0000000..26aa6cb
--- /dev/null
+++ b/ansible/roles/jellyfin/templates/branding.xml.j2
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- {{ ansible_managed }} -->
+<BrandingOptions xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <LoginDisclaimer>&lt;form action="/sso/OID/start/{{ jellyfin_sso_provider_name }}"&gt;&lt;button class="raised block emby-button button-submit" type="submit" style="margin:2em 0"&gt;Sign in with Authentik&lt;/button&gt;&lt;/form&gt;</LoginDisclaimer>
+  <CustomCss />
+  <SplashscreenEnabled>false</SplashscreenEnabled>
+</BrandingOptions>