Add SSO login button to Jellyfin login page

Deploy branding.xml with a "Sign in with Authentik" button in the
login disclaimer. Local password login remains available.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ansible/roles/jellyfin/tasks/main.yml

@@ -61,3 +61,17 @@
     dest: "{{ jellyfin_plugins_dir }}/configurations/SSO-Auth.xml"
     mode: '0644'
   notify: Reload jellyfin
+
+# Branding — add SSO login button to login page
+- name: Ensure Jellyfin config directory exists
+  ansible.builtin.file:
+    path: "{{ jellyfin_data_dir }}/config"
+    state: directory
+    mode: '0755'
+
+- name: Deploy Jellyfin branding configuration
+  ansible.builtin.template:
+    src: branding.xml.j2
+    dest: "{{ jellyfin_data_dir }}/config/branding.xml"
+    mode: '0644'
+  notify: Reload jellyfin

ansible/roles/jellyfin/templates/branding.xml.j2

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- {{ ansible_managed }} -->
+<BrandingOptions xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <LoginDisclaimer>&lt;form action="/sso/OID/start/{{ jellyfin_sso_provider_name }}"&gt;&lt;button class="raised block emby-button button-submit" type="submit" style="margin:2em 0"&gt;Sign in with Authentik&lt;/button&gt;&lt;/form&gt;</LoginDisclaimer>
+  <CustomCss />
+  <SplashscreenEnabled>false</SplashscreenEnabled>
+</BrandingOptions>