Add Authentik SSO integration for Jellyfin #239

Merged
eblume merged 1 commit from feature/jellyfin-authentik-sso into main 2026-02-21 20:05:45 -08:00

1 commit

Author SHA1 Message Date
625af2a1ec Add Authentik SSO integration for Jellyfin
Wire up OIDC authentication via jellyfin-plugin-sso so all Authentik
users can access Jellyfin, with admins group mapped to Jellyfin admin.

- Authentik blueprint: OAuth2 provider + application (no policy binding)
- ExternalSecret + worker env var for client secret
- Ansible: fetch client secret, install SSO-Auth plugin, deploy config
- Local login left enabled (no branding override)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 19:35:43 -08:00