# Jellyfin OIDC Setup with Authelia

Jellyfin requires the **SSO Plugin** to be installed for OIDC authentication.

## Installation Steps

1. **Install the SSO Plugin**:
   - Open Jellyfin: https://flix.fig.systems
   - Navigate to: Dashboard → Plugins → Catalog
   - Find and install: **"SSO-Authentication"** plugin
   - Restart Jellyfin

2. **Configure the Plugin**:
   - Go to: Dashboard → Plugins → SSO-Authentication

   - **Add New Provider** with these settings:
     - **Provider Name**: `authelia`
     - **OID Endpoint**: `https://auth.fig.systems`
     - **OID Client ID**: `jellyfin`
     - **OID Secret**: `eOlV1CLiYpCtE9xKaI3FbsXmMBuHc5Mp`
     - **Enabled**: ✓
     - **Enable Authorization by Plugin**: ✓
     - **Enable All Folders**: ✓
     - **Enable Folder Access (Optional)**: (configure as needed)
     - **Administrator Roles**: `admin` (if using LDAP groups)
     - **Default User**: (leave empty for auto-registration)

3. **Test Login**:
   - Log out of Jellyfin
   - You should now see a "Sign in with authelia" button
   - Click it to authenticate via Authelia

## Notes

- Users will be auto-created in Jellyfin when they first login via OIDC
- You can still use local Jellyfin accounts alongside OIDC
- The redirect URI configured in Authelia is: `https://flix.fig.systems/sso/OID/redirect/authelia`