homelab/compose/media/frontend/jellyfin/OIDC-SETUP.md
Eduardo Figueroa 3bf1575ca8 chore: General catchup - service updates and cleanup
Updated service configurations, added new services, removed deprecated
ones, and improved gitignore patterns for better repository hygiene.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-15 05:23:02 +00:00

1.3 KiB

Jellyfin OIDC Setup with Authelia

Jellyfin requires the SSO Plugin to be installed for OIDC authentication.

Installation Steps

  1. Install the SSO Plugin:

    • Open Jellyfin: https://flix.fig.systems
    • Navigate to: Dashboard → Plugins → Catalog
    • Find and install: "SSO-Authentication" plugin
    • Restart Jellyfin
  2. Configure the Plugin:

    • Go to: Dashboard → Plugins → SSO-Authentication

    • Add New Provider with these settings:

      • Provider Name: authelia
      • OID Endpoint: https://auth.fig.systems
      • OID Client ID: jellyfin
      • OID Secret: eOlV1CLiYpCtE9xKaI3FbsXmMBuHc5Mp
      • Enabled: ✓
      • Enable Authorization by Plugin: ✓
      • Enable All Folders: ✓
      • Enable Folder Access (Optional): (configure as needed)
      • Administrator Roles: admin (if using LDAP groups)
      • Default User: (leave empty for auto-registration)
  3. Test Login:

    • Log out of Jellyfin
    • You should now see a "Sign in with authelia" button
    • Click it to authenticate via Authelia

Notes

  • Users will be auto-created in Jellyfin when they first login via OIDC
  • You can still use local Jellyfin accounts alongside OIDC
  • The redirect URI configured in Authelia is: https://flix.fig.systems/sso/OID/redirect/authelia