-
-
Notifications
You must be signed in to change notification settings - Fork 1
Installation
This is an independent plugin repository. Jellyfin's built-in catalog lists only plugins in the
jellyfinGitHub org, and there is currently no official SSO plugin there (the LDAP plugin is the only official auth plugin). You install this plugin by adding its repository below, after which it appears in your in-app catalog.
-
In Jellyfin, go to Dashboard → Plugins → Repositories and add this repository URL. One URL serves both Jellyfin generations - your server installs the matching build automatically:
Channel Repository URL beta https://raw.githubusercontent.com/iderex/jellyfin-plugin-sso/manifest-beta/manifest.json- This project is beta software - the beta channel is the only release channel for
now (#954). Betas are published by a daily scheduler (04:00 UTC), and only when
mainhas advanced since the last beta. A stable channel opens at the project's first stable release; the former stable manifest has been emptied so it cannot offer outdated builds - if you still have that URL configured, switch to the beta URL above to keep receiving updates. See the Releasing page for the channel/trigger detail. - The manifest lists builds for both Jellyfin 10.11 (.NET 9) and Jellyfin 12.0 (.NET 10). Jellyfin filters by the plugin's target ABI, so your server is only ever offered the build that runs on it - you don't pick the generation, it does. The JF12/5.0 line is not yet validated against a live 12.0 server (none exists at GA quality to test against).
- This project is beta software - the beta channel is the only release channel for
now (#954). Betas are published by a daily scheduler (04:00 UTC), and only when
-
Go to Dashboard → Plugins → Catalog, find Community SSO for Jellyfin, and install it.
-
Restart Jellyfin to load the plugin.
The plugin GUID is unchanged from the original 9p4 plugin, so a new version installs over an
existing one in place and keeps your existing configuration.
Requirements: the .NET 9 SDK (or the .NET 10 SDK for the Jellyfin 12.0 line). The plugin
multi-targets net9.0/net10.0 for Jellyfin 10.11 and Jellyfin 12.0.
git clone https://github.com/iderex/jellyfin-plugin-sso
cd jellyfin-plugin-sso
dotnet publish -c Release
Copy the full publish output (SSO-Auth.dll and every dependency DLL beside it - the
OpenID client, the embedded library, and the other referenced assemblies) into your
Jellyfin plugins directory:
<jellyfin-config>/plugins/sso/
Restart Jellyfin. Copying only a subset of the DLLs can leave Jellyfin unable to load the plugin. JPRM packages the correct set for you if you prefer a single artifact.
Open Dashboard → Plugins → SSO-Auth and add your provider(s); see Provider Setup for per-identity-provider setup.
Repository · Issues · Releases · Security policy - report vulnerabilities privately, never in a public issue. Pages describe what is implemented today; if the wiki disagrees with the code, the code wins.
Getting started
- Installation
- Provider Setup
- Hardening & Options Reference
- Migrating from 9p4
- Troubleshooting
- Rollback
How it works
Security
- Security Model
- Security Conformance (ASVS / RFC 9700)
- SSO-Only Login - design record
- Single Logout - design record
Standards & process (internal / maintainer)