-
-
Notifications
You must be signed in to change notification settings - Fork 0
Installation
This is an independent plugin repository. Jellyfin's built-in catalog lists only plugins in the
jellyfinGitHub org, and there is currently no official SSO plugin there (the LDAP plugin is the only official auth plugin). You install this plugin by adding its repository below, after which it appears in your in-app catalog. See the Roadmap for the distribution stance.
-
In Jellyfin, go to Dashboard → Plugins → Repositories and add the repository URL for the channel you want. One URL serves both Jellyfin generations — your server installs the matching build automatically. Add one of these:
Channel Repository URL stable https://raw.githubusercontent.com/iderex/jellyfin-plugin-sso/manifest-release/manifest.jsonbeta https://raw.githubusercontent.com/iderex/jellyfin-plugin-sso/manifest-beta/manifest.json-
stable ships tagged releases only. beta is published by a daily scheduler
(04:00 UTC), and only when
mainhas advanced since the last beta — so betas trackmainclosely and may break; use them for testing, not production. See the Releasing page for the channel/trigger detail. - Each manifest lists builds for both Jellyfin 10.11 (.NET 9) and Jellyfin 12.0 (.NET 10). Jellyfin filters by the plugin's target ABI, so your server is only ever offered the build that runs on it — you don't pick the generation, it does. Jellyfin 12.0 support is currently beta only (the stable 12.0 build lands at a 12.0 stable release).
-
stable ships tagged releases only. beta is published by a daily scheduler
(04:00 UTC), and only when
-
Go to Dashboard → Plugins → Catalog, find SSO Authentication, and install it.
-
Restart Jellyfin to load the plugin.
The plugin GUID is unchanged from the original 9p4 plugin, so a new version installs over an
existing one in place and keeps your existing configuration.
Requirements: the .NET 9 SDK (or the .NET 10 SDK for the Jellyfin 12.0 line). The plugin
multi-targets net9.0/net10.0 for Jellyfin 10.11 and Jellyfin 12.0.
git clone https://github.com/iderex/jellyfin-plugin-sso
cd jellyfin-plugin-sso
dotnet publish -c Release
Copy the full publish output (SSO-Auth.dll and every dependency DLL beside it — the
OpenID client, the embedded library, and the other referenced assemblies) into your
Jellyfin plugins directory:
<jellyfin-config>/plugins/sso/
Restart Jellyfin. Copying only a subset of the DLLs can leave Jellyfin unable to load the plugin. JPRM packages the correct set for you if you prefer a single artifact.
Open Dashboard → Plugins → SSO-Auth and add your provider(s); see Provider Setup for per-identity-provider setup.
Repository · Issues · Releases · Security policy — report vulnerabilities privately, never in a public issue. Pages describe what is implemented today; if the wiki disagrees with the code, the code wins.
Getting started
- Installation
- Provider Setup
- Hardening & Options Reference
- Migrating from 9p4
- Troubleshooting
- Rollback
How it works
Security
- Security Model
- Security Conformance (ASVS / RFC 9700)
- Threat Model
- SSO-Only Login — design record
- Single Logout — design record
Standards & process (internal / maintainer)