name: "SSO Authentication"
guid: "505ce9d1-d916-42fa-86ca-673ef241d7df"
imageUrl: "https://raw.githubusercontent.com/9p4/jellyfin-plugin-sso/main/img/logo.png"
version: "4.0.0.3"
targetAbi: "10.11.0.0"
framework: "net9.0"
owner: "9p4"
overview: "Authenticate users against an SSO provider."
description: |
  This plugin allows users to sign in through an SSO provider (such as Google, Facebook, or your own provider). This enables one-click signin.
  Review documentation at https://github.com/9p4/jellyfin-plugin-sso
category: "Authentication"
artifacts:
  - "SSO-Auth.dll"
  - "Duende.IdentityModel.OidcClient.dll"
  - "Duende.IdentityModel.dll"
changelog: |
  4.0.0.0: Jellyfin 10.11
  3.5.3.0: Allow for OID-provided avatars, various bugfixes and workarounds
  3.5.2.4: Updates for Jellyfin 10.9
  3.5.2.3: Improve OpenID discovery policy security rules, fix iOS login bugs related to cache
  3.5.2.2: Fix linking page when using new paths
  3.5.2.1: Hotfix for SAML null checks
  3.5.2.0: Allow overriding the scheme used for generating URLs.
  3.5.1.1: Change iframe URL to point to the web UI instead of the root 
  3.5.1.0: Improved paths! No more obscure "p" versus "r" URLs! Improve final redirect for automatic authentication. Add more configuration options for OpenID discovery.
  3.5.0.0: Add support for Live TV authentication. Fix various null pointer bugs.
  3.4.0.0: Add user self-service for linking existing accounts + managing existing links. Allow IDP accounts to be linked to jellyfin accounts with a different display-name.
  3.3.0.0: Add fallback authentication provider. Add OpenID admin page.
  3.2.0.0: Switch to hashmaps (BREAKING) for performance. Dump expected permissions in logs on error.
  3.1.0.1: Fix redirect bug in WebResponse (#7)
  3.1.0.0: Simplify auth flow so loading the web UI is not required
  3.0.0.0: Add more RBAC features and option to unregister user from SSO
  2.0.1.0: Fix improper artifact loading
  2.0.0.0: Add RBAC and Google support
  1.0.0.0: Initial Release