SSO OpenID

[Streamer441 0]

+1 from another person

I'm a beginner at this kind of workflow but I understood enough from earlier conversations to understand how hard it is to implement, specifically for apps. But I would still love to have and would be more than willing to pay for a plugin that does it. Security is always my biggest focus and concern with my home server.

[TZTZoro 26]

for everyone commenting +1, please do not forget to like the first post so it is visible

 

[TZTZoro 26]

could it work if you guys implemented a system like immich has or gitea/forgejo? the way you add oauth sign up/sign in to it? 

i understand it would require a redesign of some systems and all the apps need to be updated, but i think that those 2 softwares have a pretty need solution that you dont need a config for every oauth provider, like google, twitch, steam, etc and they simply do not support all of them because they do not follow the standards

[amanger 5]

Sounds like the biggest blocker for SSO/OAuth is that it needs to work on so many systems. For systems that don't have password managers/passkeys, etc., why not display a QR code for mobile sign in? 

[xyxxyxxy 0]

For the web client I implemented a pragmatic solution using oauth2-proxy:
https://github.com/xyxxyxxy/emby-web-oidc-bridge

oauth2-proxy handles the OIDC interaction and provides a session. The emby-web-oidc-bridge uses that session to provision new users via the Emby API and logs them in using injected JavaScript on the index.html. For the user this looks and feels exactly like OIDC login on the web. No modification to the Emby server/client needed.

For non-web users there is a /account page showing the generated emby username/password.