i ended up doing both. ldap for the apps. oidc for web based users and the apps that support the quick connect feature. the local user account system works fine too, and ldap would be enough. i just wanted an excuse to play round with sso systems, and it was fun figuring out how to connect all my servers.
authenik has a good docs site for both it’s docker container and connecting it to jellyfin. Authelia looked interesting too.
it’s just what i’m comfortable with. started playing with linux servers before docker existed. i’ve got frigate and authentik running in docker, but if i have the option to run something outside docker i still prefer that.
https://github.com/intro-skipper/intro-skipper
*edit it’s such a common complain this got posted twice at the same time :)
plex is still definitely easier to get started on. i don’t begrudge anyone still going that route, i had a lifetime plexpass the last 8yrs i think. jellyfin is a great option if you either already know how to set things up and want full control. Or you’re looking for an opportunity to learn more about reverse proxy, dns and authentication/access systems. plex is still i nice gateway drug.
that’s about where i was at for a long while. manet finally replaced my apple carplay functionality from plexamp and plex lost it’s last advantage for me. i definitely got my moneys worth from that lifetime plexpass though.
swiftfin has reach what i’d call stable on apple tv. its a little janky still with homepods used as speakers. i had to switch the nativeplayer to avoid an audio delay bug. the native player doesn’t support auto play next episode. so far thats the only issue ive had. infuse doesnt have that bug but the issue hasnt annoyed me enough to need infuse. all my other uses are on android tv or webos and have had no complaints. for music, manet has good carplay functionality so its made a nice replacement for plexamp.
yeah it took me about 6 months with jellyfin to feel like i was ready to finally kill plex. the thing that finally did it was getting an email from plex asking if i’d like to check out whats streaming on hbomax.
the ldap auth works great for the apps. apps dont play well with an oidc login process. i ended up using both, oidc for web and ldap fall back for applications. made it easier for my non tech inclined users. most of the current apps also support quick connect, like the plex link process. you auth on a web browser and enter a code into the app. so it’s possible to use only oidc for log in and, i believe it should be possible use css to even hide the user name and password fields.