Authentik SSO Overseer
reddit / selfhosted

----------------------------------------------------------------------
fabio_teixei · 2023-12-18 15:42

I found this 2 years old thread about configuring Authentik to do SSO
on Overseerr:  [Authentik + Plex SSO and Overseer/Tautulli :
r/selfhosted (reddit.com)](https://www.reddit.com/r/selfhosted/comment
s/sp942y/authentik_plex_sso_and_overseertautulli/)


I tried the steps on the thread but i was not able to get it working.
So i want to know if anyone can help me with this.


A litle bit of context. I want to create an app dashboard for all my
family members. So they can access all my services like Plex,
Overseerr, Immitch and etc. Rigth now Authentik is my IDP, maybe i
will migrate to Keycloak if i'm able to setup the same kind of
integrations that we have on Authentik, but for now i will go with
Authentik.


So, i have an classic infra behind all my services with an Active
Directory running on my network and syncing to Azure to access M365
apps (Teams, Outlook, Excel, Word, Onedrive and etc.). Because i have
Active Directory, M365 and Azure i will use Azure AD (Microsoft Entra
ID) users as my users to log in via SSO because is straight forward
for my users, they all have the computers Domain Joined as theirs
phones as well, so when they will log in to Authentik the logon
process will be automatic, no need to remember many different
Usernames/Emails and passwords.

That brings us back to my question about Authentik and Overseerr. My
users will authenticate in authentik with theirs Azure AD user, it's
already working for all my apps that dont use authentication or that
have basic http auth like sonarr, radarr, Homarr and etc. But
overseerr demands plex authentication, my users dont have plex
accounts and i dont want to force them to create one, so i want them
to authenticate via theirs Azure AD account and make authentik proxy
the autentication with an "generic" plex acount that i created for all
my users. So they can log in to Overseerr on an straigth forward
manner.

How can we configure authentik to enable SSO with Overseerr?  It's
possible to auth everyone with the same plex account? Or the only way
is to enable plex as an auth source and all my users need to login to
authentik with theirs plex accounts?

​