Using Plex oAuth to create and login with plex users from my invited friends etc

[soft atlas]

Hi, I've been trying to set this up for many hours at this point and I'm starting to doubt if I can even get it done. I'm trying to set up so that when an invited plex user to my server loggs in through plex oAuth into Authentik it automatically creates a user with the group "server-users". This works as intended. However, if I logg off from the user I can never logg back in again. If I logg in I got a 503 error in the console and I'm just stuck on the login screen. Does anyone have some tips for me?

[rough bane]

Did you follow this? Or go another route?

https://discord.com/channels/809154715984199690/1139384435180056587

[soft atlas]

I just now started reading it, I did go another route however but I'll finish reading this before going further 🙂

[rough bane]

I know there are other ways of doing it but other people would have to help with that.

[soft atlas]

Hmm, we did mostly the same setup

I didn't add the policy however

It seems like that fixed it though

Thanks for the help 🙂

@rough bane Did you ever figure out how to activate 2fa for the plex users inside authentik?

[rough bane]

2fa using authentik? Or Plex?

If you want the user to use Authentik, I found that you can set the user to Internal and then they have access to the Authentik dashboard. You can also set the Plex Flow to automatically create them as Internal users if that is what you want for the user.

But at least for me, I just highly suggesting to my users to set 2fa on their plex account.

[soft atlas]

Yeah, they are already set as internal when they are created. I just hoped for it to be possible to force 2fa directly in authentik even if the user is created from the oath

Doubt my users will activate 2fa otherwise unfortunately.

[rough bane]

I know there is also a way to add that the user set 2fa in the plex flow, but that is not how I have mine set up, im pretty sure someone else has done that but that is out my scope since its not how I intended to use my Authentik instance.

[soft atlas]

I see, I figured I'll use my authentik somewhat as a dashboard.

A landingpage if you will

[rough bane]

You can try messing around with the Plex Enrollment flow and adding in a 2fa setup process

[soft atlas]

Alright, hopefully I don't lock myself out 😄

[rough bane]

There is a way to create a recovery key (found on Authentiks doc page), in case you do, just replace akadmin user with your user if it has changed.

I took that risk at the beginning of using it but I also didn't make it a production thing until I figured out how to use it properly, so when I first started I probably reinstalled this from scratch more than a dozen times. I also only tried out a couple of services at a time or made like a duplicate environment.

[soft atlas]

Gotcha, I'll leave this for tonight though. It's getting very late. Have a good night 🙂