Admin privileges revoked upon OIDC login despite correct role mapping in plugin settings

[Domoel]

Description:
I am currently experiencing an issue where the OIDC plugin revokes my administrator privileges after a successful login via my Identity Provider (Pocket-ID).

Even though I have configured the correct roles in the plugin settings (matching the groups/roles defined in Pocket-ID), Jellyfin treats my account as a standard user upon login. This behavior is quite critical, as it nearly locked me out of the administrative dashboard entirely.

Steps to reproduce:

• Configure the OIDC plugin to map roles from the Identity Provider.
• Ensure the admin roles (e.g., "admins") are correctly entered in the plugin's "Admin Roles" field.
• Log in via the OIDC provider.
• Observe that Jellyfin strips the administrative flags from the existing local account.

Expected behavior:
The plugin should recognize the user's administrative status based on the claims provided by the Identity Provider and maintain the local admin privileges without overriding/revoking them.

Environment:

• Jellyfin Server Version: [Hier deine Version einfügen, z.B. 10.11.8]
• OIDC Plugin Version: 4.0.0.4
• Identity Provider: Pocket-ID
• Environment: Docker (linuxserver/jellyfin)

Additional context:
I have verified that the groups/roles are being sent correctly by the IDP. I was able to temporarily restore access by manually editing the plugin configuration or the internal database, but the issue persists on every login. Is this a known issue, or is there a specific configuration I might be missing to ensure that the admin role is correctly preserved/applied?

PS: After the initial setup, fallabck login with user/password does not work anylonger. Is this expected behavior. Jellyfin states only that the password is wrong. Why is the plugin overriding my password anyways?

Any guidance or troubleshooting steps would be highly appreciated.

[pojlFDlxCOvZ4Kg8y1l4]

I would like to add that I also am experiencing this.
However, only after upgrading from Jellyfin 10.10.7 to 10.11.8. I have made a new Jellyfin LXC on Proxmox and the old version is on Docker.
I have copy pasted the OIDC plugin config from the old to the new jellyfin server.
After logging in I sometimes get assigned the user role.
What helps here is to sign out and sign back in again, I regain admin privileges that way.
After a while OIDC login fails though. This also seems to be a problem with Jellyfin 10.11.8? A server reboot, as in, jellyfin admin interface reboot button, or the whole LXC, fixes this.

For OIDC I am using Authentik. I have not changed any settings there.

I am not on my PC right now, but I could provide additional logs if necessary later.

[drashna]

I've noticed similar. Where if the jellyfin instance/server restarts, it drops the admin access, and I have to log out and log back in to regain access to anything require admin access.

• Jellyfin Server Version: 10.11.8
• OIDC Plugin Version: 4.0.0.4
• Identity Provider: Authentik
• Environment: Docker (linuxserver/jellyfin)