Emby had no single sign-on, so I built the plugin
Every service in my homelab signs in through Authentik, except Emby, which only knows passwords. So I wrote a plugin that adds OpenID Connect to Emby: browser sign-in, a PIN for the TV, group gating, and a few surprises along the way.