---
status: accepted
---

# Fork Dispatcharr to add native OIDC (Authentik) for the web UI

Dispatcharr has no SSO (open upstream request: issue #806). A reverse-proxy
forward-auth setup would work without code changes, but we decided to fork
Dispatcharr (be-nj) and build real OIDC login (Authentik as IdP, auto user
creation, group mapping) into its Django backend and React UI, offered
upstream as a PR. Rationale: proxy-auth needs bypass rules for every client
endpoint (Xtream/M3U/HDHomeRun) and gives no in-app user identity. The TV app
is unaffected either way — it authenticates with Xtream credentials.