Changes
Disabled users are now blocked from SSO login
Previously IsDisabled=false was set on every successful OIDC login, overriding any manual disable set by a Jellyfin admin. Now the flag is respected — disabled users get a clear error and cannot log in via SSO. To lock someone out, disable them in Jellyfin (or remove them from the IdP).
IsDisabled preserved in RBAC policy updates
The UpdatePolicyAsync call now reads the current disabled flag from the user rather than always sending false.
Opt-in display name sync (General settings tab)
New Sync display name from OIDC token on login checkbox (default off). When enabled, the Jellyfin account name is updated on every login to match the display name claim from the IdP. Note: in Jellyfin, username = display name — this renames the account. Display names must be unique across users.
Full Changelog: v1.0.2.2...v1.0.2.3