From 51a61aaf5a3f8d53552650e72dd87cd0f6bec2e5 Mon Sep 17 00:00:00 2001
From: Trevor Mears <trevor.mears@gmail.com>
Date: Sat, 17 Jan 2026 22:55:34 -0800
Subject: [PATCH] chore: update readme

---
 README.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/README.md b/README.md
index 8b2924e..25f04b2 100644
--- a/README.md
+++ b/README.md
@@ -117,6 +117,19 @@ Ensure you have the [NVIDIA Container Toolkit](https://docs.nvidia.com/datacente
 **Verify:**
 After restarting the container, go to **Settings -> Transcoding**. The **Hardware Detection** status should list your GPU (e.g., "NVIDIA GPU Detected" or "VAAPI Available").
 
+### SSO / OIDC Setup
+
+Enable Single Sign-On (SSO) with your preferred OIDC provider (Authentik, Keycloak, etc.) by configuring these variables in your `.env` file or Docker environment:
+
+```env
+OIDC_ISSUER_URL=https://your-idp.com/application/o/nodecast/
+OIDC_CLIENT_ID=your_client_id
+OIDC_CLIENT_SECRET=your_client_secret
+OIDC_CALLBACK_URL=http://localhost:3000/api/auth/oidc/callback # Adjust for your domain
+```
+
+**Note:** New users signing in via SSO are automatically assigned the **Viewer** role. You must manually promote them to Admin if desired.
+
 ### Usage
 
 1.  Go to **Settings** -> **Content Sources**.