# Plex SSO

Plex SSO adds **Sign in with Plex** to the CrossWatch login page.

It does **not** replace the normal CrossWatch admin login.

You still keep your local username and password as the fallback and recovery path.

{% hint style="info" %}
Plex SSO is separate from [Auth: Plex](/crosswatch/providers/authentication/auth-media-servers/auth-plex.md).

Linking Plex for UI sign-in does not change your Plex sync profile.
{% endhint %}

### What Plex SSO does

* Shows a **Sign in with Plex** button on the login page
* Lets you sign into the CrossWatch web app with one linked Plex account
* Creates a normal CrossWatch session after Plex verifies your identity
* Uses the same session, logout, and remember-me behavior as local login

### What Plex SSO does not do

* It does not replace local admin credentials
* It does not let any Plex account sign in
* It does not configure Plex for syncing
* It does not change Plex Media Server authentication used elsewhere in CrossWatch

### Requirements

Before you enable Plex SSO:

* UI login must already be enabled
* You must already have a local CrossWatch admin account
* You must be able to sign in with that local account first
* The Plex account you want to use must be linked from the Security section

{% hint style="warning" %}
Keep your local CrossWatch admin login working.

If Plex is unavailable, use the local account to sign in.
{% endhint %}

### Enable Plex SSO

1. Sign into CrossWatch with your local admin username and password.
2. Open **Settings**.
3. Go to **UI Settings**.
4. Open **Security**.
5. In **Plex sign-in**, click **Link Plex account**.
6. Complete the Plex approval flow.
7. Save if the UI asks you to save changes.

After linking succeeds, the login page shows **Sign in with Plex**.

### Sign in with Plex

1. Open the CrossWatch login page.
2. Click **Sign in with Plex**.
3. Approve CrossWatch in the Plex window.
4. Return to CrossWatch.
5. CrossWatch signs you in and creates a normal local session.

If you are already signed into Plex in that browser, Plex may skip most of the prompt.

### Session behavior

Plex SSO uses the same CrossWatch session system as local login.

That means:

* **Remember me** keeps you signed in for the configured session duration
* Leaving it unchecked creates a browser-only session
* **Log out** removes the CrossWatch session the same way as local login

### Disable Plex SSO

1. Sign into CrossWatch with a local admin account.
2. Open **Settings**.
3. Go to **UI Settings**.
4. Open **Security**.
5. In **Plex sign-in**, click **Unlink**.

This removes the linked Plex account and hides **Sign in with Plex** from the login page.

### Troubleshooting quick checks

* **Button missing**: make sure UI login is enabled and Plex is linked
* **Plex window did not open**: disable popup blockers for CrossWatch
* **Plex is down**: sign in with your local CrossWatch admin account instead
* **Wrong Plex account**: unlink it, then link the correct account


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://wiki.crosswatch.app/crosswatch/navigation/ui-settings/security/plex-sso.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.