AuthPortal Hosting Live In 5 Minutes

Deploy AuthPortal hosting and give the people on your Plex, Jellyfin or Emby server one sign-in for your other self-hosted apps, as a self-hosted single sign-on gateway for Plex, Jellyfin and Emby. xCloud runs the pinned AuthPortal v2.0.6 image with a private PostgreSQL 15 database and a persistent OIDC signing key, and publishes the portal over HTTPS on your own domain in minutes. It needs an existing media server.

Deploy your AuthPortal

No terminal
No technical skills needed
No lock-in, cancel anytime

What is AuthPortal?

Self-hosted AuthPortal is a lightweight authentication gateway for Plex, Jellyfin and Emby ecosystems. Upstream says it provides a unified login experience, authenticating users directly against their media-server accounts and issuing signed session cookies, with optional TOTP multi-factor authentication, an admin console and optional LDAP integration. It acts as an OpenID Connect provider for your other apps, and it is licensed GPL-3.0. Upstream warns to use it at your own risk.

AuthPortal has no accounts of its own, so a media server must already exist. On xCloud the template runs the official AuthPortal v2.0.6 image, pinned by digest, with PostgreSQL 15 and a key generator that writes a persistent RSA signing key once. Two named volumes hold the database and the signing key, and the media-server type is chosen at install.

From Sign-Up to a Live Sign-In Portal In Just 3 Easy Steps

An AuthPortal stack normally means an app container, a database, a signing key, generated secrets, a domain and a certificate before the first login. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick AuthPortal from the OneClick catalog. Choose your domain, then pick your media server (Plex, Jellyfin or Emby), enter its URL or the Plex machine identifier, an optional Jellyfin/Emby API key, and the administrator as username:email.
Step 02
We Deploy It For You
One click. We bring up the official AuthPortal v2.0.6 image, pinned by immutable digest, with a private PostgreSQL 15 database kept off the public internet and a small helper that writes a persistent OIDC signing key. The authportal_pgdata and authportal_keys volumes are mounted, the secrets are generated, and the first start takes about a minute.
Step 03
Sign In And Register Your Apps
Open your HTTPS AuthPortal URL and sign in with the administrator's media-server account — there is no separate AuthPortal password. Then open /admin to register OIDC clients and point each app at https://<your domain>/.well-known/openid-configuration.

Everything AuthPortal Does, On Your Own Server

AuthPortal runs in full here: a sign-in portal in front of your media-server accounts, backed by a database and signing key you own.

Media-Server Sign-In
People sign in with the Plex, Jellyfin or Emby account they already have, and AuthPortal keeps no passwords of its own.
OpenID Connect Provider
A first-party OAuth 2.1 / OIDC server with authorization code and PKCE, RS256-signed ID tokens, and discovery, JWKS, token and userinfo endpoints for your other apps.
Multi-Factor Authentication
Optional TOTP-based multi-factor authentication with recovery codes protects sign-ins.
Admin Console
Manage providers, security and MFA settings, OIDC clients, roles and permissions, backups and logs from the browser at /admin.
Optional LDAP Sync
Upstream can export authorized users to LDAP on demand or on an hourly, daily or weekly schedule, configured in the admin console.
Private PostgreSQL Included
PostgreSQL 15 holds users, settings and OIDC clients, reachable only inside the install's private network with no published port.

Everything You Need To Run Your Sign-In Portal 24/7

Managed hosting for AuthPortal, so the parts that keep it online are not your problem.

AuthPortal v2.0.6 deployed instantly
Official image pinned by digest
Database password and secrets generated for you
Persistent OIDC signing key
Free SSL certificate
Server backups and snapshots
Server security updates included
Choose your server region
Unused balance refunded

What You Can Do With AuthPortal

SSO for Plex Jellyfin Emby communities
A media-server owner lets friends and family sign in to other self-hosted apps with the Plex, Jellyfin or Emby account they already have, instead of creating another password for each.
Run an OpenID Connect provider
An admin registers OIDC clients in the admin console and points each app at the discovery document under the portal's domain, so one login covers several applications.
Require multi-factor authentication
A community admin turns on optional TOTP-based multi-factor authentication with recovery codes, so access to the apps behind the portal does not rest on a media-server password alone.
Limit who can sign in
An owner supplies a Jellyfin or Emby API key so AuthPortal can also refuse accounts disabled on the media server, and names one media-server account as the administrator.

AuthPortal Screenshots

AuthPortal after signing in with a media-server account

AuthPortal vs Alternatives

Hosted single sign-on services: Choose AuthPortal instead of hosted single sign-on services when your users already live on a media server. It uses those accounts directly, so you do not manage a second user directory.
Authelia: In an AuthPortal vs Authelia comparison, Authelia is a self-hosted authentication server with its own OneClick page. AuthPortal is narrower: it signs in with Plex, Jellyfin or Emby accounts and has no passwords of its own.
Keycloak: Keycloak is a self-hosted identity platform with its own OneClick page. AuthPortal is the lighter option here, built for media-server communities, with an OIDC provider, an admin console and optional LDAP sync.
Authentik: Authentik is another self-hosted identity provider that people compare. This page makes no feature claim about it; AuthPortal's own pitch is a gateway for Plex, Jellyfin and Emby with TOTP multi-factor authentication.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for AuthPortal hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom if AuthPortal sits alongside other self-hosted apps.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. AuthPortal itself is licensed by its maintainers under GPL-3.0.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy AuthPortal on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Sign-In Portal?

AuthPortal on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Can AuthPortal sign users in with Plex accounts?

Yes. Upstream says AuthPortal supports Plex authentication and Emby or Jellyfin username and password login. For Plex you enter the server machine identifier, and only Plex accounts with access to that server are authorized. Any enabled account on the configured server can sign in.

Can I run AuthPortal with Docker?

Yes, and this template does it for you: the official ghcr.io/modom-ofn/auth-portal v2.0.6 image and PostgreSQL 15, pinned by digest, plus a key generator, behind HTTPS. It is AuthPortal Docker hosting without writing the compose file or generating the signing key yourself.

Docker hosting on xCloud

How much RAM does AuthPortal need on a cloud server?

AuthPortal asks very little: 256 MB of RAM, 1 CPU core and 2 GB of disk. The 6 GB Cloud VPS sold here is far above that for an AuthPortal cloud install, which leaves space for the other self-hosted apps whose sign-in it fronts.

Do I need a media server to use AuthPortal?

Yes. AuthPortal has no accounts of its own. The install form asks for Plex, Jellyfin or Emby, the server URL for Jellyfin or Emby, the Plex machine identifier, an optional API key, and the administrator as username and email of a media-server account.

Does AuthPortal support multi-factor authentication?

Yes. Upstream lists optional TOTP-based multi-factor authentication with recovery codes, and per-tenant enforcement toggles. These are settings you turn on in the app or environment; this template does not force MFA on every user by default.

Who can sign in to AuthPortal?

The sign-in page is public, and any enabled account on the configured media server can sign in. Media-server administrators are also flagged as AuthPortal administrators. The template adds no Basic Auth, so add one at your reverse proxy if you want to limit who can reach the page.

How do I back up AuthPortal?

Take a backup of authportal_pgdata and authportal_keys together. The database holds users, settings and OIDC clients, and the keys volume holds the OIDC signing key. Losing the key invalidates issued tokens; losing the database loses all configuration. Test a restore.

Backups in xCloud

How do I update AuthPortal?

By adopting a newer template version when one is published. The v2.0.6 image is pinned by digest, and a catalogue refresh leaves existing sites alone. Back up both volumes first and read what upstream changed. Never edit the image tag or digest yourself, and never change SESSION_SECRET or DATA_KEY.

What happens to OIDC clients if I change the domain?

They break until re-pointed. The OIDC issuer and cookie domain follow the site domain, so after a domain change you must update every client to the new discovery address under the .well-known path. Plan the domain before registering clients.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.