From e74186ac62badaf756f615c0a40beeff9de11e8a Mon Sep 17 00:00:00 2001
From: Jason Volk <jason@zemos.net>
Date: Mon, 16 Feb 2026 18:46:45 +0000
Subject: [PATCH] Grant admin for first user on SSO/OIDC registration path.
 (fixes #315)

Signed-off-by: Jason Volk <jason@zemos.net>
---
 src/api/client/session/sso.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/api/client/session/sso.rs b/src/api/client/session/sso.rs
index 6cd30430..1c5dd0e4 100644
--- a/src/api/client/session/sso.rs
+++ b/src/api/client/session/sso.rs
@@ -479,6 +479,7 @@ async fn register_user(
 			password: Some("*"),
 			origin: Some("sso"),
 			displayname: userinfo.name.as_deref(),
+			grant_first_user_admin: true,
 			..Default::default()
 		})
 		.await?;