Pocket ID

A simple OIDC provider that supports passkey-based authentication. Lightweight, self-contained, and uses SQLite for storage.

First Login

On first visit, you will be prompted to create an admin account with a passkey. Your browser must support WebAuthn (all modern browsers do).

What You Can Do After Deployment

1. Visit your domain — register your admin account using a passkey
2. Create OIDC clients — set up applications that authenticate through Pocket ID
3. Invite users — add users who can register their own passkeys
4. Configure branding — customize the login page appearance
5. Manage sessions — view and revoke active sessions

Key Features

• Passwordless login with passkeys (WebAuthn/FIDO2)
• Standard OIDC provider (works with any OIDC-compatible app)
• User and group management
• Customizable branding
• LDAP proxy support
• SQLite storage (no external database)
• Email notifications via SMTP

License

MIT — GitHub