Pocket ID

Connect Windshift to Pocket ID for single sign-on using OpenID Connect.

Prerequisites

  • A running Windshift instance with admin access.
  • A running Pocket ID instance with admin access.

Step 1: Open SSO Configuration in Windshift

  1. Navigate to Admin > Single Sign-On.
  2. Click Add Provider.
  3. Enter a display name, such as "Pocket-ID". Windshift fills the slug automatically.
  4. Copy the Callback URL in the dialog.

Step 2: Create an OIDC Client in Pocket ID

  1. In Pocket ID admin, go to OIDC Clients and click Create.
  2. Enter a name, such as "Windshift".
  3. Paste the Windshift Callback URL into the Callback URLs field.
  4. Leave the other fields at their defaults.
  5. Click Save.
  6. Copy the Client ID and Client Secret.

Step 3: Complete Windshift Configuration

  1. In the Windshift SSO dialog, paste the Client ID and Client Secret.
  2. Set the Issuer URL to your Pocket ID instance URL, such as https://id.example.com.
  3. Leave Scopes as openid email profile.
  4. Set the checkboxes you need:
    • Enable provider: Makes the provider available on the login page.
    • Auto-provision: Creates accounts for new users automatically.
    • Allow password login: Lets provisioned users set a password.
    • Trust IdP email verification: Skips Windshift email verification.
  5. Click Save Changes.

Step 4: Mark Email as Trusted in Pocket ID

  1. In Pocket ID admin, go to Users and select the user.
  2. Click the green icon next to the Email field to mark the email as trusted.
  3. Do this when Trust IdP email verification is enabled in Windshift.

Test the Connection

  1. In the Windshift SSO dialog, click Test Connection to verify the configuration.
  2. Or sign out and use Sign in with Pocket-ID on the login page.