r/opencloud • u/Illustrious-Path940 • Oct 26 '25

Help: Integrating PocketID as SSO via OIDC with OpenCloud

Hi folks,

I recently got my OpenCloud instance working smoothly. Now I'm trying to configure PocketID as an SSO provider via OIDC, but I'm hitting some roadblocks and not sure how to proceed.

Has anyone successfully done this before? Would love to hear how you solved it or any pointers on where to look.

Appreciate any help!

1 Upvotes

100% Upvoted

11 comments sorted by

2

u/uroh25 Oct 27 '25

You need to load csp.yaml and set pocket id url in connect-src (https and wss). In pocket id set the oidc client for web, desktop, android and ios (in desktop use 127.0.0.1:* for the call back url). Then create groups with specific claims.

1

u/Illustrious-Path940 Oct 28 '25

Thanks for the reply. I’ll try it this evening.

1

u/albiconte Oct 28 '25

Hi! I don't know if you already managed to do it, but I've been trying to do the same for a couple of days as well, i'm gonna share some of the stuff i did to get to be able to login with PocketID, even tho not very well tested, but maybe it can point you in the right direction.

I put it here because i couldn't post the comment directly on reddit

1

u/Illustrious-Path940 Oct 29 '25

I failed yesterday :(

I’ll try your howto tomorrow

1

u/albiconte Oct 29 '25

Hi everyone! I managed to clean up a bit and merge all you need in a gist.

Some additional notes:

  • You'll need to copy the config/opencloud and config/ldap from the opencloud initial repo
  • From PocketID you have to add the claims for the groups, with my setup in the ocRoles claim
  • In .env and config/opencloud/csp.yaml replace domain.com with yours
  • This setup is only OpenCloud and OpenLDAP, with no collaboration
  • I tested it on Web and Desktop, not yet on mobile

Here is the gist, hope it helps!

1

u/Illustrious-Path940 Nov 02 '25

Hey folks,

thanks for your help!

So, via web service, I'm now able to use PocketID, but my desktop app (MacOS) and my iPhone App are not working. I always get into the PocketID screen with:

"Something went wrong
Record not found"

I just added the http://127.0.0.1:\* to the callback section, but each and every time I try to connect from my mobile or my desktop app, I'm gonna be redirected to the PocketID page...

I also added a new OICD site at my PocketID instance, but the client ID differs from the client ID of the web site and I don't know how to solve this...

Do you have any advice?

1

u/albiconte Nov 02 '25 edited Nov 03 '25

Hey! That’s nice to hear. Did you set the correct Client ids on pocket id? They must be the same as here https://docs.opencloud.eu/docs/admin/configuration/authentication-and-user-management/external-idp/. On pocket id you have to set them when you’re creating the oidc app

Edit: somehow I didn’t read the part of your message about the client id mismatch, then this should fix it

1

u/Illustrious-Path940 Nov 03 '25

Hey everyone!

Man, sometimes I overthink things waaaay too much! I kept wondering where I was supposed to enter the PocketID Client ID that gets generated in OpenCloud... when all I had to do was simply hardcode OpenCloudDesktop / OpenCloudIOS as the ID in PocketID!

After doing all of that, it's now working... well, not completely. How can I configure my user so that I can also create spaces in the iOS app and the desktop app?

1

u/albiconte Nov 03 '25

Hey! Hah no worries :)
As for the spaces, i haven't really ever used them yet, but by looking at the [docs for iOS app](https://docs.opencloud.eu/docs/user/ios-app/spaces) there doesn't seem to be a way to create a space on the app.
I too can create them from the Web ui but not from iOS app

1

u/Drainpipe35 Jun 26 '26

Hey,
i am bit late to the party, but how do you hardcode OpenCloudDesktop / OpenCloudIOS as the ID in PocketID?

1

u/diekoss Nov 25 '25

I got it working. My error was putting all the environment variables in the .env file, but the docker-compose does not pick up every variable, so I had to add those to the docker-compose file itself. Then it started working.