Blinko

Requirements

• A self-hosted Blinko instance.
• Administrator access to both Blinko and Pocket ID.

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Blinko and add the callback URL https://blinko.example.com/api/auth/callback/pocket-id.
3. Click Create and copy the Client ID, the Client secret and the OIDC Discovery URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Blinko

1. Sign in to Blinko as an admin.
2. Open Settings → SSO Settings and click Add Provider.
3. Set Provider to Custom Provider.
4. Configure the provider details:
   • Provider ID: pocket-id. This must match the end of the callback URL you added in Pocket ID.
   • Provider Name: Pocket ID (or your preferred display name).
   • Provider Icon: (Optional) an icon string, such as streamline-ultimate:touch-id-bold.
5. Paste the OIDC Discovery URL from Pocket ID into the WellKnown URL field, for example https://id.example.com/.well-known/openid-configuration. The authorization, token and userinfo URLs are fetched automatically. If they aren’t, copy them from the client’s page in Pocket ID under Show more details. The scopes are openid email profile groups.
6. Enter the Client ID and the Client secret from Pocket ID.
7. Save the settings and sign in with Pocket ID to test it.

Note

To link an existing Blinko account to your SSO account, follow the official instructions.