Homarr

Create a group in Pocket ID

1. In Pocket ID, open Administration → User Groups and click Add Group.
2. Create a group called homarr_admin (or your preferred admin group name).

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Homarr and add the callback URL https://homarr.example.com/api/auth/callback/oidc.
3. Click Create and copy the Client ID and the Client secret. The client secret is only shown once.
4. On the client’s General tab, turn on PKCE, then click Save.
5. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Homarr

Add the following variables to your Homarr container .env file and restart:

NEXTAUTH_SECRET=<generate-a-random-secret, f.e. using: openssl rand -base64 32 >
AUTH_PROVIDERS=oidc
AUTH_OIDC_CLIENT_ID=<client-id>
AUTH_OIDC_CLIENT_SECRET=<client-secret>
AUTH_OIDC_ISSUER=https://id.example.com
AUTH_OIDC_CLIENT_NAME="Pocket ID"
AUTH_OIDC_SCOPE_OVERWRITE=openid email profile groups
AUTH_OIDC_GROUPS_ATTRIBUTE=groups
AUTH_LOGOUT_REDIRECT_URL=https://id.example.com
AUTH_OIDC_AUTO_LOGIN=true

Admin group

During the initial setup of Homarr, you will be prompted to enter an admin group. Enter the name of the Pocket ID group that should receive admin rights (e.g., homarr_admin).

Note

You can optionally include ,credentials in AUTH_PROVIDERS to keep local accounts as a fallback:

AUTH_PROVIDERS=oidc,credentials