Outline

Setting up Outline to authenticate with Pocket ID can be done with the configuration below.

Requirements

• Your Outline and Pocket ID server URLs must both use HTTPS.

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Outline and add the callback URL https://outline.example.com/auth/oidc.callback.
3. Click Create and copy the Client ID and the Client secret. Under Show more details, also copy the Authorization URL, the Token URL, the Userinfo URL and the Logout URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Outline

1. Add the following to your Outline container’s docker.env:

   OIDC_CLIENT_ID=<client-id>
   OIDC_CLIENT_SECRET=<client-secret>
   OIDC_AUTH_URI=https://id.example.com/authorize
   OIDC_TOKEN_URI=https://id.example.com/api/oidc/token
   OIDC_USERINFO_URI=https://id.example.com/api/oidc/userinfo
   OIDC_LOGOUT_URI=https://id.example.com/api/oidc/end-session
   
   OIDC_DISPLAY_NAME=Pocket ID
   OIDC_USERNAME_CLAIM=preferred_username
   OIDC_SCOPES=openid profile email groups

2. Restart your Outline container:

   docker compose down
   docker compose up -d

3. Sign in to Outline with Pocket ID to test it.

4. Review and update the SSO settings under Settings → Workspace → Security.