pgAdmin

Replace pgadmin.example.com with the URL of your pgAdmin instance and id.example.com with the URL of your Pocket ID instance.

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as pgAdmin and add the callback URL https://pgadmin.example.com/oauth2/authorize.
3. Click Create and copy the Client ID and the Client secret. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure pgAdmin

1. Add the following to the config_local.py file for pgAdmin:

   AUTHENTICATION_SOURCES = ['oauth2', 'internal'] # This keeps internal authentication enabled as well as oauth2
   OAUTH2_AUTO_CREATE_USER = True
   OAUTH2_CONFIG = [{
           'OAUTH2_NAME' : 'pocketid',
           'OAUTH2_DISPLAY_NAME' : 'Pocket ID',
           'OAUTH2_CLIENT_ID' : '<client-id>',
           'OAUTH2_CLIENT_SECRET' : '<client-secret>',
           'OAUTH2_TOKEN_URL' : 'https://id.example.com/api/oidc/token',
           'OAUTH2_AUTHORIZATION_URL' : 'https://id.example.com/authorize',
           'OAUTH2_API_BASE_URL' : 'https://id.example.com',
           'OAUTH2_USERINFO_ENDPOINT' : 'https://id.example.com/api/oidc/userinfo',
           'OAUTH2_SERVER_METADATA_URL' : 'https://id.example.com/.well-known/openid-configuration',
           'OAUTH2_SCOPE' : 'openid email profile',
           'OAUTH2_ICON' : 'fa-openid',
           'OAUTH2_BUTTON_COLOR' : '#fd4b2d' # Can select any color you would like here.
   }]

   Make sure to replace https://id.example.com with your actual Pocket ID URL.