Pingvin Share

Requirements

• Pingvin Share
• HTTPS connection to your Pingvin Share server

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Pingvin Share and add the callback URL https://pingvin.example.com/api/oauth/callback/oidc.
3. Click Create and copy the Client ID, the Client secret and the OIDC Discovery URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Pingvin Share

1. Open Pingvin Share and navigate to Administration → Configuration → Social Login.
2. Scroll down and fill in the fields:
   • OpenID Connect: Enabled
   • OpenID Connect Discovery URI: the OIDC Discovery URL from Pocket ID.
   • Sign out from OpenID Connect: Enabled (if desired)
   • OpenID Connect scope: openid email profile groups

Control access with groups

To control general and admin access to Pingvin Share using Pocket ID groups:

1. Open Pingvin Share and navigate to Administration → Configuration → Social Login.
2. Scroll down and fill in the following:
   • OpenID Connect scope: openid email profile groups
   • Path to roles in OpenID Connect token: groups
   • OpenID Connect role for general access: pingvin (or a similar group name from Pocket ID)
   • OpenID Connect role for admin access: pingvin_admin (or a similar group name from Pocket ID)