Wekan

Requirements

• Wekan
• HTTPS connection to your Wekan server

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Wekan and add the callback URL https://wekan.example.com/_oauth/oidc.
3. Click Create and copy the Client ID and the Client secret. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Wekan

Use the following environment variables to configure OpenID (Docker shown). Replace <client-id> and <client-secret> with the Client ID and the Client secret from Pocket ID.

services:
...
  wekan:
    ...
    environment:
      - OAUTH2_ENABLED=true
      - OIDC_REDIRECTION_ENABLED=true # for mandatory
      - OAUTH2_LOGIN_STYLE=popup # or redirect
      - OAUTH2_CLIENT_ID=<client-id>
      - OAUTH2_SECRET=<client-secret>
      - OAUTH2_SERVER_URL=https://id.example.com
      - OAUTH2_AUTH_ENDPOINT=/authorize
      - OAUTH2_USERINFO_ENDPOINT=/api/oidc/userinfo
      - OAUTH2_TOKEN_ENDPOINT=/api/oidc/token
      - OAUTH2_ID_MAP=preferred_username
      - OAUTH2_FULLNAME_MAP=name
      - OAUTH2_USERNAME_MAP=preferred_username
      - OAUTH2_EMAIL_MAP=email
...

Notes

Configuration adapted from the Authentik guide for Wekan. Tested and working in Wekan v7.90.