Arcane

The following example variables are used, and should be replaced with your actual URLS.

• arcane.example.com (The url of your Arcane instance.)
• id.example.com (The url of your Pocket ID instance.)

Pocket ID Setup

1. In Pocket-ID create a new OIDC Client, name it i.e. Arcane.
2. Set a logo for this OIDC Client if you would like too.
3. Set the callback URL to: https://arcane.example.com/auth/oidc/callback, or leave blank to autofill on first login.

Arcane Setup

Arcane has two methods of setting up OIDC, via Environment Variables or via the UI

UI

1. Go to Settings → Authentication in Arcane
2. Enter your OIDC provider details:
   • Issuer URL: https://id.example.com (No trailing slash)
   • Client ID: Your Client ID from Pocket ID
   • Client Secret: Your Client Secret from Pocket ID
   • Redirect URI: https://arcane.example.com/auth/oidc/callback
3. Save and test the connection
4. The UI will guide you through any missing or invalid fields

Environment Variables

You can also configure OIDC using environment variables in your Arcane compose file:

[!NOTE] The example above includes groups in the scopes and uses OIDC_ADMIN_CLAIM and OIDC_ADMIN_VALUE to automatically grant admin permissions based on group membership. These are optional and can be omitted if you don't need automatic admin provisioning.