Vikunja

The following example variables are used, and should be replaced with your actual URLs.

Pocket ID Setup

1. In Pocket ID create a new OIDC Client, name it i.e. Vikunja
2. Set the callback url to: https://vikunja.example.com/auth/openid/pocketid, or leave blank to autofill on first login.
3. Copy the Client ID and Client Secret for use in the next steps.

Vikunja Setup

You can use either a config.yml file or environment variables to configure vikunja.

Using config.yml (Vikunja 1.0+ syntax, see here for Pre-1.0 syntax (deprecated))

1. In Vikunja ensure to map a config file to your container, see here
2. Add or set the following content to the config.yml file:

Using environment variables

3. Vikunja 1.0+ allows users with existing local accounts to login with OpenID. This feature enables linking OpenID providers to local user accounts based on matching email and username attributes. An example of config.yml could look like below. Important security note from Vikunja documentation - When using SSO authentication, Vikunja will create a new SSO user if no matching local user is found. If you misconfigure the matching parameters, this could result in duplicate accounts that prevent logging into the intended local account via SSO until the duplicate SSO user is deleted. Additionally, this feature introduces potential security risks, as it allows third-party providers to authenticate as local users if they can control the username or email claims. Only enable this feature with trusted identity providers.