Categories

Tag

passkeys

View options

View Cards
Mode Paginated
Per page Per batch 48

Filters

Tools

Vaultwarden SSO with OpenID Connect and Pocket ID in Docker

Vaultwarden 1.37.3 supports single sign-on over OpenID Connect through SSO_ENABLED, SSO_AUTHORITY and a client registered in your provider. With Pocket ID you sign in with a passkey, but the master password is still required because it is what encrypts the vault. SSO_SIGNUPS_ALLOWED decides whether SSO may create new accounts.

16 min 41
How to Install

How to install Pocket ID and get passkey SSO on your homelab

Pocket ID is an OpenID Connect provider that accepts passkeys and nothing else, so it stores no passwords at all. You deploy it with one container, one port and one env file, it demands HTTPS because WebAuthn needs a secure context, and it puts your self-hosted apps behind single sign-on.

13 min 20