Pocket ID
| License | FOSS problems | Maintenance | SSO | Users | Tested |
|---|---|---|---|---|---|
| MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license. | — | Active | ✅ | Unlimited | ❌ |
Evaluation
What it is
Pocket ID is a self-hosted OIDC provider that supports only passwordless authentication via passkeys (WebAuthn). No passwords, no magic links — users authenticate with their device biometrics or hardware key. It connects to the same ecosystem of OIDC-compatible apps as Rauthy or Authentik.
Why it could be useful
Passwordless is more secure and often simpler for end users — no password to forget, no credential to phish. For a community or organisation already comfortable with passkeys, Pocket ID keeps things clean and opinionated. It also has a smaller footprint and simpler setup than Authentik while covering the OIDC use case well.
Why not to go for it
Passkey-only is a hard constraint — anyone without a compatible device or browser is locked out. It's not suitable if the user base is mixed or if fallback authentication is needed. For more flexibility, Rauthy or Authentik are better fits.
Setup
Coming soon.