Pocket ID
A passkey-only OpenID Connect identity provider
9k stars 304 forks last commit first released BSD-2-Clause
Actively maintained
Last commit 26 Aug 2026.
Pocket ID is a lightweight OpenID Connect (OIDC) identity provider designed for simple deployments. It focuses on passwordless authentication by using passkeys, enabling users to sign in securely without managing passwords.
Key Features
- OpenID Connect provider for authenticating users to compatible services
- Passkey-only (passwordless) authentication flow
- Designed to be simpler to operate than larger IAM suites for small setups
- Web-based admin/user interface for managing the identity provider
- Container-friendly deployment options for straightforward installation
Use Cases
- Centralized login (OIDC) for homelab and self-hosted applications
- Passwordless sign-in using hardware keys (for example, security keys)
- Lightweight alternative for small teams that only need OIDC authentication
Limitations and Considerations
- Passkey-only approach may not fit environments that require passwords or multiple auth methods
Pocket ID is a good fit when you want an OIDC provider with minimal complexity and a strong passwordless stance. It prioritizes ease of use and modern authentication for smaller, focused deployments.
Categories:
Tags:
Tech Stack:
Similar to Pocket ID
VoidAuth
Self-hosted SSO and user management with OpenID Connect and ForwardAuth
VoidAuth is a self-hosted SSO provider with OpenID Connect, ForwardAuth proxy auth, and built-in user and group management plus MFA and passkeys.
Authelia
Self-hosted IAM with SSO and multi-factor authentication
Authelia is an open-source IAM and authentication server providing SSO, MFA, and access control for web apps, with OpenID Connect/OAuth 2.0 and reverse-proxy integration.
Logto
Authentication and authorization platform for apps and APIs
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.
Authgear
Identity and authentication platform for apps and APIs
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.
Casdoor
UI-first IAM and SSO platform for modern authentication
Casdoor is an open-source, UI-first IAM/SSO platform supporting OAuth 2.0, OIDC, SAML, LDAP, SCIM, WebAuthn and MFA, with an admin web UI and SDKs.
Keycloak
Open-source identity and access management with SSO
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.