Pocket ID is a straightforward OIDC provider that enables authentication using passkeys instead of passwords, positioning itself as a simpler alternative to more complex self-hosted providers like Keycloak and ORY Hydra. It supports various setup methods, with Docker being the easiest, and encourages contributions from the community.

Unit 42 researchers identified critical security risks in the implementation of OpenID Connect (OIDC) within CI/CD environments, revealing vulnerabilities that threat actors could exploit to access restricted resources. Key issues include misconfigured identity federation policies, reliance on user-controllable claim values, and the potential for poisoned pipeline execution. Organizations are urged to strengthen their OIDC configurations and security practices to mitigate these risks.