Skip to content

Photoprism

Jump to bottom
Teo Elmfeldt edited this page Jun 7, 2026 · 1 revision

Photoprism

This guide covers adding ScoutID login to a Photoprism instance using its built-in OIDC support.

Before you start, make sure you have requested a client. Specify that you need a confidential OIDC client for Photoprism and provide your redirect URI (see below). You will receive a client ID and client secret.

Redirect URI

Provide the following as your valid redirect URI when requesting your client:

https://your-photoprism-url/api/v1/oidc/redirect

Photoprism configuration

Add the following environment variables to your Photoprism configuration (e.g. docker-compose.yml or your deployment's environment settings):

PHOTOPRISM_OIDC_URI: "https://dev.id.scouterna.se/realms/scoutnet"
PHOTOPRISM_OIDC_CLIENT: "your-client-id"
PHOTOPRISM_OIDC_SECRET: "your-client-secret"
PHOTOPRISM_OIDC_PROVIDER: "ScoutID"
PHOTOPRISM_OIDC_SCOPES: "openid email profile"
PHOTOPRISM_OIDC_REGISTER: "false"
PHOTOPRISM_OIDC_REDIRECT: "true"
PHOTOPRISM_OIDC_ICON: "https://dev.id.scouterna.se/resources/40i8o/login/scoutid/dist/assets/scoutid-BKqgYpbU.png"

Key settings to note:

  • PHOTOPRISM_OIDC_REGISTER: "false" — users must already exist in Photoprism to be able to sign in. Set to "true" if you want accounts created automatically on first login.
  • PHOTOPRISM_OIDC_REDIRECT: "true" — skips the Photoprism login screen and redirects directly to ScoutID.
  • PHOTOPRISM_OIDC_ICON — displays the ScoutID logo on the login button. This URL may change in the future; remove the setting if the icon stops loading.

Clone this wiki locally