diff --git a/paperless/paperless.yaml b/paperless/paperless.yaml
index 5e357d3..97f3495 100644
--- a/paperless/paperless.yaml
+++ b/paperless/paperless.yaml
@@ -73,6 +73,46 @@ spec:
           value: "Europe/Berlin"
         #- name: PAPERLESS_OCR_LANGUAGE
         #  value: "de"
+
+        - name: PAPERLESS_APPS
+          value: "allauth.socialaccount.providers.openid_connect"
+
+        - name: PAPERLESS_ACCOUNT_ALLOW_SIGNUPS
+          value: "false"
+
+        - name: PAPERLESS_SOCIAL_AUTO_SIGNUP
+          value: "true"
+
+        - name: PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS
+          value: "true"
+
+        - name: PAPERLESS_SOCIAL_ACCOUNT_SYNC_GROUPS
+          value: "true"
+
+        - name: PAPERLESS_DISABLE_REGULAR_LOGIN
+          value: "false"
+
+        - name: PAPERLESS_REDIRECT_LOGIN_TO_SSO
+          value: "false"
+
+        - name: PAPERLESS_SOCIALACCOUNT_PROVIDERS
+          value: >-
+            {
+              "openid_connect": {
+                "SCOPE": ["openid", "profile", "email", "groups"],
+                "APPS": [
+                  {
+                    "provider_id": "paperless",
+                    "name": "Authentik",
+                    "client_id": "R0OcEONvQGIfG5iMuHKYh9e0KfxkA8DFbJC119Ei",
+                    "secret": "JlU9OmhkdQYkf5MthO3Kw19qk3i7kDGDWp1aFJtAsF1GWsQxexgoI7srUHao8Q6FBMQguHDVM6LrKII290mchUIga3u7QUfdhLJM22XLmSdJ76UUNpppR9VNd7srOOb1",
+                    "settings": {
+                      "server_url": "https://auth.apps.undercloud.dev/application/o/paperless/.well-known/openid-configuration"
+                    }
+                  }
+                ]
+              }
+            }
         volumeMounts:
         - mountPath: "/usr/src/paperless/data"
           name: data