diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml
index 8ef31e9..93876d1 100644
--- a/apps/opencloud/opencloud-deployment.yaml
+++ b/apps/opencloud/opencloud-deployment.yaml
@@ -187,6 +187,18 @@ spec:
         - name: PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM
           value: "opencloud_role"
 
+        # User auto-provisioning
+        - name: PROXY_AUTOPROVISION_ACCOUNTS
+          value: "true"
+        - name: PROXY_AUTOPROVISION_CLAIM_USERNAME
+          value: "preferred_username"
+        - name: PROXY_AUTOPROVISION_CLAIM_EMAIL
+          value: "email"
+        - name: PROXY_AUTOPROVISION_CLAIM_DISPLAYNAME
+          value: "name"
+        - name: PROXY_AUTOPROVISION_CLAIM_GROUPS
+          value: "groups"
+
         # Disable demo user creation (using OIDC auto-provisioning only)
         - name: IDM_CREATE_DEMO_USERS
           value: "false"