diff --git a/apps/opencloud/opencloud-configmap.yaml b/apps/opencloud/opencloud-configmap.yaml
index 38642e5..48b0883 100644
--- a/apps/opencloud/opencloud-configmap.yaml
+++ b/apps/opencloud/opencloud-configmap.yaml
@@ -56,6 +56,14 @@ data:
           group_object_class: groupOfNames
           insecure: true
 
+    # IDM service user passwords (required when IDM is enabled and /etc/opencloud is read-only)
+    idm:
+      service_user_passwords:
+        admin_password: ${OC_IDM_ADMIN_PASSWORD}
+        idm_password: ${OC_IDM_IDM_PASSWORD}
+        reva_password: ${OC_IDM_REVA_PASSWORD}
+        idp_password: ${OC_IDM_IDP_PASSWORD}
+
     # Gateway service - storage configuration
     gateway:
       storage_registry: