diff --git a/apps/opencloud/opencloud-configmap.yaml b/apps/opencloud/opencloud-configmap.yaml
index ad7e5a7..eb820e3 100644
--- a/apps/opencloud/opencloud-configmap.yaml
+++ b/apps/opencloud/opencloud-configmap.yaml
@@ -51,11 +51,27 @@ data:
       app:
         insecure: true
 
-    # Proxy service (OIDC integration)
+    # Proxy service (OIDC integration with auto-provisioning)
     proxy:
       oidc:
         issuer: https://auth.basicstack.de
         insecure: false
+        auto_provision_accounts: true
+        user_oidc_claim: email
+        role_assignment:
+          driver: oidc
+          oidc_role_mapper:
+            role_claim: groups
+            role_mapping:
+              - role_name: admin
+                claim_value: opencloudAdmin
+              - role_name: spaceadmin
+                claim_value: opencloudSpaceAdmin
+              - role_name: user
+                claim_value: opencloudUser
+              - role_name: guest
+                claim_value: opencloudGuest
+      enable_basic_auth: false
       insecure_backends: true
       service_account:
         service_account_id: ${OC_SERVICE_ACCOUNT_ID}