diff --git a/env.template b/env.template
index e807045..2ce6c15 100644
--- a/env.template
+++ b/env.template
@@ -41,6 +41,7 @@ OIDC_REDIRECT_URI=
 OIDC_DISCOVERY=
 OIDC_SCOPE=
 OIDC_UID_FIELD=
+OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=
 
 # Application secrets
 SECRET_KEY_BASE=
diff --git a/start.sh b/start.sh
index f8d6c18..427e148 100755
--- a/start.sh
+++ b/start.sh
@@ -40,7 +40,7 @@ if [[ -n "${CLOUDRON_OIDC_ISSUER:-}" ]]; then
         -e "s/OIDC_REDIRECT_URI=.*/OIDC_REDIRECT_URI=${CLOUDRON_APP_ORIGIN//\//\\\/}\/auth\/auth\/openid_connect\/callback/g" \
         -e "s/OIDC_DISCOVERY=.*/OIDC_DISCOVERY=true/g" \
         -e "s/OIDC_SCOPE=.*/OIDC_SCOPE=openid,profile,email/g" \
-        -e "s/OIDC_UID_FIELD=.*/OIDC_UID_FIELD=sub/g" \
+        -e "s/OIDC_UID_FIELD=.*/OIDC_UID_FIELD=preferred_username/g" \
         -e "s/OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=.*/OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=true/g" \
         -i /app/data/env.production
 fi