diff --git a/modules/services/open-webui.nix b/modules/services/open-webui.nix
index b724e03..9ca4aad 100644
--- a/modules/services/open-webui.nix
+++ b/modules/services/open-webui.nix
@@ -195,6 +195,7 @@ in
           client_id = cfg.sso.clientID;
           client_secret.source = cfg.sso.sharedSecretForAuthelia.result.path;
           scopes = [ "openid" "email" "profile" ];
+          authorization_policy = cfg.sso.authorization_policy;
           redirect_uris = [
             "https://${cfg.subdomain}.${cfg.domain}/oauth/oidc/callback"
           ];