diff --git a/config/settings.yml b/config/settings.yml
index ed8743679..99d993f07 100644
--- a/config/settings.yml
+++ b/config/settings.yml
@@ -136,7 +136,7 @@ user-auth:
     client-id:     "_env:AZURECLIENTID:00000000-0000-0000-0000-000000000000"
     client-secret: "_env:AZURECLIENTSECRET:''"
     tenant-id:     "_env:AZURETENANTID:00000000-0000-0000-0000-000000000000"
-    scopes:        "_env:AZURESCOPES:[ID,Profile]"
+    scopes:        "_env:AZURESCOPES:[email,openid,profile,offline_access]"
     # protocol: "ldap"
     # config:
     #   host:           "_env:LDAPHOST:"