diff --git a/docker-compose.yml b/docker-compose.yml
index 0c16706..5256aeb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -63,7 +63,8 @@ services:
             - SSO_AUTHORITY=https://${MAIL_SUBDOMAIN}.${DOMAIN_NAME}
             - SSO_CLIENT_ID=vaultwarden
             - SSO_CLIENT_SECRET=${VW_CLIENT_SECRET}
-            - SSO_SCOPES="profile email offline_access"
+            - SSO_SCOPES="profile email openid"
+            - SSO_PKCE=true
         volumes:
             - vw-data:/data/
         networks: