diff --git a/src/main/docker/app.yml b/src/main/docker/app.yml
index 1b474f0..a4b0b9b 100644
--- a/src/main/docker/app.yml
+++ b/src/main/docker/app.yml
@@ -7,13 +7,14 @@ services:
       - _JAVA_OPTIONS=-Xmx512m -Xms256m
       - SPRING_PROFILES_ACTIVE=prod,api-docs
       - MANAGEMENT_METRICS_EXPORT_PROMETHEUS_ENABLED=true
-      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_ISSUER_URI=http://keycloak:9080/realms/jhipster
-      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_AUTHORIZATION_URI=https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/auth
-      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_TOKEN_URI=https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/token
-      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_USER_INFO_URI=https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/userinfo
-      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_JWK_SET_URI=https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/certs
-      - SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_OIDC_CLIENT_ID=web_app
-      - SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_OIDC_CLIENT_SECRET=web_app
+      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_ISSUER_URI='https://accounts.dev.d4science.org/auth/realms/d4science'
+      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_AUTHORIZATION_URI='https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/auth'
+      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_TOKEN_URI='https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/token'
+      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_USER_INFO_URI='https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/userinfo'
+      - SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_OIDC_JWK_SET_URI='https://accounts.dev.d4science.org/auth/realms/d4science/protocol/openid-connect/certs'
+      - SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_OIDC_CLIENT_ID='web_app'
+      - SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_OIDC_CLIENT_SECRET='web_app'
+      - SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_OIDC_SCOPE='openid, profile, email, phone, offline_access' # last one for refresh tokens
       - JHIPSTER_SLEEP=5 # gives time for other services to boot before the application
     # If you want to expose these ports outside your dev PC,
     # remove the "127.0.0.1:" prefix