diff --git a/modules/grist.nix b/modules/grist.nix
index 7fe6c88..c7f5377 100644
--- a/modules/grist.nix
+++ b/modules/grist.nix
@@ -26,6 +26,7 @@ with lib;
           environment = {
             # The URL of given OIDC provider. Used for redirects, among other things.
             GRIST_OIDC_IDP_ISSUER = "https://${auth_dn}/openid-configuration";
+            GRIST_OIDC_IDP_SCOPES = "openid profile email";
             # Client ID, as configured with the OIDC provider.
             GRIST_OIDC_IDP_CLIENT_ID = "LtgrHHZmKucQAZtYNZGrirxdEru5pWByaJQcEfiufcitd0kfi2qVjuU6gPZE4haz";
             # Client secret, as provided by the OIDC provider.