diff --git a/.env.sample b/.env.sample
index bf0ef37..2a64815 100644
--- a/.env.sample
+++ b/.env.sample
@@ -12,7 +12,9 @@ GITLAB_CONF_VERSION=v1
 GITLAB_ROOT_EMAIL="gitlab_admin@example.com"
 SECRET_INITIAL_ROOT_PASSWORD_VERSION=v1
 
+SSO=false
 ## Authentik Configuration
+# SSO=true
 # SSO_PROVIDER_HOST="authentik.mydomain.com"
 # ORG_NAME="My Organization"
 # SECRET_CLIENT_SSO_SECRET_VERSION=v1
diff --git a/gitlab.rb.tmpl b/gitlab.rb.tmpl
index 8513c65..4d4ed3b 100644
--- a/gitlab.rb.tmpl
+++ b/gitlab.rb.tmpl
@@ -550,7 +550,7 @@
 # gitlab_rails['smartcard_required_for_git_access'] = false
 # gitlab_rails['smartcard_san_extensions'] = false
 
-{{ if SSO_PROVIDER_HOST }}
+{{ if eq SSO "true" }}
 ### OmniAuth Settings
 ###! Docs: https://docs.gitlab.com/ee/integration/omniauth.html
 # gitlab_rails['omniauth_enabled'] = nil