diff --git a/.env.sample b/.env.sample
index ee2842c..4405472 100644
--- a/.env.sample
+++ b/.env.sample
@@ -79,11 +79,14 @@ DEFAULT_QUOTA="10 GB"
 
 # COMPOSE_FILE="$COMPOSE_FILE:compose.authentik.yml"
 # APPS="$APPS sociallogin"
-# AUTHENTIK_USER_PREFIX=authentik
 # AUTHENTIK_DOMAIN=authentik.example.com
 # SECRET_AUTHENTIK_SECRET_VERSION=v1
 # SECRET_AUTHENTIK_ID_VERSION=v1
 
+# Only change this if you've configured your authentik instance to use a non-default user prefix.
+# If you're unsure, this should match the redirect_uri in authentik's nextcloud provider.
+# AUTHENTIK_USER_PREFIX=authentik
+
 #COMPOSE_FILE="$COMPOSE_FILE:compose.fulltextsearch.yml"
 #SECRET_ELASTICSEARCH_PASSWORD_VERSION=v1
 
@@ -109,4 +112,4 @@ DEFAULT_QUOTA="10 GB"
 #HSTS_PRELOAD=1
 
 # Metrics
-# COMPOSE_FILE="$COMPOSE_FILE:compose.metrics.yml"
\ No newline at end of file
+# COMPOSE_FILE="$COMPOSE_FILE:compose.metrics.yml"