diff --git a/LocalSettings.php.tmpl b/LocalSettings.php.tmpl
index c800acb..1bfe8ec 100644
--- a/LocalSettings.php.tmpl
+++ b/LocalSettings.php.tmpl
@@ -191,6 +191,9 @@ $wgOpenIDConnect_Config['{{ env "OPENID_KEYCLOAK_URL" }}'] = [
   'clientID' => '{{ env "OPENID_CLIENT_ID"}}',
   'clientsecret' => '{{ secret "openid_client_secret" }}'
 ];
+
+$wgGroupPermissions['*']['autocreateaccount'] = true;
+$wgGroupPermissions['*']['createaccount'] = false;
 {{ end }}
 
 {{ if env "SMTP_HOST" }}