diff --git a/ansible/roles/apps/templates/wordpress-settings.yaml b/ansible/roles/apps/templates/wordpress-settings.yaml
index ce3c05fd397c6af72d7669bea1b7845f18e2daeb..a67a903dea892e8b1c1f6a026f56fae913ae5795 100644
--- a/ansible/roles/apps/templates/wordpress-settings.yaml
+++ b/ansible/roles/apps/templates/wordpress-settings.yaml
@@ -34,6 +34,7 @@ openid_connect_settings:
   no_sslverify: "0"
   http_request_timeout: "15"
   enable_logging: "1"
+  scope: email profile openid openappstack_roles offline_access
 
 database:
   db:
diff --git a/flux/wordpress.yaml b/flux/wordpress.yaml
index 1f6e57fd0d4d36963f8540d57759fa02d333a906..5d9a34ca33d134b4c52e890f35f2cb88739f26e6 100644
--- a/flux/wordpress.yaml
+++ b/flux/wordpress.yaml
@@ -9,7 +9,7 @@ spec:
   releaseName: wordpress
   chart:
     git: https://code.greenhost.net/open/wordpress-helm
-    ref: b7848b13d305cf996f5abc92cd662ce9d2f7b58b
+    ref: 858527ebcdc57401939491ca1a4d7bf7823818df
     path: .
   valuesFrom:
     - secretKeyRef: