diff --git a/tf-stage2/keycloak.tf b/tf-stage2/keycloak.tf
index 2b53d278628e96efe98b46351d29e5b7d67aff28..aabccd847ecd57884f361085593d7d034100202e 100644
--- a/tf-stage2/keycloak.tf
+++ b/tf-stage2/keycloak.tf
@@ -165,6 +165,7 @@ resource "keycloak_openid_client" "openid_gitlab" {
 
   access_type = "PUBLIC"
   standard_flow_enabled = true
+  full_scope_allowed = false
   valid_redirect_uris = [
     "https://gitlab.archlinux.org"
   ]