diff --git a/plinth/modules/deluge/data/usr/share/freedombox/etc/apache2/conf-available/deluge-plinth.conf b/plinth/modules/deluge/data/usr/share/freedombox/etc/apache2/conf-available/deluge-plinth.conf
index f89dd42a2..efd742b0b 100644
--- a/plinth/modules/deluge/data/usr/share/freedombox/etc/apache2/conf-available/deluge-plinth.conf
+++ b/plinth/modules/deluge/data/usr/share/freedombox/etc/apache2/conf-available/deluge-plinth.conf
@@ -8,10 +8,8 @@
 ##
 <Location /deluge>
     ProxyPass   http://localhost:8112
-    Include     includes/freedombox-single-sign-on.conf
-    <IfModule mod_auth_pubtkt.c>
-        TKTAuthToken "admin" "bit-torrent"
-    </IfModule>
+    Use AuthOpenIDConnect
+    Use RequireGroup bit-torrent
     ## Send the scheme from user's request to enable Deluge to redirect URLs,
     ## set cookies, set absolute URLs (if any) properly.
     RequestHeader    set X-Forwarded-Proto 'https' env=HTTPS