diff --git a/data/etc/apache2/conf-available/searx-freedombox.conf b/data/etc/apache2/conf-available/searx-freedombox.conf
index 2435d475a..24a1b723e 100644
--- a/data/etc/apache2/conf-available/searx-freedombox.conf
+++ b/data/etc/apache2/conf-available/searx-freedombox.conf
@@ -1,4 +1,10 @@
 <Location /searx/>
+    Include includes/freedombox-single-sign-on.conf
+
+    <IfModule mod_auth_pubtkt.c>
+        TKTAuthToken "web-search" "admin"
+    </IfModule>
+
     ProxyPass unix:/run/uwsgi/app/searx/socket|uwsgi://uwsgi-uds-searx/
 </Location>
 
diff --git a/plinth/modules/searx/__init__.py b/plinth/modules/searx/__init__.py
index ca2f9c303..ee51d7058 100644
--- a/plinth/modules/searx/__init__.py
+++ b/plinth/modules/searx/__init__.py
@@ -25,6 +25,7 @@ from django.utils.translation import ugettext_lazy as _
 from plinth import service as service_module
 from plinth import action_utils, actions, frontpage
 from plinth.menu import main_menu
+from plinth.modules.users import register_group
 
 from .manifest import clients
 
@@ -49,6 +50,8 @@ description = [
       'It stores no cookies by default.')
 ]
 
+group = ('web-search', _('Search the web'))
+
 service = None
 
 
@@ -57,6 +60,7 @@ def init():
     menu = main_menu.get('apps')
     menu.add_urlname(name, 'glyphicon-search', 'searx:index',
                      short_description)
+    register_group(group)
 
     global service
     setup_helper = globals()['setup_helper']