diff --git a/templates/nebariapp.yaml b/templates/nebariapp.yaml
index 29317aa..56b50ab 100644
--- a/templates/nebariapp.yaml
+++ b/templates/nebariapp.yaml
@@ -20,5 +20,10 @@ spec:
     enabled: {{ .enabled | default true }}
     provider: {{ .provider | default "keycloak" }}
     provisionClient: {{ .provisionClient | default true }}
+    redirectURI: {{ .redirectURI | default "/hub/oauth_callback" }}
+    {{- with .scopes }}
+    scopes:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
   {{- end }}
 {{- end }}
diff --git a/values.yaml b/values.yaml
index 4d21d64..36cf771 100644
--- a/values.yaml
+++ b/values.yaml
@@ -21,6 +21,12 @@ nebariapp:
     enabled: true
     provider: keycloak
     provisionClient: true
+    redirectURI: /hub/oauth_callback  # JupyterHub's OAuth callback
+    scopes:
+      - openid
+      - profile
+      - email
+      - groups
 
 # Shared storage configuration (disabled - requires RWX storage class)
 sharedStorage: