diff --git a/src/apps.js b/src/apps.js
index 6f356bb93..632c36ec3 100644
--- a/src/apps.js
+++ b/src/apps.js
@@ -1971,7 +1971,7 @@ async function updateApp(app, data, auditSource) {
         values.mailboxDomain = app.domain;
     }
 
-    const hasSso = !!updateConfig.manifest.addons?.proxyAuth || !!updateConfig.manifest.addons?.ldap;
+    const hasSso = !!updateConfig.manifest.addons?.proxyAuth || !!updateConfig.manifest.addons?.ldap || !!manifest.addons?.oidc;
     if (!hasSso && app.sso) values.sso = false; // turn off sso flag, if the update removes sso options
 
     const task = {