diff --git a/docs/references/api.md b/docs/references/api.md
index fd68b047c..39f93c609 100644
--- a/docs/references/api.md
+++ b/docs/references/api.md
@@ -209,7 +209,8 @@ Response (200):
     portBindings: {                  // mapping from application ports to public ports
     },
     iconUrl: <url>,                  // a relative url providing the icon
-    memoryLimit: <number>            // memory constraint in bytes
+    memoryLimit: <number>,           // memory constraint in bytes
+    sso: <boolean>                   // Enable single sign-on
 }
 ```
 
@@ -257,6 +258,8 @@ is integrated with Cloudron Authentication.
 
 `manifest` is the [application manifest](/references/manifest.html).
 
+For apps that support optional single sign-on, the `sso` field can be used to disable Cloudron authentication. By default, single sign-on is enabled.
+
 ### List apps
 
 GET `/api/v1/apps/:appId` <scope>admin</scope>