diff --git a/config/config.example.toml b/config/config.example.toml
index 3229bee3..2d72a44e 100644
--- a/config/config.example.toml
+++ b/config/config.example.toml
@@ -57,6 +57,11 @@ forced = false
 # This is an example configuration
 # The provider MUST support OpenID Connect with .well-known discovery
 # Most notably, GitHub does not support this
+# Redirect URLs in your OAuth provider can be set to this:
+# <base_url>/oauth/sso/<provider_id>/callback*
+# The asterisk is important, as it allows for any query parameters to be passed
+# Authentik for example uses regex so it can be set to (regex):
+# <base_url>/oauth/sso/<provider_id>/callback.*
 [[oidc.providers]]
 # name = "CPlusPatch ID"
 # id = "cpluspatch-id"