diff --git a/src/main/java/net/siegeln/cameleer/saas/vendor/VendorTenantService.java b/src/main/java/net/siegeln/cameleer/saas/vendor/VendorTenantService.java
index 4e5aa03..7b197cf 100644
--- a/src/main/java/net/siegeln/cameleer/saas/vendor/VendorTenantService.java
+++ b/src/main/java/net/siegeln/cameleer/saas/vendor/VendorTenantService.java
@@ -143,7 +143,10 @@ public class VendorTenantService {
                             "displayNameClaim", "name",
                             "rolesClaim", "roles",
                             "audience", "https://api.cameleer.local",
-                            "additionalScopes", List.of()
+                            "additionalScopes", List.of(
+                                "urn:logto:scope:organizations",
+                                "urn:logto:scope:organization_roles"
+                            )
                         ));
                         log.info("Pushed OIDC config to server for tenant {}", tenant.getSlug());
                     } catch (Exception e) {