diff --git a/auth/auth.nix b/auth/auth.nix
index 3734d6f..e0ccaf5 100644
--- a/auth/auth.nix
+++ b/auth/auth.nix
@@ -62,7 +62,7 @@ lib.mkIf config.selfprivacy.sso.enable {
     enableServer = true;
 
     # kanidm with Rust code patches for OAuth and admin passwords provisioning
-    package = pkgs.kanidm_1_5.withSecretProvisioning;
+    package = pkgs.kanidm_1_6.withSecretProvisioning;
 
     serverSettings = {
       inherit domain;