diff --git a/devi b/devi
index df1dcc4..5da9c7b 100755
--- a/devi
+++ b/devi
@@ -64,6 +64,11 @@ if [[ "$(strip_dash $1)" == "deploy" ]]; then
     mvn clean install -Pkubernetes -DskipTests
 fi
 
+if [[ "$(strip_dash $1)" == "deploy-oidc" ]]; then
+    echo " Deploy to Imixs-Cloud..."
+
+    mvn clean install -Pkubernetes-oidc -DskipTests
+fi
 
 # Überprüfen, ob keine Parameter übergeben wurden - standard build
 if [[ $# -eq 0 ]]; then
@@ -75,6 +80,7 @@ if [[ $# -eq 0 ]]; then
     echo "   -hot   : Manik Hotdeploy Starten"
     echo "   -test  : Run tests"
     echo "   -deploy: Imixs-Cloud Deployment starten "
+    echo "   -deploy-oidc: Imixs-Cloud Deployment mit SSO starten "
     echo "   -setup : Developer Umgebung neu aufbauen und Docker Container starten "
     echo "_________________________________________"
     echo " "
diff --git a/office-alexander-logistics-app/pom.xml b/office-alexander-logistics-app/pom.xml
index f427508..c353190 100644
--- a/office-alexander-logistics-app/pom.xml
+++ b/office-alexander-logistics-app/pom.xml
@@ -123,7 +123,73 @@
 				</plugins>
 			</build>
 		</profile>
+		<profile>
+			<id>kubernetes-oidc</id>
+			<!-- oidc -->
+			<dependencies>
+				<dependency>
+					<groupId>org.imixs.workflow</groupId>
+					<artifactId>imixs-office-workflow-oidc</artifactId>
+					<scope>compile</scope>
+					<version>${org.imixs.office.version}</version>
+				</dependency>
+			</dependencies>
+			<build>
+				<plugins>
+					<plugin>
+						<artifactId>maven-war-plugin</artifactId>
+						<configuration>
+							<webResources>
+								<resource>
+									<filtering>true</filtering>
+									<directory>oidc/</directory>
+									<includes>
+										<include>**/*</include>
+									</includes>
+								</resource>
+							</webResources>
+						</configuration>
+					</plugin>
+					<plugin>
+						<groupId>org.apache.maven.plugins</groupId>
+						<artifactId>maven-antrun-plugin</artifactId>
+						<version>1.8</version>
+						<executions>
+							<execution>
+								<phase>install</phase>
+								<configuration>
+									<target>
+										<exec executable="docker">
+											<arg value="build" />
+											<arg value="-t" />
+											<arg
+												value="imixs/${imixs-office.applicationname}-oidc:${project.version}" />
+											<arg value="../." />
+										</exec>
+										<exec executable="docker">
+											<arg value="tag" />
+											<arg
+												value="imixs/${imixs-office.applicationname}-oidc:${project.version}" />
+											<arg
+												value="${org.imixs.kubernetes.registry}/imixs/${imixs-office.applicationname}-oidc:${project.version}" />
+										</exec>
+										<exec executable="docker">
+											<arg value="push" />
+											<arg
+												value="${org.imixs.kubernetes.registry}/imixs/${imixs-office.applicationname}-oidc:${project.version}" />
+										</exec>
+									</target>
+								</configuration>
+								<goals>
+									<goal>run</goal>
+								</goals>
+							</execution>
+						</executions>
+					</plugin>
 
+				</plugins>
+			</build>
+		</profile>
 	</profiles>
 	<build>
 		<testResources>
diff --git a/office-alexander-logistics-app/src/oidc/WEB-INF/jboss-web.xml b/office-alexander-logistics-app/src/oidc/WEB-INF/jboss-web.xml
new file mode 100644
index 0000000..4e8b630
--- /dev/null
+++ b/office-alexander-logistics-app/src/oidc/WEB-INF/jboss-web.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<jboss-web>
+	<!-- Mail Ref -->
+	<resource-ref>
+		<res-ref-name>mail/org.imixs.workflow.mail</res-ref-name>
+		<res-type>jakarta.mail.Session</res-type>
+		<jndi-name>java:/mail/org.imixs.workflow.mail</jndi-name>
+	</resource-ref>
+
+	<context-root>/</context-root>
+
+	<!-- Disable this setting only for OpenID Connect  
+	<security-domain>imixsrealm</security-domain>
+	-->
+
+</jboss-web>
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index b6f3eab..1de42dc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,6 +88,10 @@
 			<id>kubernetes</id>
 			<!-- build and push to rep - see ear module for details -->
 		</profile>
+		<profile>
+			<id>kubernetes-oidc</id>
+			<!-- build and push to rep - see ear module for details -->
+		</profile>
 	</profiles>