diff --git a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
index f837b55..5456167 100644
--- a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
+++ b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
@@ -70,6 +70,7 @@
                   default_method = "google_oauth";
                   names = {
                     google_oauth = "Google account";
+                    simple = "Username / password";
                   };
                 };
                 cookie = {
@@ -87,6 +88,11 @@
                   ];
                 };
                 providers = {
+                  simple = {
+                    groups = {
+                      admin = [ "dev" ];
+                    };
+                  };
                   google_oauth = {
                     client_id = "545475967061-cag4g1qf0pk33g3pdbom4v69562vboc8.apps.googleusercontent.com";
                     redirect_url = "https://sso.${lib.my.pubDomain}/login";
diff --git a/secrets/nginx-sso.yaml.age b/secrets/nginx-sso.yaml.age
index 1af6255..606dd6d 100644
Binary files a/secrets/nginx-sso.yaml.age and b/secrets/nginx-sso.yaml.age differ