diff --git a/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OAuth2Properties.java b/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OAuth2Properties.java
index 48dd84a03c..1ec3ad08fe 100644
--- a/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OAuth2Properties.java
+++ b/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OAuth2Properties.java
@@ -68,9 +68,9 @@ public void setPostLogoutRedirectUri(String postLogoutRedirectUri) {
 
   public static class OAuth2IdentityProviderProperties {
     /**
-     * Enable {@link OAuth2IdentityProvider}.
+     * Enable {@link OAuth2IdentityProvider}. Default {@code true}.
      */
-    private boolean enabled = false;
+    private boolean enabled = true;
 
     /**
      * Name of the attribute (claim) that holds the groups.
diff --git a/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OperatonSpringSecurityOAuth2AutoConfiguration.java b/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OperatonSpringSecurityOAuth2AutoConfiguration.java
index 6233e27c34..c28d0a637e 100644
--- a/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OperatonSpringSecurityOAuth2AutoConfiguration.java
+++ b/spring-boot-starter/starter-security/src/main/java/org/operaton/bpm/spring/boot/starter/security/oauth2/OperatonSpringSecurityOAuth2AutoConfiguration.java
@@ -88,7 +88,7 @@ public FilterRegistrationBean<?> webappAuthenticationFilter() {
   }
 
   @Bean
-  @ConditionalOnProperty(name = "identity-provider.enabled", havingValue = "true", prefix = OAuth2Properties.PREFIX)
+  @ConditionalOnProperty(name = "identity-provider.enabled", havingValue = "true", prefix = OAuth2Properties.PREFIX, matchIfMissing = true)
   public OAuth2IdentityProviderPlugin identityProviderPlugin() {
     logger.debug("Registering OAuth2IdentityProviderPlugin");
     return new OAuth2IdentityProviderPlugin();