diff --git a/roles/koschei/frontend/templates/httpd.conf.j2 b/roles/koschei/frontend/templates/httpd.conf.j2
index 207b897584..8b5a46ab2c 100644
--- a/roles/koschei/frontend/templates/httpd.conf.j2
+++ b/roles/koschei/frontend/templates/httpd.conf.j2
@@ -15,4 +15,12 @@
         AllowOverride All
         Require all granted
     </Directory>
+
+{% if env == 'staging' %}
+    <Location /login>
+        Require valid-user
+        AuthType OpenID
+        AuthOpenIDSingleIdP https://{{ koschei_openid_provider }}/
+    </Location>
+{% endif %}
 </VirtualHost>