diff --git a/roles/pagure/upstreamfirst-frontend/tasks/main.yml b/roles/pagure/upstreamfirst-frontend/tasks/main.yml
index 513c254ed4..f328d54670 100644
--- a/roles/pagure/upstreamfirst-frontend/tasks/main.yml
+++ b/roles/pagure/upstreamfirst-frontend/tasks/main.yml
@@ -18,6 +18,8 @@
   - stunnel
   # Use haveged to ensure the server keeps some entropy
   - haveged
+  # make sure python2-openidc-client is installed
+  - python2-openidc-client
   tags:
   - pagure
   - packages