diff --git a/api/v1/sso.go b/api/v1/sso.go
index a9e7e415..4f5be5ee 100644
--- a/api/v1/sso.go
+++ b/api/v1/sso.go
@@ -23,7 +23,7 @@ type OauthProxyServiceConf struct {
 
 var ssoDefault = SSO{
 	Enabled:                          false,
-	Image:                            "saas-oauth2-proxy:latest",
+	Image:                            "oauth2-proxy:v7.4.ssov3.p6",
 	AdminUser:                        "",
 	Provider:                         "",
 	EmailDomain:                      nil,
diff --git a/pkg/desired/state.go b/pkg/desired/state.go
index 74e1a5f7..0709322a 100644
--- a/pkg/desired/state.go
+++ b/pkg/desired/state.go
@@ -249,7 +249,7 @@ func cnvrgTemplateFuncs() map[string]interface{} {
 				fmt.Sprintf(`http_address = "0.0.0.0:%d"`, proxyPort),
 				fmt.Sprintf(`redirect_url = "%v"`, getSSORedirectUrl(obj, svc)),
 				fmt.Sprintf("skip_auth_regex = %v", skipAuthUrls),
-				fmt.Sprintf(`token_validation_regex = %v`, tokenValidationRegexes),
+				fmt.Sprintf("skip_auth_routes = [\"^\\/api\"]"),
 				fmt.Sprintf(`email_domains = %v`, emailsDomains),
 				fmt.Sprintf(`client_id = "%v"`, sso.ClientID),
 				fmt.Sprintf(`client_secret = "%v"`, sso.ClientSecret),