diff --git a/cesnet-central/deployments/central.yaml b/cesnet-central/deployments/central.yaml
index 6c2e89381d4caedf103f60d64e09d44a87db64aa..31603237479ac5ffdaa7ff0b3078052de1612e0a 100644
--- a/cesnet-central/deployments/central.yaml
+++ b/cesnet-central/deployments/central.yaml
@@ -94,8 +94,10 @@ hub:
       client_id: "{{ secret['client_id'] }}"
       client_secret: "{{ secret['client_secret'] }}"
       oauth_callback_url: "https://eosc.zcu.cz/hub/oauth_callback"
-      scope: ["openid", "profile", "email", "entitlements"]
+      scope: ["openid", "profile", "email", "offline_access", "entitlements"]
       username_key: "sub"
+      extra_authorize_params:
+        prompt: consent
     JupyterHub:
       admin_access: true
       authenticate_prometheus: false