diff --git a/cesnet-central/deployments/fullhub.yaml b/cesnet-central/deployments/fullhub.yaml
index 403d4725c62a9292011d9f612d9495cd539873e3..c5f5159018648e73cf9634cfbe2ffe433c00b733 100644
--- a/cesnet-central/deployments/fullhub.yaml
+++ b/cesnet-central/deployments/fullhub.yaml
@@ -108,9 +108,13 @@ hub:
     status:
       url: "http://status-web/"
       admin: true
+    jwt:
+      url: "http://localhost:1984/"
+      command: ["fastapi", "run", "--port", "1984", "/egi-notebooks-hub/egi_notebooks_hub/services/api_wrapper.py"]
+      display: false
   image:
     name: valtri/hub
-    tag: "3.x-eosc4" # EOSC, jupyter 3.1.0
+    tag: "eosc7-jwt"
   config:
     Authenticator:
       enable_auth_state: true
@@ -129,8 +133,9 @@ hub:
       client_id: "{{ secret['client_id'] }}"
       client_secret: "{{ secret['client_secret'] }}"
       oauth_callback_url: "https://fullhub.eosc.zcu.cz/hub/oauth_callback"
+      openid_configuration_url: "https://proxy.testing.eosc-federation.eu/.well-known/openid-configuration"
       scope: ["openid", "profile", "email", "offline_access", "entitlements"]
-      username_key: "sub"
+      username_claim: "sub"
       extra_authorize_params:
         prompt: consent
     JupyterHub: