diff --git a/templates/grafana.ini.j2 b/templates/grafana.ini.j2
index 035f21e..d10b5be 100644
--- a/templates/grafana.ini.j2
+++ b/templates/grafana.ini.j2
@@ -343,6 +343,10 @@ role_attribute_path = {{ grafana.config.oauth2.role_attribute_path }}
 ; This might be required if the OAuth provider is not RFC6749 compliant, only supporting credentials passed via POST payload
 ;send_client_credentials_via_post = false
 
+; TEMPFIX fix oauth login bug
+; https://github.com/grafana/grafana/issues/70203#issuecomment-1675980609
+oauth_allow_insecure_email_lookup=true
+
 #################################### SAML Auth ###########################
 [auth.saml] # Enterprise only
 # Defaults to false. If true, the feature is enabled.