diff --git a/templates/backstage-configmap.yaml b/templates/backstage-configmap.yaml
index 4664951..e06ab67 100644
--- a/templates/backstage-configmap.yaml
+++ b/templates/backstage-configmap.yaml
@@ -45,15 +45,19 @@ data:
       environment: production
       session:
         secret: ${BACKEND_SECRET}
+      # Configure allowed email domains for Google OAuth
+      # Users with these email domains can sign in without User entities in catalog
+      allowedEmailDomains:
+        - onlinesales.ai
+        # Add more domains if needed:
+        # - partner-company.com
       providers:
         google:
           production:
             clientId: ${AUTH_GOOGLE_CLIENT_ID}
             clientSecret: ${AUTH_GOOGLE_CLIENT_SECRET}
-            signIn:
-              resolvers:
-              # See https://backstage.io/docs/auth/google/provider#resolvers for more resolvers
-                - resolver: emailLocalPartMatchingUserEntityName
+            # Custom domain-based resolver is configured in backend code
+            # See packages/backend/src/plugins/auth.ts
 
     integrations:
       gitea: