diff --git a/server/auth/auth.go b/server/auth/auth.go
index 6c2ad549d..6fe8b1bdd 100644
--- a/server/auth/auth.go
+++ b/server/auth/auth.go
@@ -340,10 +340,13 @@ func (svc *service) UpdateSettings(s *settings.Settings) {
 		}
 	}
 
-	if len(svc.settings.Providers) != len(s.Providers) {
-		svc.log.Debug("setting changed", zap.Int("providers", len(s.Providers)))
-		external.SetupGothProviders(svc.log, svc.opt.ExternalRedirectURL, s.Providers...)
-	}
+	// Always reload external providers.
+	// This could be optionally skipped by strictly comparing if they actually changed.
+	// OIDC complicates it a bit wit all the mix and matching.
+	// Should be ok for now.
+	// @todo see if we can conditionally skip this
+	svc.log.Debug("setting changed", zap.Int("providers", len(s.Providers)))
+	external.SetupGothProviders(svc.log, svc.opt.ExternalRedirectURL, s.Providers...)
 
 	svc.settings = s
 	svc.handlers.Settings = s