diff --git a/google-cloud-run/op-scim-bridge.yaml b/google-cloud-run/op-scim-bridge.yaml
index 56ef6d2c..ee9083de 100644
--- a/google-cloud-run/op-scim-bridge.yaml
+++ b/google-cloud-run/op-scim-bridge.yaml
@@ -12,6 +12,9 @@ spec:
         run.googleapis.com/startup-cpu-boost: "true"
         run.googleapis.com/container-dependencies: '{"scim":["redis"]}'
     spec:
+      # 🔧 This value will be dynamically replaced during deployment using envsubst
+      serviceAccountName: ${SERVICE_ACCOUNT_NAME}
+
       containers:
         - name: scim
           image: 1password/scim:v2.9.13