diff --git a/environments/template/group_vars/template.yml b/environments/template/group_vars/template.yml
index 121808078..54823c324 100644
--- a/environments/template/group_vars/template.yml
+++ b/environments/template/group_vars/template.yml
@@ -260,6 +260,8 @@ myconext:
   feature_dry_run_email_cron: true
   feature_enable_account_linking: true
   feature_use_app: true
+  feature_use_global_uid: true
+  feature_force_global_uid_entities: "dummy_non_existing_entity,playground_client"
   sms_api_url: "https://rest.spryngsms.com/v1/messages"
   sms_api_route: "default"
   sp_entity_id: https://engine.{{ base_domain }}/authentication/sp/metadata
diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2
index 9e2af3722..7d3d7649c 100644
--- a/roles/myconext/templates/application.yml.j2
+++ b/roles/myconext/templates/application.yml.j2
@@ -160,6 +160,12 @@ feature:
   enable_account_linking: {{ myconext.feature_enable_account_linking }}
   # Set to true to show the app login option
   use_app: {{ myconext.feature_use_app }}
+  # When true (default) release the global uid in the uid and eduPersonPrincipalName SAML attributes.
+  # When false, release the per-SP targeted eduID instead.
+  use_global_uid: {{ myconext.feature_use_global_uid }}
+  # SP entityIds that always receive the global uid in the uid and eduPersonPrincipalName SAML attributes,
+  # even when use_global_uid is false.
+  force_global_uid_entities: "{{ myconext.feature_force_global_uid_entities }}"
 
 default_affiliate_email_domain: eduid.nl