diff --git a/scripts/install b/scripts/install
index a6d3aec..61828ba 100755
--- a/scripts/install
+++ b/scripts/install
@@ -169,6 +169,8 @@ ynh_app_setting_delete $app skipped_uris
 if [ $is_public -eq 1 ]; then
 	# unprotected_uris allows SSO credentials to be passed anyway.
 	ynh_app_setting_set $app unprotected_uris "/"
+	# protect admin area
+	ynh_app_setting_set $app protected_uris "/admin"
 fi
 
 #=================================================
diff --git a/scripts/upgrade b/scripts/upgrade
index c719239..9302134 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -181,6 +181,8 @@ if [ $is_public -eq 1 ]
 then
 	# unprotected_uris allows SSO credentials to be passed anyway
 	ynh_app_setting_set $app unprotected_uris "/"
+	# protect admin area
+	ynh_app_setting_set $app protected_uris "/admin"
 fi
 
 #=================================================