diff --git a/scripts/upgrade b/scripts/upgrade
index 0462e30..b81e321 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -248,13 +248,13 @@ fi
 # RE-ENABLE SSOWAT
 #=================================================
 ynh_print_info "re-enable SSOWAT"
-# Make app public if necessary
-if [ $is_public -eq 1 ]
+# Make app private if necessary
+if [ $is_public -eq 0 ]
 then
     # unprotected_uris allows SSO credentials to be passed anyway.
-    ynh_app_setting_set "$app" unprotected_uris "/"
+    ynh_app_setting_delete "$app" unprotected_uris
 else
-    ynh_app_setting_set "$app" unprotected_uris ""
+    ynh_app_setting_set "$app" unprotected_uris "/"
 fi
 
 systemctl reload nginx