diff --git a/data/templates/slapd/yunohost.schema b/data/templates/slapd/yunohost.schema
index 472518f35..9e7543378 100644
--- a/data/templates/slapd/yunohost.schema
+++ b/data/templates/slapd/yunohost.schema
@@ -13,9 +13,21 @@ attributetype ( 1.3.6.1.4.1.17953.9.1.3 NAME 'inheritPermission'
   DESC 'Yunohost permission for user on permission side'
   SUP distinguishedName )
 attributetype ( 1.3.6.1.4.1.17953.9.1.4 NAME 'URL'
-  DESC 'Yunohost application URL'
+  DESC 'Yunohost permission main URL'
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.17953.9.1.5 NAME 'additionalUrls'
+  DESC 'Yunohost permission additionnal URL'
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
-attributetype ( 1.3.6.1.4.1.17953.9.1.5 NAME 'isProtected'
+attributetype ( 1.3.6.1.4.1.17953.9.1.6 NAME 'authHeader'
+  DESC 'Yunohost application, enable authentication header'
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.17953.9.1.7 NAME 'label'
+  DESC 'Yunohost permission label, also used for the tile name in the SSO'
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.17953.9.1.8 NAME 'showTile'
+  DESC 'Yunohost application, show/hide the tile in the SSO for this permission'
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
+attributetype ( 1.3.6.1.4.1.17953.9.1.9 NAME 'isProtected'
   DESC 'Yunohost application permission protection'
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
 # OBJECTCLASS
@@ -27,8 +39,8 @@ objectclass ( 1.3.6.1.4.1.17953.9.2.1 NAME 'groupOfNamesYnh'
 objectclass ( 1.3.6.1.4.1.17953.9.2.2 NAME 'permissionYnh'
   DESC 'a Yunohost application'
   SUP top AUXILIARY
-  MUST ( cn $ isProtected )
-  MAY ( groupPermission $ inheritPermission $ URL ) )
+  MUST ( cn $ authHeader $ label $ showTile $ isProtected )
+  MAY ( groupPermission $ inheritPermission $ URL $ additionalUrls ) )
 # For User
 objectclass ( 1.3.6.1.4.1.17953.9.2.3 NAME 'userPermissionYnh'
   DESC 'a Yunohost application'