diff --git a/docker-compose.yml b/docker-compose.yml
index 8a94c307cb1cab1840f0197f49e3bd04ceae5a24..8ed800f66fe7a0ea46c8c888142c2daffd235878 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -26,6 +26,7 @@ services:
       - ./oidc-clients.json:/etc/satosa/oidc-clients.json
       - ./blacklist.json:/etc/satosa/blacklist.json
       - ./ssl:/etc/satosa/ssl:ro
+    user: ${SATOSA_CONTAINER_USER:-satosa}
     stop_grace_period: "2.5s"
 
 networks:
diff --git a/env.example b/env.example
index ac6e29a9440ee2c8c660ab6eee95ec2669456679..87036c9db5cf54352744dd5c304b8cd3fda0ec3f 100644
--- a/env.example
+++ b/env.example
@@ -1,5 +1,6 @@
 # deployment configuration
 SATOSA_DEPLOYMENT_PORT=443
+SATOSA_CONTAINER_USER=satosa
 
 # general satosa configuration
 SATOSA_BASE_URL=https://localhost