diff --git a/Gemfile.lock b/Gemfile.lock
index 7938197c5b7..70aee1863b3 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -9,13 +9,13 @@ GIT
 
 GIT
   remote: https://github.com/opf/omniauth-openid-connect.git
-  revision: 0d2cd719e87021a14dd2b5cf8a6bf1831d4a497e
-  ref: 0d2cd71
+  revision: efddc061a72791db019259768a4656c0435709e8
+  ref: efddc061a72791db019259768a4656c0435709e8
   specs:
     omniauth-openid-connect (0.4.0)
       addressable (~> 2.5)
       omniauth (~> 1.6)
-      openid_connect (~> 1.1.6)
+      openid_connect (~> 2.2.0)
 
 GIT
   remote: https://github.com/opf/omniauth-openid_connect-providers.git
@@ -625,16 +625,19 @@ GEM
       omniauth (~> 1.3, >= 1.3.2)
       ruby-saml (~> 1.9)
     open4 (1.3.4)
-    openid_connect (1.1.8)
+    openid_connect (2.2.0)
       activemodel
       attr_required (>= 1.0.0)
-      json-jwt (>= 1.5.0)
-      rack-oauth2 (>= 1.6.1)
-      swd (>= 1.0.0)
+      faraday (~> 2.0)
+      faraday-follow_redirects
+      json-jwt (>= 1.16)
+      net-smtp
+      rack-oauth2 (~> 2.2)
+      swd (~> 2.0)
       tzinfo
       validate_email
       validate_url
-      webfinger (>= 1.0.1)
+      webfinger (~> 2.0)
     openproject-token (2.2.0)
       activemodel
     os (1.1.4)
diff --git a/Gemfile.modules b/Gemfile.modules
index 7c3d66ba526..cbfc2a1b068 100644
--- a/Gemfile.modules
+++ b/Gemfile.modules
@@ -14,7 +14,7 @@ gem 'omniauth-openid_connect-providers',
 
 gem 'omniauth-openid-connect',
     git: 'https://github.com/opf/omniauth-openid-connect.git',
-    ref: '0d2cd71'
+    ref: 'efddc061a72791db019259768a4656c0435709e8'
 
 group :opf_plugins do
     # included so that engines can reference OpenProject::Version