diff --git a/lib/mv_web/live/global_settings_live.ex b/lib/mv_web/live/global_settings_live.ex
index 6a456fe..c7a36b1 100644
--- a/lib/mv_web/live/global_settings_live.ex
+++ b/lib/mv_web/live/global_settings_live.ex
@@ -646,6 +646,11 @@ defmodule MvWeb.GlobalSettingsLive do
           </div>
 
           <h3 class="font-medium mb-3">{gettext("OIDC (Single Sign-On)")}</h3>
+          <p data-testid="oidc-sso-description" class="text-sm text-base-content/70 mb-4">
+            {gettext(
+              "OIDC enables Single Sign-On: once configured, members sign in through your identity provider instead of a separate Mila password."
+            )}
+          </p>
           <%= if @oidc_env_configured do %>
             <p class="text-sm text-base-content/70 mb-4">
               {gettext("Some values are set via environment variables. Those fields are read-only.")}
diff --git a/priv/gettext/de/LC_MESSAGES/default.po b/priv/gettext/de/LC_MESSAGES/default.po
index c8713e9..0334332 100644
--- a/priv/gettext/de/LC_MESSAGES/default.po
+++ b/priv/gettext/de/LC_MESSAGES/default.po
@@ -2620,6 +2620,11 @@ msgstr "OIDC"
 msgid "OIDC (Single Sign-On)"
 msgstr "OIDC (Single Sign-On)"
 
+#: lib/mv_web/live/global_settings_live.ex
+#, elixir-autogen, elixir-format
+msgid "OIDC enables Single Sign-On: once configured, members sign in through your identity provider instead of a separate Mila password."
+msgstr "OIDC aktiviert Single Sign-On: Sobald es eingerichtet ist, melden sich Mitglieder über deinen Identity-Provider an statt mit einem separaten Mila-Passwort."
+
 #: lib/mv_web/live/member_live/show/membership_fees_component.ex
 #, elixir-autogen, elixir-format
 msgid "Oct."
diff --git a/priv/gettext/default.pot b/priv/gettext/default.pot
index 7a90bee..c989f7b 100644
--- a/priv/gettext/default.pot
+++ b/priv/gettext/default.pot
@@ -2621,6 +2621,11 @@ msgstr ""
 msgid "OIDC (Single Sign-On)"
 msgstr ""
 
+#: lib/mv_web/live/global_settings_live.ex
+#, elixir-autogen, elixir-format
+msgid "OIDC enables Single Sign-On: once configured, members sign in through your identity provider instead of a separate Mila password."
+msgstr ""
+
 #: lib/mv_web/live/member_live/show/membership_fees_component.ex
 #, elixir-autogen, elixir-format
 msgid "Oct."
diff --git a/priv/gettext/en/LC_MESSAGES/default.po b/priv/gettext/en/LC_MESSAGES/default.po
index cf1faea..489020f 100644
--- a/priv/gettext/en/LC_MESSAGES/default.po
+++ b/priv/gettext/en/LC_MESSAGES/default.po
@@ -2621,6 +2621,11 @@ msgstr ""
 msgid "OIDC (Single Sign-On)"
 msgstr ""
 
+#: lib/mv_web/live/global_settings_live.ex
+#, elixir-autogen, elixir-format
+msgid "OIDC enables Single Sign-On: once configured, members sign in through your identity provider instead of a separate Mila password."
+msgstr ""
+
 #: lib/mv_web/live/member_live/show/membership_fees_component.ex
 #, elixir-autogen, elixir-format
 msgid "Oct."
diff --git a/test/mv_web/live/global_settings_live_test.exs b/test/mv_web/live/global_settings_live_test.exs
index 9be12b9..6cb8f5b 100644
--- a/test/mv_web/live/global_settings_live_test.exs
+++ b/test/mv_web/live/global_settings_live_test.exs
@@ -283,4 +283,21 @@ defmodule MvWeb.GlobalSettingsLiveTest do
       end
     end
   end
+
+  describe "OIDC section explanation (§1.1)" do
+    setup %{conn: conn} do
+      user = create_test_user(%{email: "admin@example.com"})
+      conn = conn_with_oidc_user(conn, user)
+      {:ok, conn: conn}
+    end
+
+    test "OIDC section shows a Single Sign-On explanation", %{conn: conn} do
+      {:ok, view, _html} = live(conn, ~p"/settings")
+
+      assert has_element?(view, "[data-testid='oidc-sso-description']")
+
+      assert view |> element("[data-testid='oidc-sso-description']") |> render() =~
+               "Single Sign-On"
+    end
+  end
 end