diff --git a/changelog/unreleased/fix-defaults-OCIS_LDAP_DISABLE_USER_MECHANISM.md b/changelog/unreleased/fix-defaults-OCIS_LDAP_DISABLE_USER_MECHANISM.md
new file mode 100644
index 000000000..cc02630d6
--- /dev/null
+++ b/changelog/unreleased/fix-defaults-OCIS_LDAP_DISABLE_USER_MECHANISM.md
@@ -0,0 +1,6 @@
+Enhancement: Fix envvar defaults
+
+Defaults for the envvar OCIS_LDAP_DISABLE_USER_MECHANISM were not used consistently, correct is `attribute`.
+
+https://github.com/owncloud/ocis/pull/6516
+https://github.com/owncloud/ocis/issues/6513
diff --git a/services/auth-basic/pkg/config/defaults/defaultconfig.go b/services/auth-basic/pkg/config/defaults/defaultconfig.go
index 3cdd5fd86..b21153fc3 100644
--- a/services/auth-basic/pkg/config/defaults/defaultconfig.go
+++ b/services/auth-basic/pkg/config/defaults/defaultconfig.go
@@ -51,7 +51,7 @@ func DefaultConfig() *config.Config {
 				UserObjectClass:          "inetOrgPerson",
 				GroupObjectClass:         "groupOfNames",
 				BindDN:                   "uid=reva,ou=sysusers,o=libregraph-idm",
-				DisableUserMechanism:     "none",
+				DisableUserMechanism:     "attribute",
 				LdapDisabledUsersGroupDN: "cn=DisabledUsersGroup,ou=groups,o=libregraph-idm",
 				IDP:                      "https://localhost:9200",
 				UserSchema: config.LDAPUserSchema{
diff --git a/services/users/pkg/config/defaults/defaultconfig.go b/services/users/pkg/config/defaults/defaultconfig.go
index 0523158e6..533d63621 100644
--- a/services/users/pkg/config/defaults/defaultconfig.go
+++ b/services/users/pkg/config/defaults/defaultconfig.go
@@ -51,7 +51,7 @@ func DefaultConfig() *config.Config {
 				UserObjectClass:          "inetOrgPerson",
 				GroupObjectClass:         "groupOfNames",
 				BindDN:                   "uid=reva,ou=sysusers,o=libregraph-idm",
-				DisableUserMechanism:     "none",
+				DisableUserMechanism:     "attribute",
 				LdapDisabledUsersGroupDN: "cn=DisabledUsersGroup,ou=groups,o=libregraph-idm",
 				UserTypeAttribute:        "ownCloudUserType",
 				IDP:                      "https://localhost:9200",