diff --git a/.changeset/witty-donuts-learn.md b/.changeset/witty-donuts-learn.md
new file mode 100644
index 0000000000..d5b291ec97
--- /dev/null
+++ b/.changeset/witty-donuts-learn.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': minor
+---
+
+Added the disableRefresh option to the OAuth2 config
diff --git a/plugins/auth-backend/src/providers/oauth2/provider.ts b/plugins/auth-backend/src/providers/oauth2/provider.ts
index f174543a63..934e0a19d8 100644
--- a/plugins/auth-backend/src/providers/oauth2/provider.ts
+++ b/plugins/auth-backend/src/providers/oauth2/provider.ts
@@ -177,6 +177,8 @@ export const createOAuth2Provider = (
       const authorizationUrl = envConfig.getString('authorizationUrl');
       const tokenUrl = envConfig.getString('tokenUrl');
       const scope = envConfig.getOptionalString('scope');
+      const disableRefresh =
+        envConfig.getOptionalBoolean('disableRefresh') ?? false;
 
       const provider = new OAuth2AuthProvider({
         clientId,
@@ -188,7 +190,7 @@ export const createOAuth2Provider = (
       });
 
       return OAuthAdapter.fromConfig(globalConfig, provider, {
-        disableRefresh: false,
+        disableRefresh: disableRefresh,
         providerId,
         tokenIssuer,
       });