diff --git a/docs/auth/identity-resolver.md b/docs/auth/identity-resolver.md
index fa344afcef..9414c9aa14 100644
--- a/docs/auth/identity-resolver.md
+++ b/docs/auth/identity-resolver.md
@@ -51,10 +51,7 @@ export default async function createPlugin({
             // Let's use the username in the email ID as the user's default unique identifier inside Backstage
             const id = email.split('@')[0];
             // Let's add the unique ID in the list
-            ent.push(id)
-            // Note: While the complete entity references look like `kind:namespace/name`, it should be safe to assume
-            // that standalone strings without any : or / can be interpresed as user kind in the default namespace. So,
-            // a 'freben' inside the `ent` list should be translated to `User:default/freben` when making any assertions.
+            ent.push(`User:default/${id}`)
 
             // Let's call the GitHub Enterprise API inside the company and get the teams that the user belongs to
             const gheUsername = getGheUsername(email);
diff --git a/packages/backend/src/plugins/auth.ts b/packages/backend/src/plugins/auth.ts
index 1d8bbdc892..3157284df7 100644
--- a/packages/backend/src/plugins/auth.ts
+++ b/packages/backend/src/plugins/auth.ts
@@ -42,7 +42,7 @@ export default async function createPlugin({
             }
             const id = email.split('@')[0];
             const token = await ctx.tokenIssuer.issueToken({
-              claims: { sub: id, ent: [id] },
+              claims: { sub: id, ent: [`User:default/${id}`] },
             });
             return { id, token };
           },