diff --git a/setup.py b/setup.py
index 56551534c..9351fe37f 100644
--- a/setup.py
+++ b/setup.py
@@ -42,7 +42,9 @@
         'dandischema~=0.8.2',
         'django~=4.1.0',
         'django-admin-display',
-        'django-allauth',
+        # TODO: unpin allauth when https://github.com/girder/django-composed-configuration/pull/189
+        # is merged and released
+        'django-allauth>=0.56.1',
         'django-click',
         'django-configurations[database,email]',
         'django-extensions',