diff --git a/Gemfile b/Gemfile
index 87433ba288..a121cd64f1 100644
--- a/Gemfile
+++ b/Gemfile
@@ -64,6 +64,7 @@ gem 'blockenspiel'
 gem 'acts-as-taggable-on', '~> 3.4'
 gem 'paper_trail', '~> 3.0.8'
 gem 'diffy'
+gem 'skylight', '< 2.0'
 
 gem 'wicked_pdf'
 gem 'wkhtmltopdf-binary'
diff --git a/Gemfile.lock b/Gemfile.lock
index 130be71f7d..ee20a0079b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -641,6 +641,8 @@ GEM
     shellany (0.0.1)
     shoulda-matchers (1.1.0)
       activesupport (>= 3.0.0)
+    skylight (1.5.0)
+      activesupport (>= 3.0.0)
     spinjs-rails (1.3)
       rails (>= 3.1)
     sprockets (2.2.3)
@@ -784,6 +786,7 @@ DEPENDENCIES
   sass-rails (~> 3.2.3)
   shoulda-matchers
   simple_form!
+  skylight (< 2.0)
   spinjs-rails
   spree!
   spree_auth_devise!
diff --git a/config/application.yml.example b/config/application.yml.example
index 310e248726..a75a3b3015 100644
--- a/config/application.yml.example
+++ b/config/application.yml.example
@@ -27,6 +27,9 @@ CURRENCY: AUD
 # see: https://developers.google.com/maps/documentation/javascript/get-api-key
 # GOOGLE_MAPS_API_KEY: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 
+# optional, see: https://www.skylight.io/oss
+# SKYLIGHT_AUTHENTICATION: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+
 # Stripe Connect details for instance account
 # Find these under 'API keys' and 'Connect' in your Stripe account dashboard -> Account Settings
 # Under 'Connect', the Redirect URI should be set to https://YOUR_SERVER_URL/stripe/callbacks (e.g. https://openfoodnetwork.org.uk/stripe/callbacks)