diff --git a/services/idp/README.md b/services/idp/README.md
new file mode 100644
index 000000000..6edb1e525
--- /dev/null
+++ b/services/idp/README.md
@@ -0,0 +1,12 @@
+# IDP Service
+
+This service provides a builtin minimal OpenID Connect provider based on
+[LibreGraph Connect (lico)[https://github.com/libregraph/lico] for oCIS.
+
+It is mainly targeted at smaller installations. For larger setups it is
+recommended to replace IDP with and external OpenID Connect Provider.
+
+By default it is configured to use the ocis service IDM as its LDAP backend for
+looking up and authenticating users. Other backends (e.g. an external LDAP
+server) can be configure via a set of
+[enviroment variables](https://owncloud.dev/services/idp/configuration/#environment-variables).