diff --git a/storage/pkg/command/authbasic.go b/storage/pkg/command/authbasic.go
index 834662085..249781c44 100644
--- a/storage/pkg/command/authbasic.go
+++ b/storage/pkg/command/authbasic.go
@@ -16,6 +16,7 @@ import (
 	"github.com/owncloud/ocis/storage/pkg/config"
 	"github.com/owncloud/ocis/storage/pkg/flagset"
 	"github.com/owncloud/ocis/storage/pkg/server/debug"
+	"github.com/owncloud/ocis/storage/pkg/tracing"
 	"github.com/thejerf/suture/v4"
 )
 
@@ -32,134 +33,50 @@ func AuthBasic(cfg *config.Config) *cli.Command {
 		},
 		Action: func(c *cli.Context) error {
 			logger := NewLogger(cfg)
-
-			if cfg.Tracing.Enabled {
-				switch t := cfg.Tracing.Type; t {
-				case "agent":
-					logger.Error().
-						Str("type", t).
-						Msg("Storage only supports the jaeger tracing backend")
-
-				case "jaeger":
-					logger.Info().
-						Str("type", t).
-						Msg("configuring storage to use the jaeger tracing backend")
-
-				case "zipkin":
-					logger.Error().
-						Str("type", t).
-						Msg("Storage only supports the jaeger tracing backend")
-
-				default:
-					logger.Warn().
-						Str("type", t).
-						Msg("Unknown tracing backend")
-				}
-
-			} else {
-				logger.Debug().
-					Msg("Tracing is not enabled")
-			}
-
-			var (
-				gr          = run.Group{}
-				ctx, cancel = context.WithCancel(context.Background())
-				//metrics     = metrics.New()
-			)
-
+			tracing.Configure(cfg, logger)
+			gr := run.Group{}
+			ctx, cancel := context.WithCancel(context.Background())
 			defer cancel()
 
-			// precreate folders
+			// pre-create folders
 			if cfg.Reva.AuthProvider.Driver == "json" && cfg.Reva.AuthProvider.JSON != "" {
 				if err := os.MkdirAll(filepath.Dir(cfg.Reva.AuthProvider.JSON), os.FileMode(0700)); err != nil {
 					return err
 				}
 			}
 
-			{
+			uuid := uuid.Must(uuid.NewV4())
+			pidFile := path.Join(os.TempDir(), "revad-"+c.Command.Name+"-"+uuid.String()+".pid")
 
-				uuid := uuid.Must(uuid.NewV4())
-				pidFile := path.Join(os.TempDir(), "revad-"+c.Command.Name+"-"+uuid.String()+".pid")
+			rcfg := authBasicConfigFromStruct(c, cfg)
 
-				rcfg := map[string]interface{}{
-					"core": map[string]interface{}{
-						"max_cpus":             cfg.Reva.AuthBasic.MaxCPUs,
-						"tracing_enabled":      cfg.Tracing.Enabled,
-						"tracing_endpoint":     cfg.Tracing.Endpoint,
-						"tracing_collector":    cfg.Tracing.Collector,
-						"tracing_service_name": c.Command.Name,
-					},
-					"shared": map[string]interface{}{
-						"jwt_secret": cfg.Reva.JWTSecret,
-					},
-					"grpc": map[string]interface{}{
-						"network": cfg.Reva.AuthBasic.GRPCNetwork,
-						"address": cfg.Reva.AuthBasic.GRPCAddr,
-						// TODO build services dynamically
-						"services": map[string]interface{}{
-							"authprovider": map[string]interface{}{
-								"auth_manager": cfg.Reva.AuthProvider.Driver,
-								"auth_managers": map[string]interface{}{
-									"json": map[string]interface{}{
-										"users": cfg.Reva.AuthProvider.JSON,
-									},
-									"ldap": map[string]interface{}{
-										"hostname":      cfg.Reva.LDAP.Hostname,
-										"port":          cfg.Reva.LDAP.Port,
-										"base_dn":       cfg.Reva.LDAP.BaseDN,
-										"loginfilter":   cfg.Reva.LDAP.LoginFilter,
-										"bind_username": cfg.Reva.LDAP.BindDN,
-										"bind_password": cfg.Reva.LDAP.BindPassword,
-										"idp":           cfg.Reva.LDAP.IDP,
-										"gatewaysvc":    cfg.Reva.Gateway.Endpoint,
-										"schema": map[string]interface{}{
-											"dn":          "dn",
-											"uid":         cfg.Reva.LDAP.UserSchema.UID,
-											"mail":        cfg.Reva.LDAP.UserSchema.Mail,
-											"displayName": cfg.Reva.LDAP.UserSchema.DisplayName,
-											"cn":          cfg.Reva.LDAP.UserSchema.CN,
-										},
-									},
-								},
-							},
-						},
-					},
-				}
+			gr.Add(func() error {
+				runtime.RunWithOptions(rcfg, pidFile, runtime.WithLogger(&logger.Logger))
+				return nil
+			}, func(_ error) {
+				logger.Info().
+					Str("server", c.Command.Name).
+					Msg("Shutting down server")
 
-				gr.Add(func() error {
-					runtime.RunWithOptions(
-						rcfg,
-						pidFile,
-						runtime.WithLogger(&logger.Logger),
-					)
-					return nil
-				}, func(_ error) {
-					logger.Info().
-						Str("server", c.Command.Name).
-						Msg("Shutting down server")
+				cancel()
+			})
 
-					cancel()
-				})
+			debugServer, err := debug.Server(
+				debug.Name(c.Command.Name+"-debug"),
+				debug.Addr(cfg.Reva.AuthBasic.DebugAddr),
+				debug.Logger(logger),
+				debug.Context(ctx),
+				debug.Config(cfg),
+			)
+
+			if err != nil {
+				logger.Info().Err(err).Str("server", "debug").Msg("Failed to initialize server")
+				return err
 			}
 
-			{
-				server, err := debug.Server(
-					debug.Name(c.Command.Name+"-debug"),
-					debug.Addr(cfg.Reva.AuthBasic.DebugAddr),
-					debug.Logger(logger),
-					debug.Context(ctx),
-					debug.Config(cfg),
-				)
-
-				if err != nil {
-					logger.Info().Err(err).Str("server", "debug").Msg("Failed to initialize server")
-					return err
-				}
-
-				gr.Add(server.ListenAndServe, func(_ error) {
-					cancel()
-				})
-			}
+			gr.Add(debugServer.ListenAndServe, func(_ error) {
+				cancel()
+			})
 
 			if !cfg.Reva.StorageMetadata.Supervised {
 				sync.Trap(&gr, cancel)
@@ -170,6 +87,55 @@ func AuthBasic(cfg *config.Config) *cli.Command {
 	}
 }
 
+// authBasicConfigFromStruct will adapt an oCIS config struct into a reva mapstructure to start a reva service.
+func authBasicConfigFromStruct(c *cli.Context, cfg *config.Config) map[string]interface{} {
+	rcfg := map[string]interface{}{
+		"core": map[string]interface{}{
+			"max_cpus":             cfg.Reva.AuthBasic.MaxCPUs,
+			"tracing_enabled":      cfg.Tracing.Enabled,
+			"tracing_endpoint":     cfg.Tracing.Endpoint,
+			"tracing_collector":    cfg.Tracing.Collector,
+			"tracing_service_name": c.Command.Name,
+		},
+		"shared": map[string]interface{}{
+			"jwt_secret": cfg.Reva.JWTSecret,
+		},
+		"grpc": map[string]interface{}{
+			"network": cfg.Reva.AuthBasic.GRPCNetwork,
+			"address": cfg.Reva.AuthBasic.GRPCAddr,
+			// TODO build services dynamically
+			"services": map[string]interface{}{
+				"authprovider": map[string]interface{}{
+					"auth_manager": cfg.Reva.AuthProvider.Driver,
+					"auth_managers": map[string]interface{}{
+						"json": map[string]interface{}{
+							"users": cfg.Reva.AuthProvider.JSON,
+						},
+						"ldap": map[string]interface{}{
+							"hostname":      cfg.Reva.LDAP.Hostname,
+							"port":          cfg.Reva.LDAP.Port,
+							"base_dn":       cfg.Reva.LDAP.BaseDN,
+							"loginfilter":   cfg.Reva.LDAP.LoginFilter,
+							"bind_username": cfg.Reva.LDAP.BindDN,
+							"bind_password": cfg.Reva.LDAP.BindPassword,
+							"idp":           cfg.Reva.LDAP.IDP,
+							"gatewaysvc":    cfg.Reva.Gateway.Endpoint,
+							"schema": map[string]interface{}{
+								"dn":          "dn",
+								"uid":         cfg.Reva.LDAP.UserSchema.UID,
+								"mail":        cfg.Reva.LDAP.UserSchema.Mail,
+								"displayName": cfg.Reva.LDAP.UserSchema.DisplayName,
+								"cn":          cfg.Reva.LDAP.UserSchema.CN,
+							},
+						},
+					},
+				},
+			},
+		},
+	}
+	return rcfg
+}
+
 // AuthBasicSutureService allows for the storage-authbasic command to be embedded and supervised by a suture supervisor tree.
 type AuthBasicSutureService struct {
 	cfg *config.Config