diff --git a/authelia/configuration.yml b/authelia/configuration.yml
index 810870a..a3b1a0f 100644
--- a/authelia/configuration.yml
+++ b/authelia/configuration.yml
@@ -14,6 +14,20 @@ access_control:
     policy: bypass
   - domain: firefly.pyrocufflink.blue
     policy: two_factor
+    subject:
+    - 'group:Firefly III Users'
+  - domain: firefly-importer.pyrocufflink.blue
+    policy: two_factor
+    subject:
+    - 'group:Firefly III Users'
+  - domain: firefly-importer.pyrocufflink.blue
+    policy: one_factor
+    subject:
+      - 'user:svc.xactfetch'
+  - domain: firefly.pyrocufflink.blue
+    policy: deny
+  - domain: firefly-importer.pyrocufflink.blue
+    policy: deny
   - domain: scan.pyrocufflink.blue
     networks:
     - internal