diff --git a/doc/plugins/presale-saml.rst b/doc/plugins/presale-saml.rst
index 129a2e428f..b41dc6e53d 100644
--- a/doc/plugins/presale-saml.rst
+++ b/doc/plugins/presale-saml.rst
@@ -207,7 +207,7 @@ On this page, the actual authentication can be configured.
 
     An Attribute RegEx of ``{}`` will allow any authenticated user to pass.
 
-    A RegEx of ``{ "affiliation": "(employee@pretix.eu|staff@pretix.eu)" }`` will
+    A RegEx of ``{ "affiliation": "^(employee@pretix.eu|staff@pretix.eu)$" }`` will
     only allow user to pass which have the ``affiliation`` attribute and whose
     attribute either matches ``employee@pretix.eu`` or ``staff@pretix.eu``.