diff --git a/docs/user-manual/en/security.md b/docs/user-manual/en/security.md
index fafb8d8bb5..2e0edb025b 100644
--- a/docs/user-manual/en/security.md
+++ b/docs/user-manual/en/security.md
@@ -665,7 +665,7 @@ channel in the normal way.
The `GSSAPI` SASL mechanism must be enabled on the AMQP acceptor in `broker.xml` by adding it to the `saslMechanisms` list url parameter:
`saslMechanisms="GSSAPI<,PLAIN, etc>`.
- tcp://0.0.0.0:5672?saslMechanisms=GSSAPI
+ tcp://0.0.0.0:5672?protocols=AMQP;saslMechanisms=GSSAPI
The GSSAPI mechanism implementation on the server will use a JAAS configuration scope named `amqp-sasl-gssapi` to
obtain it's Kerberos acceptor credentials. An alternative configuration scope can be specified on the AMQP acceptor