diff --git a/superset/config.py b/superset/config.py
index 6362e39aec7e7..ef3a98d476c2e 100644
--- a/superset/config.py
+++ b/superset/config.py
@@ -1915,6 +1915,12 @@ class ExtraDynamicQueryFilters(TypedDict, total=False):
 # connection via the UI (without downtime).
 CATALOGS_SIMPLIFIED_MIGRATION: bool = False
 
+# Configure JWT subsystem to not enforce that the sub claim is a string
+# Set this variable to avoid breaking `/api/security` endpoints
+# TODO: remove this variable once pyjwt resolved the issue.
+# https://github.com/jpadilla/pyjwt/issues/1017
+# https://github.com/dpgaspar/Flask-AppBuilder/issues/2287
+JWT_VERIFY_SUB = False
 
 # -------------------------------------------------------------------
 # *                WARNING:  STOP EDITING  HERE                    *