diff --git a/modules/restserver/src/main/resources/reference.conf b/modules/restserver/src/main/resources/reference.conf
index 5a6c4a9f..4763a904 100644
--- a/modules/restserver/src/main/resources/reference.conf
+++ b/modules/restserver/src/main/resources/reference.conf
@@ -266,8 +266,8 @@ sharry.restserver {
           id = "aad"
           name = "Azure AD"
           icon = "fab fa-microsoft"
-          scope = ""
-          authorize-url = "https://login.microsoftonline.com/<your tenant ID>/oauth2/v2.0/authorize?scope=openid"
+          scope = "openid"
+          authorize-url = "https://login.microsoftonline.com/<your tenant ID>/oauth2/v2.0/authorize"
           token-url = "https://login.microsoftonline.com/<your tenant ID>/oauth2/v2.0/token"
           user-url = "https://graph.microsoft.com/oidc/userinfo"
           user-id-key = "email"