diff --git a/matrix-module.nix b/matrix-module.nix
index 7480d5c..304d97a 100644
--- a/matrix-module.nix
+++ b/matrix-module.nix
@@ -130,6 +130,7 @@ in {
             enabled = true;
             algorithm = "RS256";
             secret = cfg.openid.jwt-secret;
+            audiences = [ cfg.openid.client-id ];
           };
           listeners = [{
             port = cfg.port;