From 47626a54c1c72981e61bf44a0f430f139086dfb6 Mon Sep 17 00:00:00 2001
From: Jonathan Lukas <jonathan.lukas@camunda.com>
Date: Tue, 4 Mar 2025 16:06:53 +0100
Subject: [PATCH 1/4] fix: audience in MS Entra is inherited from client id

---
 .../self-managed/setup/guides/connect-to-an-oidc-provider.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md b/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 50d05fba975..216433eccc0 100644
--- a/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/versioned_docs/version-8.6/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -165,7 +165,7 @@ global:
       identity:
         clientId: <Client ID from Step 2>
         existingSecret: <Client secret from Step 5>
-        audience: <Audience from Step 1>
+        audience: <Client ID from Step 2>
         initialClaimName: <Initial claim name if not using the default "oid">
         initialClaimValue: <Initial claim value>
         redirectUrl: <See the Helm value in the table below>

From 4066822dc99358e0cb72408ba2bae7f3f3a3f9ae Mon Sep 17 00:00:00 2001
From: Jonathan Lukas <jonathan.lukas@camunda.com>
Date: Tue, 4 Mar 2025 16:09:44 +0100
Subject: [PATCH 2/4] fix: apply to next

---
 docs/self-managed/setup/guides/connect-to-an-oidc-provider.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md b/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 5825d83920e..0808410b70c 100644
--- a/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/docs/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -165,7 +165,7 @@ global:
       identity:
         clientId: <Client ID from Step 2>
         existingSecret: <Client secret from Step 5>
-        audience: <Audience from Step 1>
+        audience: <Client ID from Step 2>
         initialClaimName: <Initial claim name if not using the default "oid">
         initialClaimValue: <Initial claim value>
         redirectUrl: <See the Helm value in the table below>

From 1a1680771ea64d0d5be5c43291c0e52eccca0fe4 Mon Sep 17 00:00:00 2001
From: Jonathan Lukas <jonathan.lukas@camunda.com>
Date: Tue, 4 Mar 2025 16:10:16 +0100
Subject: [PATCH 3/4] fix: apply to 8.5

---
 .../self-managed/setup/guides/connect-to-an-oidc-provider.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md b/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 5b58aae1949..72e43453770 100644
--- a/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/versioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -162,7 +162,7 @@ global:
       identity:
         clientId: <Client ID from Step 2>
         existingSecret: <Client secret from Step 3>
-        audience: <Audience from Step 1>
+        audience: <Client ID from Step 2>
         initialClaimName: <Initial claim name if not using the default "oid">
         initialClaimValue: <Initial claim value>
         redirectUrl: <See the Helm value in the table below>

From 776db077f8c9990f70d427a2023d3579d65239a1 Mon Sep 17 00:00:00 2001
From: Jonathan Lukas <jonathan.lukas@camunda.com>
Date: Tue, 4 Mar 2025 16:11:21 +0100
Subject: [PATCH 4/4] fix: apply to 8.7

---
 .../self-managed/setup/guides/connect-to-an-oidc-provider.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/versioned_docs/version-8.7/self-managed/setup/guides/connect-to-an-oidc-provider.md b/versioned_docs/version-8.7/self-managed/setup/guides/connect-to-an-oidc-provider.md
index 5825d83920e..0808410b70c 100644
--- a/versioned_docs/version-8.7/self-managed/setup/guides/connect-to-an-oidc-provider.md
+++ b/versioned_docs/version-8.7/self-managed/setup/guides/connect-to-an-oidc-provider.md
@@ -165,7 +165,7 @@ global:
       identity:
         clientId: <Client ID from Step 2>
         existingSecret: <Client secret from Step 5>
-        audience: <Audience from Step 1>
+        audience: <Client ID from Step 2>
         initialClaimName: <Initial claim name if not using the default "oid">
         initialClaimValue: <Initial claim value>
         redirectUrl: <See the Helm value in the table below>