diff --git a/management/server/idp/embedded.go b/management/server/idp/embedded.go
index 7b8e5033c..0e46b506e 100644
--- a/management/server/idp/embedded.go
+++ b/management/server/idp/embedded.go
@@ -20,7 +20,7 @@ const (
 	staticClientCLI        = "netbird-cli"
 	defaultCLIRedirectURL1 = "http://localhost:53000/"
 	defaultCLIRedirectURL2 = "http://localhost:54000/"
-	defaultScopes          = "openid profile email offline_access"
+	defaultScopes          = "openid profile email"
 	defaultUserIDClaim     = "sub"
 )