diff --git a/internal/encryption/keyprovider/azure_vault/config.go b/internal/encryption/keyprovider/azure_vault/config.go
index dd6a965520..2039612a09 100644
--- a/internal/encryption/keyprovider/azure_vault/config.go
+++ b/internal/encryption/keyprovider/azure_vault/config.go
@@ -176,8 +176,8 @@ func (c Config) Build() (keyprovider.KeyProvider, keyprovider.KeyMeta, error) {
 		},
 		StorageAddresses: auth.StorageAddresses{
 			CloudConfig:    cloudConfig,
-			SubscriptionID: stringAttrEnvFallback(c.OIDCToken, "ARM_SUBSCRIPTION_ID"),
-			TenantID:       stringAttrEnvFallback(c.OIDCToken, "ARM_TENANT_ID"),
+			SubscriptionID: stringAttrEnvFallback(c.SubscriptionID, "ARM_SUBSCRIPTION_ID"),
+			TenantID:       stringAttrEnvFallback(c.TenantID, "ARM_TENANT_ID"),
 		},
 		WorkloadIdentityAuthConfig: auth.WorkloadIdentityAuthConfig{
 			UseAKSWorkloadIdentity: c.UseAKS,