diff --git a/authentik/blueprint-vault-oidc.yaml b/authentik/blueprint-vault-oidc.yaml
index b17d10e..a236457 100644
--- a/authentik/blueprint-vault-oidc.yaml
+++ b/authentik/blueprint-vault-oidc.yaml
@@ -17,12 +17,15 @@ data:
           name: Vault
           authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
           authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
+          invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
           client_type: confidential
           client_id: vault
           client_secret: !Env [VAULT_OIDC_CLIENT_SECRET, ""]
-          redirect_uris: |-
-            https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback
-            http://localhost:8250/oidc/callback
+          redirect_uris:
+            - matching_mode: strict
+              url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback
+            - matching_mode: strict
+              url: http://localhost:8250/oidc/callback
           signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]]
           property_mappings:
             - !Find [authentik_providers_oauth2.scopemapping, [managed, goauthentik.io/providers/oauth2/scope-openid]]