diff --git a/authentik/blueprint-vault-oidc.yaml b/authentik/blueprint-vault-oidc.yaml
index d3ddb03..58e5ba8 100644
--- a/authentik/blueprint-vault-oidc.yaml
+++ b/authentik/blueprint-vault-oidc.yaml
@@ -25,7 +25,7 @@ data:
           authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
           client_type: confidential
           client_id: vault
-          client_secret: !Env [VAULT_OIDC_CLIENT_SECRET]
+          client_secret: !Env [VAULT_OIDC_CLIENT_SECRET, ""]
           redirect_uris: |-
             https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback
             http://localhost:8250/oidc/callback