diff --git a/argocd/argocd-cm.yaml b/argocd/argocd-cm.yaml
index 0188893..4ffc0b2 100644
--- a/argocd/argocd-cm.yaml
+++ b/argocd/argocd-cm.yaml
@@ -7,6 +7,8 @@ data:
   url: https://argo.k8s.bittehackmichnicht.de
   oidc.config: |
     name: Keycloak
-    issuer: https://keycloak.controller.bittehackmichnicht.de
-    clientID: argocd
-    # clientSecret is provided via Secret argocd-oidc-secret in namespace argocd
+    issuer: https://keycloak.controller.{{ admin_domain }}/realms/bachelor
+    clientID: argo
+    clientSecret: $oidc.keycloak.clientSecret
+    refreshTokenThreshold: 2m
+    requestedScopes: ["openid", "profile", "email", "groups"]