diff --git a/config/settings.yml b/config/settings.yml
index 7746c254b..36a0094e3 100644
--- a/config/settings.yml
+++ b/config/settings.yml
@@ -134,11 +134,10 @@ user-auth:
 # mode: single-source
   protocol: azureadv2
   config:
-    # TODO make default values obsolete?
     client-id:     "_env:AZURECLIENTID:00000000-0000-0000-0000-000000000000"
-    client-secret: "_env:AZURECLIENTSECRET:verysecret"
+    client-secret: "_env:AZURECLIENTSECRET:''"
     tenant-id:     "_env:AZURETENANTID:00000000-0000-0000-0000-000000000000"
-    scopes:        "_env:AZURESCOPES:[]"
+    scopes:        "_env:AZURESCOPES:[ID,Profile]"
     # protocol: "ldap"
     # config:
     #   host:           "_env:LDAPHOST:"