diff --git a/apps/api/src/oidc/oidc-client.service.ts b/apps/api/src/oidc/oidc-client.service.ts
index 3b76174..55949bd 100644
--- a/apps/api/src/oidc/oidc-client.service.ts
+++ b/apps/api/src/oidc/oidc-client.service.ts
@@ -103,6 +103,7 @@ export class OidcClientService {
       grant_types: client.grantTypes,
       response_types: client.responseTypes,
       scope: client.scope,
+      id_token_signed_response_alg: 'ES256',
       token_endpoint_auth_method: client.tokenEndpointAuthMethod,
     };
 
diff --git a/apps/api/src/oidc/oidc-provider.service.ts b/apps/api/src/oidc/oidc-provider.service.ts
index dff6d97..3962c2c 100644
--- a/apps/api/src/oidc/oidc-provider.service.ts
+++ b/apps/api/src/oidc/oidc-provider.service.ts
@@ -145,6 +145,7 @@ export class OidcProviderService implements OnModuleInit {
       clientDefaults: {
         grant_types: ['authorization_code'],
         response_types: ['code'],
+        id_token_signed_response_alg: 'ES256',
         token_endpoint_auth_method: 'client_secret_basic',
       },
       claims: {