diff --git a/pkg/auth/idp/oauth2/config.go b/pkg/auth/idp/oauth2/config.go
index 0b08ed4a9..583b32718 100644
--- a/pkg/auth/idp/oauth2/config.go
+++ b/pkg/auth/idp/oauth2/config.go
@@ -69,7 +69,7 @@ func getSaltForIdpHmac() string {
 
 // getIdpScopes return default scopes during the IDP login request
 func getIdpScopes() string {
-	return env.Get(ConsoleIDPScopes, "openid,profile,app_metadata,user_metadata,email")
+	return env.Get(ConsoleIDPScopes, "openid,profile,email")
 }
 
 // getIdpTokenExpiration return default token expiration for access token (in seconds)