diff --git a/config.go b/config.go
index 24e17b5..11194e6 100644
--- a/config.go
+++ b/config.go
@@ -393,6 +393,9 @@ func CleanConfig(config *Config) error {
 			return fmt.Errorf("Duplicate RegistrationOIDC Name: %s", oidcConfig.Name)
 		}
 		oidcNames.Add(oidcConfig.Name)
+		envkey := fmt.Sprintf("DRASL_REGISTRATION_OIDC_%s_CLIENT_SECRET", strings.ToUpper(oidcConfig.Name))
+		envvalue := strings.TrimSpace(Getenv(envkey, oidcConfig.ClientSecret))
+		oidcConfig.ClientSecret = envvalue
 		oidcConfig.Issuer, err = cleanURL(
 			fmt.Sprintf("RegistrationOIDC %s Issuer", oidcConfig.Name),
 			mo.Some("https://idm.example.com/oauth2/openid/drasl"),