diff --git a/sdk/auth_config.go b/sdk/auth_config.go
index 6705d4ca15..6f611c93ca 100644
--- a/sdk/auth_config.go
+++ b/sdk/auth_config.go
@@ -95,7 +95,7 @@ func (a *AuthConfig) fetchOIDCAccessToken(ctx context.Context, host, realm, clie
 	if err != nil {
 		return "", err
 	}
-	return "Bearer " + keyResp.AccessToken, nil
+	return keyResp.AccessToken, nil
 }
 
 func (a *AuthConfig) makeKASRequest(kasPath string, body *RequestBody) (*http.Response, error) {
diff --git a/sdk/auth_config_test.go b/sdk/auth_config_test.go
index a92b7f324c..0e05110b17 100644
--- a/sdk/auth_config_test.go
+++ b/sdk/auth_config_test.go
@@ -11,7 +11,7 @@ import (
 )
 
 func TestNewOIDCAuthConfig(t *testing.T) {
-	expectedAccessToken := "Bearer fail"
+	expectedAccessToken := "fail"
 	clientId := "idk"
 	clientSecret := "secret password"
 	subjectToken := "token"