diff --git a/sdk/sdk.go b/sdk/sdk.go
index 7baaf297db..ff37f74ab1 100644
--- a/sdk/sdk.go
+++ b/sdk/sdk.go
@@ -113,7 +113,7 @@ func buildKASClient(c *config) (KASClient, error) {
 	// at this point we have either both client credentials and a token endpoint or none of the above. if we don't have
 	// any just return a KAS client that can only get public keys
 	if c.clientCredentials.ClientId == "" {
-		return KASClient{}, nil
+		return KASClient{dialOptions: c.build()}, nil
 	}
 
 	ts, err := NewIDPAccessTokenSource(