diff --git a/controlplane/src/core/services/OidcProvider.ts b/controlplane/src/core/services/OidcProvider.ts
index e74670bf79..06ed78de6a 100644
--- a/controlplane/src/core/services/OidcProvider.ts
+++ b/controlplane/src/core/services/OidcProvider.ts
@@ -72,7 +72,7 @@ export default class OidcProvider {
       if (endpoint === 'login.microsoftonline.com') {
         key = 'groups';
       }
-      const claims = `[{ "key": "${key}", "value": "${mapper.ssoGroup}" }]`;
+      const claims = `[{ "key": "${key}", "value": "${mapper.ssoGroup.trim()}" }]`;
       let keycloakGroupName;
 
       switch (mapper.role) {
diff --git a/studio/src/pages/[organizationSlug]/settings.tsx b/studio/src/pages/[organizationSlug]/settings.tsx
index 77a7f80069..6783f9df38 100644
--- a/studio/src/pages/[organizationSlug]/settings.tsx
+++ b/studio/src/pages/[organizationSlug]/settings.tsx
@@ -387,7 +387,7 @@ const UpdateIDPMappers = ({
 
   const mutateMappers = () => {
     const groupMappers = mappers.map((m) => {
-      return { role: m.dbRole, ssoGroup: m.ssoGroup };
+      return { role: m.dbRole, ssoGroup: m.ssoGroup.trim() };
     });
 
     groupMappers.push({
@@ -522,7 +522,7 @@ const OpenIDConnectProvider = ({
 
   const onSubmit: SubmitHandler<ConnectOIDCProviderInput> = (data) => {
     const groupMappers = mappers.map((m) => {
-      return { role: m.dbRole, ssoGroup: m.ssoGroup };
+      return { role: m.dbRole, ssoGroup: m.ssoGroup.trim() };
     });
 
     groupMappers.push({