diff --git a/controlplane/src/core/services/OidcProvider.ts b/controlplane/src/core/services/OidcProvider.ts
index e74670bf79..06ed78de6a 100644
--- a/controlplane/src/core/services/OidcProvider.ts
+++ b/controlplane/src/core/services/OidcProvider.ts
@@ -72,7 +72,7 @@ export default class OidcProvider {
       if (endpoint === 'login.microsoftonline.com') {
         key = 'groups';
       }
-      const claims = `[{ "key": "${key}", "value": "${mapper.ssoGroup}" }]`;
+      const claims = `[{ "key": "${key}", "value": "${mapper.ssoGroup.trim()}" }]`;
       let keycloakGroupName;
 
       switch (mapper.role) {