diff --git a/charts/nextcloud-mcp-server/templates/deployment.yaml b/charts/nextcloud-mcp-server/templates/deployment.yaml
index 0d9cb03..705b7f1 100644
--- a/charts/nextcloud-mcp-server/templates/deployment.yaml
+++ b/charts/nextcloud-mcp-server/templates/deployment.yaml
@@ -100,7 +100,7 @@ spec:
                   key: {{ .Values.auth.multiUserBasic.tokenEncryptionKeyKey }}
             - name: NEXTCLOUD_OIDC_SCOPES
               value: {{ .Values.auth.multiUserBasic.scopes | quote }}
-            {{- if or .Values.auth.multiUserBasic.clientId .Values.auth.multiUserBasic.existingSecret }}
+            {{- if .Values.auth.multiUserBasic.clientId }}
             # Static OAuth credentials (optional - uses DCR if not provided)
             - name: NEXTCLOUD_OIDC_CLIENT_ID
               valueFrom:
diff --git a/charts/nextcloud-mcp-server/values.yaml b/charts/nextcloud-mcp-server/values.yaml
index b267507..3911c93 100644
--- a/charts/nextcloud-mcp-server/values.yaml
+++ b/charts/nextcloud-mcp-server/values.yaml
@@ -64,7 +64,7 @@ auth:
   # Server optionally stores app passwords for background operations
   multiUserBasic:
     # Enable offline access (background operations using app passwords via Astrolabe)
-    # When enabled, requires token encryption key and OAuth client credentials
+    # When enabled, requires token encryption key. OAuth client credentials are optional (uses DCR if not provided)
     enableOfflineAccess: false
     # Token encryption key (required if enableOfflineAccess: true, ignored if existingSecret is set)
     # Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"