diff --git a/cmd/server/handler_oauth2_factory.go b/cmd/server/handler_oauth2_factory.go
index 7ad00d98517..bdc4d5afecf 100644
--- a/cmd/server/handler_oauth2_factory.go
+++ b/cmd/server/handler_oauth2_factory.go
@@ -175,7 +175,7 @@ func newOAuth2Handler(c *config.Config, frontend, backend *httprouter.Router, cm
 	if stringslice.Has(c.GetSubjectTypesSupported(), "pairwise") {
 		sias["pairwise"] = consent.NewSubjectIdentifierAlgorithmPairwise([]byte(c.SubjectIdentifierAlgorithmSalt))
 	}
-	if stringslice.Has(c.GetSubjectTypesSupported(), "pairwise") {
+	if stringslice.Has(c.GetSubjectTypesSupported(), "public") {
 		sias["public"] = consent.NewSubjectIdentifierAlgorithmPublic()
 	}