diff --git a/cmd/dex/serve.go b/cmd/dex/serve.go
index ab5f20892d..c57c2936d0 100644
--- a/cmd/dex/serve.go
+++ b/cmd/dex/serve.go
@@ -583,6 +583,7 @@ func applyConfigOverrides(options serveOptions, config *Config) {
 			"refresh_token",
 			"urn:ietf:params:oauth:grant-type:device_code",
 			"urn:ietf:params:oauth:grant-type:token-exchange",
+			"client_credentials",
 		}
 	}
 }