diff --git a/src/main/java/org/gcube/oidc/keycloak/KeycloakHelper.java b/src/main/java/org/gcube/oidc/keycloak/KeycloakHelper.java
index 182cd7f..077a713 100644
--- a/src/main/java/org/gcube/oidc/keycloak/KeycloakHelper.java
+++ b/src/main/java/org/gcube/oidc/keycloak/KeycloakHelper.java
@@ -144,6 +144,7 @@ public class KeycloakHelper {
         newClientRepresentation.setPublicClient(false);
         newClientRepresentation.setProtocol("openid-connect");
         newClientRepresentation.setAuthorizationSettings(new ResourceServerRepresentation());
+        newClientRepresentation.setFullScopeAllowed(Boolean.FALSE);
         try (Response response = realm.clients().create(newClientRepresentation)) {
             if (!response.getStatusInfo().equals(Response.Status.CREATED)) {
                 throw new KeycloakResourceCreationException("While creating new client: " + clientId, response);