diff --git a/hosts/architect/openid.nix b/hosts/architect/openid.nix
index fa11dbd..b1762c7 100644
--- a/hosts/architect/openid.nix
+++ b/hosts/architect/openid.nix
@@ -12,7 +12,8 @@
           redirect_after_logout_uri = "/",
           redirect_uri = "/redirect_uri",
           keepalive = "yes",
-          accept_none_alg = true
+          accept_none_alg = true,
+          revoke_tokens_on_logout = true
       }
 
       -- call introspect for OAuth 2.0 Bearer Access Token validation