diff --git a/kagenti-operator/internal/keycloak/admin.go b/kagenti-operator/internal/keycloak/admin.go
index 0fe902f3..ade60d1a 100644
--- a/kagenti-operator/internal/keycloak/admin.go
+++ b/kagenti-operator/internal/keycloak/admin.go
@@ -411,7 +411,7 @@ func mergeDesiredClientIntoMap(m map[string]interface{}, desired *keycloakClient
 		m["attributes"] = attrs
 	}
 	for k, v := range desired.Attributes {
-		attrs[k] = []interface{}{v}
+		attrs[k] = v
 	}
 }
 
diff --git a/kagenti-operator/internal/keycloak/admin_test.go b/kagenti-operator/internal/keycloak/admin_test.go
index 66450131..df07172b 100644
--- a/kagenti-operator/internal/keycloak/admin_test.go
+++ b/kagenti-operator/internal/keycloak/admin_test.go
@@ -105,8 +105,8 @@ func TestAdmin_RegisterOrFetchClient_updatesDrift(t *testing.T) {
 			if attrs == nil {
 				t.Fatal("expected attributes in PUT body")
 			}
-			ex, _ := attrs["standard.token.exchange.enabled"].([]interface{})
-			if len(ex) != 1 || ex[0] != "true" {
+			ex, _ := attrs["standard.token.exchange.enabled"].(string)
+			if ex != "true" {
 				t.Fatalf("expected token exchange true in PUT, got %#v", attrs["standard.token.exchange.enabled"])
 			}
 			w.WriteHeader(http.StatusNoContent)