diff --git a/lib/cli.js b/lib/cli.js
index 2f21a273..220eb105 100644
--- a/lib/cli.js
+++ b/lib/cli.js
@@ -606,7 +606,9 @@ program
       port: options.port,
       secret: options.secret,
       appUrl: options.appUrl,
-      identifierUrl: options.openidIdentifierUrl
+      openid: {
+        identifierUrl: options.openidIdentifierUrl
+      },
     })
   })
 
diff --git a/lib/units/auth/openid.js b/lib/units/auth/openid.js
index 0466418b..6ec891b2 100644
--- a/lib/units/auth/openid.js
+++ b/lib/units/auth/openid.js
@@ -32,14 +32,14 @@ module.exports = function(options) {
   })
 
   app.get('/auth/openid/', function(req, res) {
-    log.info('openid identifier url: %s', options.identifierUrl)
-    relyingParty.authenticate(options.identifierUrl, false, function(err, authUrl){
+    log.info('openid identifier url: %s', options.openid.identifierUrl)
+    relyingParty.authenticate(options.openid.identifierUrl, false, function(err, authUrl){
       if (err){
         res.send("auth failed");
       } else if(!authUrl){
         res.send("auth failed");
       } else {
-        log.info("redirect to authUrl: %s", options.identifierUrl);
+        log.info("redirect to authUrl: %s", options.openid.identifierUrl);
         res.redirect(authUrl);
       }
     });