diff --git a/src/main/java/cz/cvut/kbss/analysis/util/ConfigParam.java b/src/main/java/cz/cvut/kbss/analysis/util/ConfigParam.java
index 2e2f0ba..4469a3c 100644
--- a/src/main/java/cz/cvut/kbss/analysis/util/ConfigParam.java
+++ b/src/main/java/cz/cvut/kbss/analysis/util/ConfigParam.java
@@ -6,9 +6,9 @@ public enum ConfigParam {
 
     APP_CONTEXT("appContext"),
 
-    OIDC_ROLE_CLAIM("oidc.RoleClaim"),
+    OIDC_ROLE_CLAIM("security.oidc.RoleClaim"),
 
-    CORS_ALLOWED_ORIGINS("cors.allowedOrigins");
+    CORS_ALLOWED_ORIGINS("security.cors.allowedOrigins");
 
     private final String name;
 
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index 31b14c3..8af6507 100755
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -11,10 +11,10 @@ persistence:
 
 security:
   provider: internal
+  cors.allowedOrigins: "http://localhost:5173,http://localhost:4173"
+  oidc.RoleClaim: realm_access.roles
 
 appContext: http://localhost:5173
-oidc.RoleClaim: realm_access.roles
-cors.allowedOrigins: "http://localhost:5173,http://localhost:4173"
 
 logging:
   pattern: