diff --git a/charts/camunda-platform/charts/identity/templates/deployment.yaml b/charts/camunda-platform/charts/identity/templates/deployment.yaml
index 2ec50b1225..aad4ca5717 100644
--- a/charts/camunda-platform/charts/identity/templates/deployment.yaml
+++ b/charts/camunda-platform/charts/identity/templates/deployment.yaml
@@ -118,7 +118,7 @@ spec:
             */}}
             value: {{ .Values.global.identity.keycloak.url | default "http://camunda-platform-tes:80/auth" | quote }}
           - name: IDENTITY_AUTH_PROVIDER_ISSUER_URL
-            value: {{ .Values.global.identity.auth.publicIssuerUrl | default "http://localhost:18080/auth/realms/camunda-platform" | quote }}
+            value: {{ .Values.global.identity.auth.publicIssuerUrl | quote }}
           - name: IDENTITY_AUTH_PROVIDER_BACKEND_URL
             value: {{ .Values.global.identity.auth.providerBackendUrl | default "http://camunda-platform-tes:80/auth/realms/camunda-platform" | quote }}
           - name: KEYCLOAK_SETUP_USER
diff --git a/charts/camunda-platform/values.yaml b/charts/camunda-platform/values.yaml
index 540956bea4..cec00f886b 100644
--- a/charts/camunda-platform/values.yaml
+++ b/charts/camunda-platform/values.yaml
@@ -96,7 +96,7 @@ global:
       # Identity.auth.publicIssuerUrl defines the token issuer (Keycloak) URL, where the services can request JWT tokens.
       # Should be public accessible, per default we assume a port-forward to Keycloak (18080) is created before login.
       # Can be overwritten if, ingress is in use and an external IP is available.
-      publicIssuerUrl: ""
+      publicIssuerUrl: "http://localhost:18080/auth/realms/camunda-platform"
 
       providerBackendUrl: ""