diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index a02d80c0..05e02a5c 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -2,7 +2,7 @@ name: Planetary Computer APIs CI/CD
 
 on:
   push:
-    branches: [remove-secret-from-cicd]
+    branches: [user/mjm/remove-secret-from-cicd-test]
     tags: ["*"]
 
 permissions:
@@ -85,4 +85,4 @@ jobs:
           ARM_SUBSCRIPTION_ID: ${{ fromJSON(secrets.SECURE_AZURE_CREDENTIALS).subscriptionId }}
           ARM_TENANT_ID: ${{ fromJSON(secrets.SECURE_AZURE_CREDENTIALS).tenantId }}
           ARM_USE_OIDC: true
-          # ARM_CLIENT_SECRET: ${{ fromJSON(secrets.AZURE_CREDENTIALS).clientSecret }}
\ No newline at end of file
+          # ARM_CLIENT_SECRET: ${{ fromJSON(secrets.AZURE_CREDENTIALS).clientSecret }}
diff --git a/deployment/terraform/staging/main.tf b/deployment/terraform/staging/main.tf
index 26150b1a..6e4b6dc4 100644
--- a/deployment/terraform/staging/main.tf
+++ b/deployment/terraform/staging/main.tf
@@ -32,6 +32,9 @@ terraform {
     storage_account_name = "pctesttfstate"
     container_name       = "pc-test-api"
     key                  = "pqe-apis.tfstate"
+
+    use_azuread_auth = true
+    use_oidc         = true
   }
 }