diff --git a/values/system/hel1/network/allow-microsoft-oidc-login.yaml b/values/system/hel1/network/allow-microsoft-oidc-login.yaml
index c1434db2..3616331e 100644
--- a/values/system/hel1/network/allow-microsoft-oidc-login.yaml
+++ b/values/system/hel1/network/allow-microsoft-oidc-login.yaml
@@ -9,4 +9,5 @@ spec:
   - toFQDNs:
     - matchName: login.microsoftonline.com
     - matchPattern: '*.microsoftonline.com'
+    - matchName: graph.microsoft.com
 {{- end }}
diff --git a/values/system/oceanbox/network/allow-microsoft-oidc-login.yaml b/values/system/oceanbox/network/allow-microsoft-oidc-login.yaml
index c1434db2..3616331e 100644
--- a/values/system/oceanbox/network/allow-microsoft-oidc-login.yaml
+++ b/values/system/oceanbox/network/allow-microsoft-oidc-login.yaml
@@ -9,4 +9,5 @@ spec:
   - toFQDNs:
     - matchName: login.microsoftonline.com
     - matchPattern: '*.microsoftonline.com'
+    - matchName: graph.microsoft.com
 {{- end }}