diff --git a/helmchart/single-sign-on/templates/oauth2-clients.yaml b/helmchart/single-sign-on/templates/oauth2-clients.yaml
index dd05077a1971e8cb3ee690ac01dd256e55efd844..229d476ca29940450d80e0750e1c57a1bdf49198 100644
--- a/helmchart/single-sign-on/templates/oauth2-clients.yaml
+++ b/helmchart/single-sign-on/templates/oauth2-clients.yaml
@@ -3,6 +3,7 @@ apiVersion: hydra.ory.sh/v1alpha1
 kind: OAuth2Client
 metadata:
   name: {{ .clientName | quote }}
+{{ include "single-sign-on.labels" . | indent 4 }}
 spec:
   grantTypes:
   {{- range .grantTypes }}
diff --git a/helmchart/single-sign-on/templates/secret-oauth2-clients.yaml b/helmchart/single-sign-on/templates/secret-oauth2-clients.yaml
index 82b0fc0fbb555856d6c7911a9c7dcb46cc9a1318..bf3a4ec1199581afe1391a5f358b9164961d7b2c 100644
--- a/helmchart/single-sign-on/templates/secret-oauth2-clients.yaml
+++ b/helmchart/single-sign-on/templates/secret-oauth2-clients.yaml
@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
     name: oauth2-client-{{ .clientName}}
+{{ include "single-sign-on.labels" . | indent 4 }}
 type: Opaque
 data:
   value: {{ .clientSecret |  b64enc }}