diff --git a/infra/values/upc-dev/keycloak-values.yaml b/infra/values/upc-dev/keycloak-values.yaml
index e27f854..2608288 100644
--- a/infra/values/upc-dev/keycloak-values.yaml
+++ b/infra/values/upc-dev/keycloak-values.yaml
@@ -4,6 +4,8 @@ ingress:
 keycloakConfigCli:
   enabled: true
   extraEnvVars:
+    - name: IMPORT_VAR_SUBSTITUTION_ENABLED
+      value: "true"
     - name: MS_IDP_CLIENT_SECRET
       valueFrom:
         secretKeyRef:
@@ -23,7 +25,7 @@ keycloakConfigCli:
             "firstBrokerLoginFlowAlias": "first broker login",
             "config": {
               "clientId": "7995d2b5-b798-4caf-8da6-b00b78bb34d7",
-              "clientSecret": "$(MS_IDP_CLIENT_SECRET)",
+              "clientSecret": "$(env:MS_IDP_CLIENT_SECRET)",
               "defaultScope": "openid email profile",
               "tenantId": "063afd9e-5fcb-48d2-a769-ca31b0f5b443",
               "syncMode": "IMPORT"
@@ -39,7 +41,7 @@ keycloakConfigCli:
             "firstBrokerLoginFlowAlias": "first broker login",
             "config": {
               "clientId": "7995d2b5-b798-4caf-8da6-b00b78bb34d7",
-              "clientSecret": "$(MS_IDP_CLIENT_SECRET)",
+              "clientSecret": "$(env:MS_IDP_CLIENT_SECRET)",
               "defaultScope": "openid email profile User.Read Mail.Send",
               "tenantId": "063afd9e-5fcb-48d2-a769-ca31b0f5b443",
               "syncMode": "IMPORT"