diff --git a/nixos/modules/services/security/kanidm.nix b/nixos/modules/services/security/kanidm.nix
index 3fd252086518..5853940e6758 100644
--- a/nixos/modules/services/security/kanidm.nix
+++ b/nixos/modules/services/security/kanidm.nix
@@ -790,12 +790,12 @@ in
       ++ concatLists (
         flip mapAttrsToList (filterPresent cfg.provision.systems.oauth2) (
           oauth2: oauth2Cfg:
-          (optionals (cfg.provision.extraJsonFile == null) (
+          (optional (cfg.provision.extraJsonFile == null) (
             assertGroupsKnown "services.kanidm.provision.systems.oauth2.${oauth2}.scopeMaps" (
               attrNames oauth2Cfg.scopeMaps
             )
           ))
-          ++ (optionals (cfg.provision.extraJsonFile == null) (
+          ++ (optional (cfg.provision.extraJsonFile == null) (
             assertGroupsKnown "services.kanidm.provision.systems.oauth2.${oauth2}.supplementaryScopeMaps" (
               attrNames oauth2Cfg.supplementaryScopeMaps
             )