diff --git a/templates/openidc.conf.erb b/templates/openidc.conf.erb
index 79fd8fa87..c30cea158 100644
--- a/templates/openidc.conf.erb
+++ b/templates/openidc.conf.erb
@@ -9,22 +9,22 @@
 
   # The following directives are required to support openidc from the command
   # line
-  <Location ~ "/v3/OS-FEDERATION/identity_providers/<%= scope['keystone::federation::openidc::idp_name']-%>/protocols/openidc/auth">
+  <Location ~ "/v3/OS-FEDERATION/identity_providers/<%= scope['keystone::federation::openidc::idp_name']-%>/protocols/openid/auth">
       AuthType oauth20
       Require valid-user
   </Location>
 
   # The following directives are necessary to support websso from Horizon
   # (Per https://docs.openstack.org/keystone/pike/advanced-topics/federation/websso.html)
-  OIDCRedirectURI "<%= @keystone_endpoint-%>/v3/auth/OS-FEDERATION/identity_providers/<%= scope['keystone::federation::openidc::idp_name']-%>/protocols/openidc/websso"
-  OIDCRedirectURI "<%= @keystone_endpoint-%>/v3/auth/OS-FEDERATION/websso"
+  OIDCRedirectURI "<%= @keystone_endpoint-%>/v3/auth/OS-FEDERATION/identity_providers/<%= scope['keystone::federation::openidc::idp_name']-%>/protocols/openid/websso"
+  OIDCRedirectURI "<%= @keystone_endpoint-%>/v3/auth/OS-FEDERATION/websso/openid"
 
-  <LocationMatch "/v3/auth/OS-FEDERATION/websso/openidc">
+  <LocationMatch "/v3/auth/OS-FEDERATION/websso/openid">
       AuthType "openid-connect"
       Require valid-user
   </LocationMatch>
 
-  <LocationMatch "/v3/auth/OS-FEDERATION/identity_providers/<%= scope['keystone::federation::openidc::idp_name']-%>/protocols/openidc/websso">
+  <LocationMatch "/v3/auth/OS-FEDERATION/identity_providers/<%= scope['keystone::federation::openidc::idp_name']-%>/protocols/openid/websso">
       AuthType "openid-connect"
       Require valid-user
   </LocationMatch>