diff --git a/authz/microsoft.js b/authz/microsoft.js
index 4d9bf96..0c1e9d5 100644
--- a/authz/microsoft.js
+++ b/authz/microsoft.js
@@ -3,7 +3,7 @@ function isAuthorized(decoded, request, callback, unauthorized, internalServerEr
 }
 
 function getSubject(decoded) {
-  return decoded.payload.upn || decodec.payload.sub;
+  return decoded.payload.upn || decoded.payload.sub;
 }
 
 exports.isAuthorized = isAuthorized;