diff --git a/pipeline/authn/authenticator_oauth2_introspection.go b/pipeline/authn/authenticator_oauth2_introspection.go
index f4c8fe2c31..8ef830b43f 100644
--- a/pipeline/authn/authenticator_oauth2_introspection.go
+++ b/pipeline/authn/authenticator_oauth2_introspection.go
@@ -234,6 +234,10 @@ func (a *AuthenticatorOAuth2Introspection) Authenticate(r *http.Request, session
 		i.Extra["client_id"] = i.ClientID
 		i.Extra["scope"] = i.Scope
 
+		if len(i.Audience) != 0 {
+			i.Extra["aud"] = i.Audience
+		}
+
 		a.tokenToCache(cf, i, token)
 	}