diff --git a/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/ClientCredentialsConfig.kt b/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/ClientCredentialsConfig.kt
index b1ba8a72..17797d92 100644
--- a/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/ClientCredentialsConfig.kt
+++ b/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/ClientCredentialsConfig.kt
@@ -6,6 +6,8 @@ data class ClientCredentialsConfig(
     val tokenUrl: String,
     val clientId: String? = null,
     val clientSecret: String? = null,
+    val scope: String? = null,
+    val audience: String? = null,
 ) {
     /**
      * Fill in the client ID and client secret from environment variables. The variables are
diff --git a/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/OAuthClientProvider.kt b/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/OAuthClientProvider.kt
index 9a2fd00b..18a8e8ad 100644
--- a/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/OAuthClientProvider.kt
+++ b/radar-commons-kotlin/src/main/kotlin/org/radarbase/ktor/auth/OAuthClientProvider.kt
@@ -56,6 +56,8 @@ fun Auth.clientCredentials(
                     append("grant_type", "client_credentials")
                     append("client_id", authConfig.clientId)
                     append("client_secret", authConfig.clientSecret)
+                    authConfig.scope?.let { append("scope", it) }
+                    authConfig.audience?.let { append("audience", it) }
                 },
             ) {
                 accept(ContentType.Application.Json)