diff --git a/README.md b/README.md
index c6b6191..c6134d6 100644
--- a/README.md
+++ b/README.md
@@ -1248,9 +1248,6 @@ metadata:
   namespace: ${namespace}
   annotations:
     azure.workload.identity/client-id: ${appId}
-    azure.workload.identity/tenant-id: ${tenantId}
-  labels:
-    azure.workload.identity/use: "true"
 EOF
   else
     azwi serviceaccount create phase sa \
diff --git a/chart/templates/_helpers.tpl b/chart/templates/_helpers.tpl
index 8500604..245e681 100644
--- a/chart/templates/_helpers.tpl
+++ b/chart/templates/_helpers.tpl
@@ -62,13 +62,6 @@ Create the name of the service account to use
 {{- end }}
 {{- end }}
 
-{{/*
-Create service account labels
-*/}}
-{{- define "todolist.serviceAccount.labels" -}}
-azure.workload.identity/use: "true"
-{{- end }}
-
 {{/*
 Frontend service and deployment labels
 */}}
@@ -154,5 +147,4 @@ Service account annotations
 {{ end }}
 {{- end -}}
 azure.workload.identity/client-id: {{ .Values.serviceAccount.appId }}
-azure.workload.identity/tenant-id: {{ .Values.serviceAccount.tenantId }}
 {{- end }}
diff --git a/chart/values.yaml b/chart/values.yaml
index 12b4e26..d20f323 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -15,7 +15,6 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: "todolist-identity-sa"
   appId: ""
-  tenantId: ""
 
 configMap:
   aspNetCoreEnvironment: Docker
@@ -207,4 +206,4 @@ backendIngress:
   - host: oxapi.babosbird.com
   tls:
   - hosts:
-    - oxapi.babosbird.com
\ No newline at end of file
+    - oxapi.babosbird.com