diff --git a/apps/sonar/sonar_ConfigMap.tf b/apps/sonar/sonar_ConfigMap.tf
index 3d3adfc..5581a89 100644
--- a/apps/sonar/sonar_ConfigMap.tf
+++ b/apps/sonar/sonar_ConfigMap.tf
@@ -32,7 +32,7 @@ resource "kubectl_manifest" "cm_files" {
         sonar.auth.saml.providerName=vynil
         sonar.auth.saml.providerId=${module.saml.issuer}
         sonar.auth.saml.loginUrl=${module.saml.url_sso_init}
-        sonar.auth.saml.certificate.secured=${base64encode(module.saml.certificate_data)}
+        sonar.auth.saml.certificate.secured=${join("",[for line in split("\n",module.saml.certificate_data): line if !endswith(line, "CERTIFICATE-----")])}
         sonar.auth.saml.user.login=windowsaccountname
         sonar.auth.saml.user.name=name
         sonar.auth.saml.user.email=emailaddress