diff --git a/cmd/idp/main.go b/cmd/idp/main.go
index f9217a5..edaa81a 100644
--- a/cmd/idp/main.go
+++ b/cmd/idp/main.go
@@ -56,7 +56,7 @@ const (
 	sessionKeyLength     = 32
 	sessionAuthKeyLength = 64
 
-	minCSRFKeyLength = 64
+	minCSRFKeyLength = 32
 )
 
 var (