diff --git a/authority/provisioner/azure.go b/authority/provisioner/azure.go
index 611aa58a..f5d04adb 100644
--- a/authority/provisioner/azure.go
+++ b/authority/provisioner/azure.go
@@ -305,7 +305,7 @@ func (p *Azure) AuthorizeRevoke(token string) error {
 func (p *Azure) authorizeSSHSign(claims azurePayload, name string) ([]SignOption, error) {
 	signOptions := []SignOption{
 		// set the key id to the token subject
-		sshCertificateKeyIDModifier(claims.Subject),
+		sshCertificateKeyIDModifier(name),
 	}
 
 	signOptions = append(signOptions, &sshCertificateOptionsValidator{&SSHOptions{