diff --git a/lib/oauthutil/oauthutil.go b/lib/oauthutil/oauthutil.go
index 323737bcf..a03fd592d 100644
--- a/lib/oauthutil/oauthutil.go
+++ b/lib/oauthutil/oauthutil.go
@@ -480,7 +480,7 @@ func OverrideCredentials(name string, m configmap.Mapper, origConfig *Config) (n
 func NewClientWithBaseClient(ctx context.Context, name string, m configmap.Mapper, config *Config, baseClient *http.Client) (*http.Client, *TokenSource, error) {
 	config, _ = OverrideCredentials(name, m, config)
 	token, err := GetToken(name, m)
-	if err != nil {
+	if err != nil && !config.ClientCredentialFlow {
 		return nil, nil, err
 	}