diff --git a/gen3/bin/kube-setup-wts.sh b/gen3/bin/kube-setup-wts.sh
index b807da2d5..ad8211d03 100644
--- a/gen3/bin/kube-setup-wts.sh
+++ b/gen3/bin/kube-setup-wts.sh
@@ -42,6 +42,8 @@ new_client() {
     "oidc_client_id": "$client_id",
     "oidc_client_secret": "$client_secret",
 
+    "aggregate_endpoint_allowlist": ["/authz/mapping"],
+
     "external_oidc": []
 }
 EOM