diff --git a/.changeset/blue-dingos-repeat.md b/.changeset/blue-dingos-repeat.md
new file mode 100644
index 0000000000..111a94a00b
--- /dev/null
+++ b/.changeset/blue-dingos-repeat.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Require that audience URLs for Okta authentication start with https