diff --git a/web-app-aspnet/Program.cs b/web-app-aspnet/Program.cs
index e86d4e9..45b352d 100644
--- a/web-app-aspnet/Program.cs
+++ b/web-app-aspnet/Program.cs
@@ -7,8 +7,7 @@
 
 // <ms_docref_add_msal>
 WebApplicationBuilder builder = WebApplication.CreateBuilder(args);
-IEnumerable<string>? initialScopes = builder.Configuration["DownstreamApi:Scopes"]?.Split(' ');
-
+IEnumerable<string>? initialScopes = builder.Configuration.GetSection("DownstreamApi:Scopes").Get<IEnumerable<string>>();
 
 builder.Services.AddMicrosoftIdentityWebAppAuthentication(builder.Configuration, "AzureAd")
     .EnableTokenAcquisitionToCallDownstreamApi(initialScopes)