diff --git a/lib/actions/registration.js b/lib/actions/registration.js
index c862c0f18..6c391088d 100644
--- a/lib/actions/registration.js
+++ b/lib/actions/registration.js
@@ -214,7 +214,7 @@ module.exports = function registrationAction(provider) {
         // TODO: support for expiring dynamic registration clients
         if (secretRequired) {
           Object.assign(properties, {
-            client_secret: crypto.randomBytes(48).toString('base64'),
+            client_secret: secretFactory(),
             client_secret_expires_at: 0,
           });
         } else {