diff --git a/src/pretix/base/customersso/oidc.py b/src/pretix/base/customersso/oidc.py
index cfa02ecf6f..faf1a3c7ad 100644
--- a/src/pretix/base/customersso/oidc.py
+++ b/src/pretix/base/customersso/oidc.py
@@ -24,7 +24,7 @@ import hashlib
 import logging
 import time
 from datetime import datetime
-from urllib.parse import urlencode, urljoin
+from urllib.parse import urlencode, urljoin, parse_qsl
 
 import jwt
 import requests
@@ -140,10 +140,10 @@ def oidc_validate_and_complete_config(config):
             )
 
     if "query_parameters" in config and config["query_parameters"]:
-         config["query_parameters"] = urllib.parse.urlencode(
-             urllib.parse.parse_qsl(config["query_parameters"])
-         )
-    config['provider_config'] = provider_config
+        config["query_parameters"] = urlencode(
+            parse_qsl(config["query_parameters"])
+        )
+        config['provider_config'] = provider_config
     return config
 
 
@@ -160,7 +160,7 @@ def oidc_authorize_url(provider, state, redirect_uri):
     }
 
     if "query_parameters" in provider.configuration and provider.configuration["query_parameters"]:
-        params.update(urllib.parse.parse_qsl(provider.configuration["query_parameters"]))
+        params.update(parse_qsl(provider.configuration["query_parameters"]))
 
     return endpoint + '?' + urlencode(params)