diff --git a/terraform/keycloak/main.tf b/terraform/keycloak/main.tf
index 1763a28..adfafa2 100644
--- a/terraform/keycloak/main.tf
+++ b/terraform/keycloak/main.tf
@@ -167,9 +167,7 @@ resource "keycloak_openid_client_optional_scopes" "oauth2_app" {
 }
 
 resource "keycloak_group" "oauth2_app" {
-  for_each = {
-    for k, v in var.oauth2_applications : k => v if length(v.allowed_groups) > 0
-  }
+  for_each = var.oauth2_applications
 
   realm_id = keycloak_realm.hexor.id
   name     = "app-${each.key}"