diff --git a/docs/book/src/images/oidc-issuer-sequence-diagram.png b/docs/book/src/images/oidc-issuer-sequence-diagram.png
index b9504c71c..75f19e223 100644
Binary files a/docs/book/src/images/oidc-issuer-sequence-diagram.png and b/docs/book/src/images/oidc-issuer-sequence-diagram.png differ
diff --git a/docs/book/src/installation/self-managed-clusters/oidc-issuer.md b/docs/book/src/installation/self-managed-clusters/oidc-issuer.md
index 0f6231ef5..0e09a25c3 100644
--- a/docs/book/src/installation/self-managed-clusters/oidc-issuer.md
+++ b/docs/book/src/installation/self-managed-clusters/oidc-issuer.md
@@ -25,7 +25,7 @@ sequenceDiagram
     Azure Active Directory->>OpenID Connect Issuer:{IssuerURL}/openid/v1/jwks
     OpenID Connect Issuer->>Azure Active Directory:Return the JWKS document
     Azure Active Directory->>Azure Active Directory:Validate the authenticity of the service account token
-    Kubernetes Workload->>Azure Active Directory:Return an AAD token
+    Azure Active Directory->>Kubernetes Workload:Return an AAD token
 ```
 --->