diff --git a/src/config.rs b/src/config.rs
index f8369083..d691e8a8 100644
--- a/src/config.rs
+++ b/src/config.rs
@@ -846,9 +846,9 @@ make_config! {
         /// Client cache for discovery endpoint. |> Duration in seconds (0 or less to disable). More details: https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect#client-cache
         sso_client_cache_expiration:    u64,    true,   def,    0;
         /// Skip 2FA for SSO/social login |> `false` keeps Vaultwarden 2FA, `true` always skips it, `auto` skips it only when the IdP returns an MFA AMR or ACR claim
-        sso_2fa_skip:                   String, true,   def,    "false".to_string();
+        sso_2fa_skip:                   String, true,   def,    "false".to_owned();
         /// SSO 2FA AMR values |> Comma-separated AMR values that satisfy `SSO_2FA_SKIP=auto`
-        sso_2fa_amr:                    String, true,   def,    "mfa,otp,fido2,webauthn,hwk".to_string();
+        sso_2fa_amr:                    String, true,   def,    "mfa,otp,fido2,webauthn,hwk".to_owned();
         /// Log all tokens |> `LOG_LEVEL=debug` or `LOG_LEVEL=info,vaultwarden::sso=debug` is required
         sso_debug_tokens:               bool,   true,   def,    false;
     },