diff --git a/connector/oidc/oidc.go b/connector/oidc/oidc.go
index ae63a8c090..f763b72589 100644
--- a/connector/oidc/oidc.go
+++ b/connector/oidc/oidc.go
@@ -270,6 +270,7 @@ func (c *oidcConnector) HandleCallback(s connector.Scopes, r *http.Request) (ide
 
 	ctx := context.WithValue(r.Context(), oauth2.HTTPClient, c.httpClient)
 
+	defer func() { c.logger.Infof("exchanging code for %s", identity.Email) }()
 	token, err := c.oauth2Config.Exchange(ctx, q.Get("code"))
 	if err != nil {
 		return identity, fmt.Errorf("oidc: failed to get token: %v", err)