diff --git a/demo/shibboleth/configs-and-secrets/midpoint/shibboleth/shibboleth2.xml b/demo/shibboleth/configs-and-secrets/midpoint/shibboleth/shibboleth2.xml
index ee05a97..d597970 100644
--- a/demo/shibboleth/configs-and-secrets/midpoint/shibboleth/shibboleth2.xml
+++ b/demo/shibboleth/configs-and-secrets/midpoint/shibboleth/shibboleth2.xml
@@ -112,9 +112,9 @@
 
         <!-- Simple file-based resolvers for separate signing/encryption keys. -->
         <CredentialResolver type="File" use="signing"
-            key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/>
+            key="/run/secrets/mp_sp-signing-key.pem" certificate="sp-signing-cert.pem"/>
         <CredentialResolver type="File" use="encryption"
-            key="sp-encrypt-key.pem" certificate="sp-encrypt-cert.pem"/>
+            key="/run/secrets/mp_sp-encrypt-key.pem" certificate="sp-encrypt-cert.pem"/>
 
         <!--
         The default settings can be overridden by creating ApplicationOverride elements (see