diff --git a/AzureJavaSDK/JCA/integrate_keyvault_JCA_provider_with_jarsigner.md b/AzureJavaSDK/JCA/integrate_keyvault_JCA_provider_with_jarsigner.md
index 72b72f4..66842be 100644
--- a/AzureJavaSDK/JCA/integrate_keyvault_JCA_provider_with_jarsigner.md
+++ b/AzureJavaSDK/JCA/integrate_keyvault_JCA_provider_with_jarsigner.md
@@ -58,7 +58,7 @@ Note the appId and password from the output, you'll need them later.
 
 ```shell
 appId=$(az ad sp list --display-name $SERVICE_PRINCIPAL_NAME --query "[].appId" --output tsv | tr -d '\r\n')
-objectId=$(az ad app show --id "$appId" --query id -o tsv | tr -d '\r\n')
+objectId=$(az ad sp show --id "$appId" --query id -o tsv | tr -d '\r\n')
 ```
 
 7. Assign Permissions to Service Principal: