diff --git a/pkg/evaluators/identity_extension.go b/pkg/evaluators/identity_extension.go
index 63dc87a9..ae015a0d 100644
--- a/pkg/evaluators/identity_extension.go
+++ b/pkg/evaluators/identity_extension.go
@@ -24,5 +24,8 @@ func (i *IdentityExtension) ResolveFor(identityObject map[string]any, authJSON s
 	if value, exists := identityObject[i.Name]; exists && !i.Overwrite {
 		return value, nil
 	}
-	return i.Value.ResolveFor(authJSON)
+	if i.Value != nil {
+		i.Value.ResolveFor(authJSON)
+	}
+	return "", nil
 }