diff --git a/common/app/http/GuardianAuthWithExemptions.scala b/common/app/http/GuardianAuthWithExemptions.scala
index 91f9a18fa46..237c2fdbfaa 100644
--- a/common/app/http/GuardianAuthWithExemptions.scala
+++ b/common/app/http/GuardianAuthWithExemptions.scala
@@ -57,7 +57,7 @@ class GuardianAuthWithExemptions(
       case _      => s"local.dev-gutools.co.uk" // covers DEV, LOCAL, tests etc.
     }
 
-  override val panDomainSettings =
+  override lazy val panDomainSettings =
     new PanDomainAuthSettingsRefresher(
       domain = toolsDomainSuffix,
       system,