diff --git a/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs b/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs
index 57e7d2942..d60301085 100644
--- a/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs
+++ b/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs
@@ -82,7 +82,7 @@ public void RegisterAudienceValidation(
                     return audiences.Contains(validAudience);
                 }
 
-                throw new SecurityTokenValidationException("Token does not contain a valid audience. ");
+                throw new SecurityTokenInvalidAudienceException("Token contains an invalid audience. ");
             }
 
             // Cases where developers explicitly provided the valid audiences
diff --git a/tests/Microsoft.Identity.Web.Test/Resource/RegisterValidAudienceTests.cs b/tests/Microsoft.Identity.Web.Test/Resource/RegisterValidAudienceTests.cs
index 464d156e4..5f7059828 100644
--- a/tests/Microsoft.Identity.Web.Test/Resource/RegisterValidAudienceTests.cs
+++ b/tests/Microsoft.Identity.Web.Test/Resource/RegisterValidAudienceTests.cs
@@ -146,7 +146,7 @@ private void AssertAudienceProvidedInValidAudiences()
 
         private void AssertFailureOnInvalidAudienceInToken()
         {
-            Assert.Throws<SecurityTokenValidationException>(() => _registerValidAudience.ValidateAudience(
+            Assert.Throws<SecurityTokenInvalidAudienceException>(() => _registerValidAudience.ValidateAudience(
                    _validAudiences,
                    _token,
                    _validationParams));