diff --git a/README.md b/README.md
index 1690f56d225aba11549dc400dd640db777bdf2c5..c00c7ae044c09f166f4b111befd3572beab8326e 100644
--- a/README.md
+++ b/README.md
@@ -9,18 +9,20 @@ Notebooks.
 
 Prepare environment for interrating with Hashicorp Vault:
 
-    export VAULT_ADDR=https://vault.egi.zcu.cz:8200
+    export VAULT_ADDR=https://vault.services.fedcloud.eu:8200
 
-    # replace $LOGIN for real user name in vault
-    vault login -method=userpass username=$LOGIN
+Login:
 
-Check environment:
+    # get the service token
+    read OIDC_ACCESS_TOKEN
 
-    vault kv get -mount=eosc/dev -field 'data' -format=json test
+    # login to vault
+    export VAULT_TOKEN=$(vault write auth/jwt/login jwt=$OIDC_ACCESS_TOKEN | grep -Po 'token\s+\K[^\s]+$')
 
 Note: values were created as admin by commands (replace $SECRET\_NAME and $VALUE):
 
-    vault kv put -mount=eosc/dev $SECRET_NAME value=$VALUE
+    prefix=/users/e1662e20-e34b-468c-b0ce-d899bc878364@egi.eu/eosc-dev
+    vault kv put -mount=secret vault kv put -mount secrets $prefix/nexus_admin_password/$SECRET_NAME value=$VALUE
 
 ## Sites
 
diff --git a/cesnet-central/inventory/99-all.yaml b/cesnet-central/inventory/99-all.yaml
index 54f7e62bfdd501703cfc1f9e28ae8df6fe0c4cdd..54febfdf5a88de827cc341127f4e402c06af1477 100644
--- a/cesnet-central/inventory/99-all.yaml
+++ b/cesnet-central/inventory/99-all.yaml
@@ -10,7 +10,7 @@ all:
     ansible_user: egi
 
     site_name: cesnet-central
-    vault_mount_point: eosc/dev
+    vault_mount_point: secrets/users/e1662e20-e34b-468c-b0ce-d899bc878364@egi.eu/eosc-dev
 
     binder_hostname: replay.eosc.zcu.cz
     old_binder_hostname: binder.eosc.zcu.cz
diff --git a/cesnet-central/playbooks/repository-nexus.yaml b/cesnet-central/playbooks/repository-nexus.yaml
index b6f4b7e1b0558cd5b61a7054e177dd0f535f76cb..96c9cfb808d178fd49a688a00d5093b36c96ac65 100644
--- a/cesnet-central/playbooks/repository-nexus.yaml
+++ b/cesnet-central/playbooks/repository-nexus.yaml
@@ -3,11 +3,11 @@
   hosts: master
   vars:
     nexus_url: "https://{{ nexus_hostname }}/service/rest/v1"
-    nexus_admin_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/data/nexus_admin_password:value', token_validate=false) }}"
-    nexus_binder_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/data/nexus_binder_password:value', token_validate=false) }}"
-    nexus_notebooks_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/data/nexus_notebooks_password:value',
+    nexus_admin_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/nexus_admin_password:value', token_validate=false) }}"
+    nexus_binder_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/nexus_binder_password:value', token_validate=false) }}"
+    nexus_notebooks_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/nexus_notebooks_password:value',
       token_validate=false) }}"
-    nexus_writer_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/data/nexus_writer_password:value', token_validate=false) }}"
+    nexus_writer_password: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/nexus_writer_password:value', token_validate=false) }}"
     nexus_blobstore_name: default
     nexus_blobstore_type: file
     nexus_repository_name: container-notebooks
diff --git a/cesnet-mcc/inventory/99-all.yaml b/cesnet-mcc/inventory/99-all.yaml
index 509e2f42f13351ac6df5170841039b5689168751..9c872de0c3522f6866d30d808e4224b11975c159 100644
--- a/cesnet-mcc/inventory/99-all.yaml
+++ b/cesnet-mcc/inventory/99-all.yaml
@@ -11,7 +11,7 @@ all:
     ansible_become: yes
     ansible_user: egi
     site_name: cesnet-mcc
-    vault_mount_point: eosc/dev
+    vault_mount_point: secrets/users/e1662e20-e34b-468c-b0ce-d899bc878364@egi.eu/eosc-dev
 
     gateway_hostname: gateway-cesnet.eosc.zcu.cz
     grafana_hostname: grafana-cesnet.eosc.zcu.cz
diff --git a/cesnet-mcc/playbooks/gateway.yaml b/cesnet-mcc/playbooks/gateway.yaml
index f6e1d37a6fab1792f2672b4a82ee93a54e509a2c..fe6a2652ad40af7ee6895c7eb2ee7525968bf888 100644
--- a/cesnet-mcc/playbooks/gateway.yaml
+++ b/cesnet-mcc/playbooks/gateway.yaml
@@ -11,7 +11,7 @@
         dest: /tmp/gateway.yaml
         mode: 0640
         content: |
-          authToken: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/data/gateway_authtoken:value', token_validate=true) }}"
+          authToken: "{{ lookup('community.hashi_vault.hashi_vault', vault_mount_point + '/gateway_authtoken:value', token_validate=true) }}"
           global:
             rbac: true
           deployment: