diff --git a/backend/src/services/secret-sync/windmill/windmill-sync-fns.ts b/backend/src/services/secret-sync/windmill/windmill-sync-fns.ts
index b7bf4e600..557de2f38 100644
--- a/backend/src/services/secret-sync/windmill/windmill-sync-fns.ts
+++ b/backend/src/services/secret-sync/windmill/windmill-sync-fns.ts
@@ -127,10 +127,13 @@ export const WindmillSyncFns = {
   syncSecrets: async (secretSync: TWindmillSyncWithCredentials, secretMap: TSecretMap) => {
     const {
       connection,
-      destinationConfig: { workspace, path },
+      destinationConfig: { path },
       syncOptions: { disableSecretDeletion }
     } = secretSync;
 
+    // url needs to be lowercase
+    const workspace = secretSync.destinationConfig.workspace.toLowerCase();
+
     const instanceUrl = await getWindmillInstanceUrl(connection);
 
     const { accessToken } = connection.credentials;
@@ -186,9 +189,12 @@ export const WindmillSyncFns = {
   removeSecrets: async (secretSync: TWindmillSyncWithCredentials, secretMap: TSecretMap) => {
     const {
       connection,
-      destinationConfig: { workspace, path }
+      destinationConfig: { path }
     } = secretSync;
 
+    // url needs to be lowercase
+    const workspace = secretSync.destinationConfig.workspace.toLowerCase();
+
     const instanceUrl = await getWindmillInstanceUrl(connection);
 
     const { accessToken } = connection.credentials;
@@ -216,9 +222,12 @@ export const WindmillSyncFns = {
   getSecrets: async (secretSync: TWindmillSyncWithCredentials) => {
     const {
       connection,
-      destinationConfig: { workspace, path }
+      destinationConfig: { path }
     } = secretSync;
 
+    // url needs to be lowercase
+    const workspace = secretSync.destinationConfig.workspace.toLowerCase();
+
     const instanceUrl = await getWindmillInstanceUrl(connection);
 
     const { accessToken } = connection.credentials;