diff --git a/src/Provider/AbstractProvider.php b/src/Provider/AbstractProvider.php
index eb624176..3f9dba7f 100644
--- a/src/Provider/AbstractProvider.php
+++ b/src/Provider/AbstractProvider.php
@@ -386,11 +386,11 @@ abstract protected function getDefaultScopes();
      * Returns the string that should be used to separate scopes when building
      * the URL for requesting an access token.
      *
-     * @return string Scope separator, defaults to ','
+     * @return string Scope separator, defaults to ' '
      */
     protected function getScopeSeparator()
     {
-        return ',';
+        return ' ';
     }
 
     /**
diff --git a/test/src/Provider/AbstractProviderTest.php b/test/src/Provider/AbstractProviderTest.php
index 49c970f5..482f10cc 100644
--- a/test/src/Provider/AbstractProviderTest.php
+++ b/test/src/Provider/AbstractProviderTest.php
@@ -313,7 +313,7 @@ public function testScopesOverloadedDuringAuthorize()
         parse_str(parse_url($url, PHP_URL_QUERY), $qs);
 
         $this->assertArrayHasKey('scope', $qs);
-        $this->assertSame('foo,bar', $qs['scope']);
+        $this->assertSame('foo bar', $qs['scope']);
     }
 
     public function testAuthorizationStateIsRandom()
@@ -697,7 +697,7 @@ public function testGetAccessTokenWithScope($method)
             ->once()
             ->with(
                 ['client_id' => 'mock_client_id', 'client_secret' => 'mock_secret', 'redirect_uri' => 'none'],
-                ['code' => 'mock_authorization_code', 'scope' => 'foo,bar']
+                ['code' => 'mock_authorization_code', 'scope' => 'foo bar']
             )
             ->andReturn([]);