diff --git a/vaultwarden/default.nix b/vaultwarden/default.nix
index 69edff4..68a429d 100644
--- a/vaultwarden/default.nix
+++ b/vaultwarden/default.nix
@@ -199,7 +199,11 @@ rec {
       egress = [ "http://127.0.0.1:${toString serviceIngress}" ];
       realm = sso.realm;
       allowed_roles = [ "user" "/admin|admin" ];
-      skip_auth_routes = [ "^/api" "^/identity/connect/token" ];
+      skip_auth_routes = [
+        "^/api"
+        "^/identity/connect/token"
+        "^/identity/accounts/prelogin"
+      ];
       inherit metricsPort;
       keys = {
         cookieSecret = "${serviceName}_oauth2proxy_cookiesecret";