diff --git a/vaultwarden/default.nix b/vaultwarden/default.nix
index 5c1dacb..96018c3 100644
--- a/vaultwarden/default.nix
+++ b/vaultwarden/default.nix
@@ -189,7 +189,7 @@ rec {
       egress = [ "http://127.0.0.1:${toString serviceIngress}" ];
       realm = sso.realm;
       allowed_roles = [ "user" "/admin|admin" ];
-      skip_auth_routes = [ "^/api" ];
+      skip_auth_routes = [ "^/api" "^/identity/connect/token" ];
       inherit metricsPort;
       keys = {
         cookieSecret = "${serviceName}_oauth2proxy_cookiesecret";