diff --git a/k8s/apps/vaultwarden/helmrelease.yaml b/k8s/apps/vaultwarden/helmrelease.yaml
index d9def42..7bd181c 100644
--- a/k8s/apps/vaultwarden/helmrelease.yaml
+++ b/k8s/apps/vaultwarden/helmrelease.yaml
@@ -28,6 +28,7 @@ spec:
         existingSecretKey: SSO_CLIENT_SECRET
       signupsMatchEmail: true
       onlySSO: true
+      enforceSSO: true
     ingress:
       enabled: true
       class: traefik