diff --git a/internal/ui/handlers_sso_clients.go b/internal/ui/handlers_sso_clients.go
index 5284242..330146b 100644
--- a/internal/ui/handlers_sso_clients.go
+++ b/internal/ui/handlers_sso_clients.go
@@ -12,12 +12,14 @@ import (
 func (u *UIServer) handleSSOClientsPage(w http.ResponseWriter, r *http.Request) {
 	csrfToken, err := u.setCSRFCookies(w)
 	if err != nil {
+		u.logger.Error("sso-clients: set CSRF cookies", "error", err)
 		http.Error(w, "internal error", http.StatusInternalServerError)
 		return
 	}
 
 	clients, err := u.db.ListSSOClients()
 	if err != nil {
+		u.logger.Error("sso-clients: list clients", "error", err)
 		u.renderError(w, r, http.StatusInternalServerError, "failed to load SSO clients")
 		return
 	}
diff --git a/web/templates/sso_clients.html b/web/templates/sso_clients.html
index 27b8c48..a328d6d 100644
--- a/web/templates/sso_clients.html
+++ b/web/templates/sso_clients.html
@@ -1,3 +1,4 @@
+{{define "sso_clients"}}{{template "base" .}}{{end}}
 {{define "title"}} - SSO Clients{{end}}
 {{define "content"}}
 <div class="page-header d-flex justify-between align-center">