diff --git a/internal/webserver/server.go b/internal/webserver/server.go
index b91bc47..29b8bfe 100644
--- a/internal/webserver/server.go
+++ b/internal/webserver/server.go
@@ -134,7 +134,7 @@ func (s *Server) handleLogin(w http.ResponseWriter, r *http.Request) {
 
 // handleSSOLogin renders a landing page with a "Sign in with MCIAS" button.
 func (s *Server) handleSSOLogin(w http.ResponseWriter, r *http.Request) {
-	web.RenderTemplate(w, mcqweb.FS, "login.html", pageData{SSO: true})
+	web.RenderTemplate(w, mcqweb.FS, "login.html", pageData{SSO: true}, s.csrf.TemplateFunc(w))
 }
 
 // handleSSORedirect initiates the SSO redirect to MCIAS.