diff --git a/spec/controllers/session_controller_spec.rb b/spec/controllers/session_controller_spec.rb
index 683e7ced1..59a838a52 100644
--- a/spec/controllers/session_controller_spec.rb
+++ b/spec/controllers/session_controller_spec.rb
@@ -261,7 +261,7 @@ describe SessionController do
 
       # nonce is bad now
       get :sso_login, Rack::Utils.parse_query(sso.payload)
-      expect(response.code).to eq('500')
+      expect(response.code).to eq('419')
     end
 
     it 'can act as an SSO provider' do