diff --git a/web/static/css/app.css b/web/static/css/app.css
index 3ba8e34..d2fe173 100644
--- a/web/static/css/app.css
+++ b/web/static/css/app.css
@@ -566,6 +566,7 @@ body[data-nav=side] #tab-audit {
 
 .muted { color: var(--muted); }
 .spread { display: flex; justify-content: space-between; align-items: center; gap: 16px; }
+.login-actions { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; margin-top: 16px; }
 .stack > * + * { margin-top: 16px; }
 .mt { margin-top: 16px; }
 
diff --git a/web/templates/login.html b/web/templates/login.html
index 7013c0e..2ab7267 100644
--- a/web/templates/login.html
+++ b/web/templates/login.html
@@ -16,15 +16,13 @@
       <label for="password">Password</label>
       <input type="password" id="password" name="password" autocomplete="current-password" required>
     </div>
-    <div class="spread">
+    <div class="login-actions">
       <button class="btn primary" type="submit">Log in</button>
-      <span><a href="/forgot-password">Forgot password?</a> · <a href="/register">Create an account</a></span>
+      {{if .OIDCEnabled}}<a class="btn" href="/api/v1/auth/oidc/login">Continue with SSO</a>{{end}}
     </div>
   </form>
-  {{if .OIDCEnabled}}
-  <div class="mt">
-    <a class="btn" href="/api/v1/auth/oidc/login">Continue with SSO</a>
-  </div>
-  {{end}}
+  <p class="muted mt" style="margin-bottom:0">
+    <a href="/forgot-password">Forgot password?</a> · <a href="/register">Create an account</a>
+  </p>
 </div>
 {{end}}