diff --git a/src/Core/Auth/Identity/TokenProviders/DuoUniversalTokenService.cs b/src/Core/Auth/Identity/TokenProviders/DuoUniversalTokenService.cs
index 9bc5a496e0..647ab16150 100644
--- a/src/Core/Auth/Identity/TokenProviders/DuoUniversalTokenService.cs
+++ b/src/Core/Auth/Identity/TokenProviders/DuoUniversalTokenService.cs
@@ -166,7 +166,7 @@ public class DuoUniversalTokenService(
         }
 
         var normalizedHost = host.ToLowerInvariant();
-        return Constants.BitwardenCloudDomains.Any(d => normalizedHost.EndsWith(d));
+        return Constants.BitwardenCloudDomains.Any(d => normalizedHost == d || normalizedHost.EndsWith("." + d));
     }
 
     private static DuoDeeplinkScheme? GetDeeplinkSchemeOverride(HttpContext httpContext)