diff --git a/tools/security-bootstrap-console/security_bootstrap_console.py b/tools/security-bootstrap-console/security_bootstrap_console.py
index ce44866..832ca46 100755
--- a/tools/security-bootstrap-console/security_bootstrap_console.py
+++ b/tools/security-bootstrap-console/security_bootstrap_console.py
@@ -1404,7 +1404,8 @@ def admin_identity_command_payloads(data: dict[str, Any]) -> list[dict[str, str]
         "# Terminal 2: run the pod-bundled bao CLI, then copy the printed login URL into your local browser if needed.\n"
         "kubectl exec -it -n openbao openbao-0 -- sh -lc '\n"
         "  export BAO_ADDR=http://127.0.0.1:8200\n"
-        "  bao login -method=oidc -path=keycape role=platform-admin\n"
+        "  bao login -method=oidc -path=keycape role=platform-admin \\\n"
+        "    skip_browser=true listenaddress=0.0.0.0 callbackhost=127.0.0.1 port=8250\n"
         "  bao token lookup\n"
         "'"
     )