diff --git a/frontend/src/core/tests/enterprise/saml-keycloak-login.spec.ts b/frontend/src/core/tests/enterprise/saml-keycloak-login.spec.ts
index e8fe288fe8..fbc36727c7 100644
--- a/frontend/src/core/tests/enterprise/saml-keycloak-login.spec.ts
+++ b/frontend/src/core/tests/enterprise/saml-keycloak-login.spec.ts
@@ -46,8 +46,10 @@ test.describe("Enterprise SAML (Keycloak) — full SSO flow", () => {
     await page.waitForURL((url) => !url.pathname.includes("/login"), {
       timeout: 30_000,
     });
+    // The redesigned UI has no "Tools" nav link; the config button is the
+    // reliable post-login landmark that's always present on the dashboard.
     await expect(
-      page.getByRole("link", { name: /^Tools$/i }).first(),
+      page.locator('[data-testid="config-button"]').first(),
     ).toBeVisible({ timeout: 15_000 });
 
     // ── 2. Identity in settings → Account ────────────────────