diff --git a/.server-changes/sso-form-content-type.md b/.server-changes/sso-form-content-type.md
new file mode 100644
index 0000000000..a7699a4dc4
--- /dev/null
+++ b/.server-changes/sso-form-content-type.md
@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Return a clear client error when SSO form submissions use an unsupported content type
diff --git a/apps/webapp/app/routes/auth.sso.ts b/apps/webapp/app/routes/auth.sso.ts
index c1eb611345..671f20d419 100644
--- a/apps/webapp/app/routes/auth.sso.ts
+++ b/apps/webapp/app/routes/auth.sso.ts
@@ -23,6 +23,14 @@ export async function action({ request }: ActionFunctionArgs) {
     return new Response(null, { status: 405 });
   }
 
+  const contentType = request.headers.get("content-type")?.toLowerCase() ?? "";
+  if (
+    !contentType.includes("application/x-www-form-urlencoded") &&
+    !contentType.includes("multipart/form-data")
+  ) {
+    return new Response(null, { status: 415 });
+  }
+
   const form = await request.formData();
   const rawEmail = form.get("email");
   if (typeof rawEmail !== "string" || rawEmail.trim().length === 0) {