diff --git a/gerrit_util.py b/gerrit_util.py
index 561d08908c..a7619c3d9e 100644
--- a/gerrit_util.py
+++ b/gerrit_util.py
@@ -344,6 +344,8 @@ class SSOAuthenticator(Authenticator):
     def is_applicable(cls, *, conn: Optional[HttpConn] = None) -> bool:
         if not cls._resolve_sso_cmd():
             return False
+        if conn is not None:
+            return ShouldUseSSO(conn.host)
         email = scm.GIT.GetConfig(os.getcwd(), 'user.email', default='')
         return email.endswith('@google.com')