diff --git a/client/server/update_settings_gate_test.go b/client/server/update_settings_gate_test.go
index 91ca8a898..667c963a3 100644
--- a/client/server/update_settings_gate_test.go
+++ b/client/server/update_settings_gate_test.go
@@ -295,6 +295,11 @@ func TestLogin_RestatingTheStoredConfigPassesTheGate(t *testing.T) {
 	s.updateSettingsDisabled = true
 	s.rootCtx = internal.CtxInitState(context.Background())
 
+	// Stand in for the management round trip the handler makes once the gate
+	// lets it through, so this test exercises the gate and not the network:
+	// without it the profile's management URL is dialed for real.
+	s.isLoginRequiredFn = func(context.Context) (bool, error) { return false, nil }
+
 	_, err := s.Login(userCtx(), &proto.LoginRequest{
 		Username:      &username,
 		ManagementUrl: storedManagementURL,