diff --git a/components/wizard/ProjectSelector.vue b/components/wizard/ProjectSelector.vue
index ee5bdf2..f149dea 100644
--- a/components/wizard/ProjectSelector.vue
+++ b/components/wizard/ProjectSelector.vue
@@ -591,6 +591,13 @@ const upgradePlanButtonAction = () => {
     )
     return
   }
+  // catch SSO session expired / any other unhandled permission flags
+  // redirecting to the workspace root will trigger the standard web authentication flow.
+  if (selectedWorkspace.value?.slug) {
+    $openUrl(
+      `${account.value.accountInfo.serverInfo.url}/workspaces/${selectedWorkspace.value?.slug}`
+    )
+  }
 }
 
 const loadMore = () => {