diff --git a/src/openforms/authentication/contrib/digid/tests/test_signicat_integration.py b/src/openforms/authentication/contrib/digid/tests/test_signicat_integration.py
index 7587c206bb..dc68163e57 100644
--- a/src/openforms/authentication/contrib/digid/tests/test_signicat_integration.py
+++ b/src/openforms/authentication/contrib/digid/tests/test_signicat_integration.py
@@ -32,6 +32,9 @@
 SIGNICAT_BROKER_BASE = furl("https://maykin.pre.ie01.signicat.pro/broker")
 
 
+@patch(
+    "openforms.submissions.tokens.submission_resume_token_generator.secret", new="dummy"
+)
 @patch(
     "onelogin.saml2.authn_request.OneLogin_Saml2_Utils.generate_unique_id",
     lambda *_, **__: "ONELOGIN_123456",
@@ -484,6 +487,7 @@ def test_raising_loa_requirements_fails_in_flight_authentications(self):
         clear_caches()
 
         acs_response = self.client.get(acs_url.url, follow=True)
+        assert acs_response.status_code == 200
         # we are not not logged in
         self.assertNotIn(FORM_AUTH_SESSION_KEY, self.client.session)
         # and are redirected back to the broker
diff --git a/src/openforms/authentication/contrib/eherkenning/tests/test_signicat_integration.py b/src/openforms/authentication/contrib/eherkenning/tests/test_signicat_integration.py
index 507cd11912..c6f9a42bd8 100644
--- a/src/openforms/authentication/contrib/eherkenning/tests/test_signicat_integration.py
+++ b/src/openforms/authentication/contrib/eherkenning/tests/test_signicat_integration.py
@@ -33,6 +33,9 @@
 SELECT_EHERKENNING_SIM = SIGNICAT_BROKER_BASE / "authn/simulator/selection/eh"
 
 
+@patch(
+    "openforms.submissions.tokens.submission_resume_token_generator.secret", new="dummy"
+)
 @patch(
     "onelogin.saml2.authn_request.OneLogin_Saml2_Utils.generate_unique_id",
     lambda *_, **__: "ONELOGIN_123456",
@@ -207,6 +210,7 @@ def test_login_with_a_high_loa_succeeds(self):
         # prep the URL for Django test client consumption
         acs_url.remove(netloc=True, scheme=True)
         acs_response = self.client.get(acs_url.url, follow=True)
+        assert acs_response.status_code == 200
 
         # we are logged in
         self.assertIn(FORM_AUTH_SESSION_KEY, self.client.session)