diff --git a/content/client-server-api/modules/content_repo.md b/content/client-server-api/modules/content_repo.md
index 79e472d7..2649b688 100644
--- a/content/client-server-api/modules/content_repo.md
+++ b/content/client-server-api/modules/content_repo.md
@@ -70,6 +70,9 @@ Servers SHOULD consider their local ecosystem impact before enacting a freeze.
 This could mean ensuring their users' typical clients support the new endpoints
 when available, or updating bridges to start using media proxies.
 
+In addition to the above, servers SHOULD exclude [IdP icons used in the `m.login.sso` flow](/client-server-api/#definition-mloginsso-flow-schema)
+from the freeze. See the `m.login.sso` flow schema for details.
+
 An *example* timeline for a server may be:
 
 * Matrix 1.11 release: Clients begin supporting authenticated media.
diff --git a/data/api/client-server/definitions/sso_login_flow.yaml b/data/api/client-server/definitions/sso_login_flow.yaml
index 48f193be..0996511e 100644
--- a/data/api/client-server/definitions/sso_login_flow.yaml
+++ b/data/api/client-server/definitions/sso_login_flow.yaml
@@ -55,7 +55,7 @@ properties:
             Intended to be shown alongside the `name` if provided.
 
             {{% boxes/note %}}
-            Clients will need to use the deprecated [`/download`](/client-server-api/#get_matrixmediav3downloadservernamemediaid)
+            Clients SHOULD use the deprecated [`/download`](/client-server-api/#get_matrixmediav3downloadservernamemediaid)
             and [`/thumbnail`](/client-server-api/#get_matrixmediav3thumbnailservernamemediaid)
             endpoints to retrieve this media item because clients will not have
             an access token they can authenticate with yet. Servers SHOULD ensure