diff --git a/roles/taskotron/vault/templates/vault.conf.j2 b/roles/taskotron/vault/templates/vault.conf.j2
index 6a4eda9922..4efa80a48c 100644
--- a/roles/taskotron/vault/templates/vault.conf.j2
+++ b/roles/taskotron/vault/templates/vault.conf.j2
@@ -1,6 +1,7 @@
 WSGIDaemonProcess vault user=apache group=apache threads=5
 WSGIScriptAlias /{{ vault_endpoint }} /usr/share/vault/vault.wsgi
 WSGISocketPrefix run/wsgi
+WSGIPassAuthorization On
 
 # this isn't the best way to force SSL but it works for now
 #RewriteEngine On