diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2
index 0ac39f5761..270a61c8ef 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -32,7 +32,9 @@ HostPrincipalFormat = compile/%s@FEDORAPROJECT.ORG
 AuthKeytab = /etc/koji-hub/koji-hub.keytab
 {% if env == "staging" %}
 {% if inventory_hostname.startswith('koji') %}
-ProxyPrincipals = modularity@STG.FEDORAPROJECT.ORG
+ProxyPrincipals = modularity@STG.FEDORAPROJECT.ORG,HTTP/koji.stg.fedoraproject.org@STG.FEDORAPROJECT.ORG
+{% else %}
+ProxyPrincipals = HTTP/koji.fedoraproject.org@FEDORAPROJECT.ORG
 {% endif %}
 {% endif %}