diff --git a/consul/discovery.go b/consul/discovery.go
index e840ad7..5b7fb11 100644
--- a/consul/discovery.go
+++ b/consul/discovery.go
@@ -157,7 +157,7 @@ func (s *Service) getTags() []string {
 		"traefik.http.services." + s.Name + ".loadbalancer.passhostheader=false",
 		"traefik.http.middlewares.auth.forwardauth.address=http://identity-svc/api/v1/traefik",
 		"traefik.http.middlewares.auth.forwardauth.authResponseHeaders=Set-Cookie",
-		"traefik.http.middlewares.auth.forwardauth.authRequestHeaders=",
+		"traefik.http.middlewares.auth.forwardauth.trustForwardHeader=true",
 		"traefik.http.middlewares.requestid.plugin.requestid.headerName=X-Request-ID",
 		"traefik.http.middlewares.stripprefix_" + s.Name + ".stripprefix.prefixes=" + s.pathPrefix,
 		"traefik.tls.certificates.certfile=/certs/client.cert",