Pass Identity Headers (per route)

Summary

When set to true, the Pass Identity Headers (per route) setting will pass identity headers to the upstream application.

The default value for this setting is controlled by the global-level Pass Identity Headers setting.

Identity headers include:

• X-Pomerium-Jwt-Assertion
• X-Pomerium-Claim-* (see JWT Claim Headers for more information)

How to configure

Core

YAML/JSON setting	Type	Usage
pass_identity_headers	boolean	optional

Examples

routes:
  - from: https://verify.localhost.pomerium.io
    to: http://verify:8000
    pass_identity_headers: true

Enterprise

Set Pass Identity Headers under General route settings in the Console:

The pass_identity_headers setting can also be configured by Terraform.

Kubernetes

Annotation name	Type	Usage	Default
pass_identity_headers	boolean	optional	Inherits from global setting

ingress.pomerium.io/pass_identity_headers: 'true'