diff --git a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.alt_auth.conf b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.alt_auth.conf
index 98b50271e..ac5a816ed 100644
--- a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.alt_auth.conf
+++ b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.alt_auth.conf
@@ -6,6 +6,7 @@
 auth_param negotiate program "/usr/local/libexec/squid/negotiate_kerberos_auth"
 auth_param negotiate children 10
 auth_param negotiate keep_alive on
+acl local_auth proxy_auth REQUIRED
 {%         endif %}
 {%       endif %}
 {%     endfor %}