# Pass Identity Headers

## Summary

When set to true, the **Pass Identity Headers** setting sends identity headers to all upstream applications.

To change this behavior for a specific route, use the [route-level Pass Identity Headers](https://www.pomerium.com/docs/reference/routes/pass-identity-headers-per-route.md) setting.

Identity headers include:

- `X-Pomerium-Jwt-Assertion`
- `X-Pomerium-Claim-*` (see [JWT Claim Headers](https://www.pomerium.com/docs/reference/jwt-claim-headers.md) for more information)

## How to configure

**Core:**

| **Config file keys** | **Environment variables** | **Type** | **Usage** | **Default** |
| :-- | :-- | :-- | :-- | :-- |
| `pass_identity_headers` | `PASS_IDENTITY_HEADERS` | `boolean` | **optional** | \*`false` |

### Examples

```yaml
pass_identity_headers: true

routes:
  - from: https://service.corp.example.io
    to: http://localhost:3000
```

**Enterprise:**

**Kubernetes:**

| **[Parameter name](https://www.pomerium.com/docs/deploy/k8s/reference.md#spec)** | **Type** | **Usage** | **Default** |
| :-- | :-- | :-- | :-- |
| `passIdentityHeaders` | `boolean` | **optional** | \*`false` |

### Examples

```yaml
passIdentityHeaders: true
```

See [Kubernetes - Global Configuration](https://www.pomerium.com/docs/deploy/k8s/configure.md) for more information.

\* If neither the **global** *nor* **route-level** `pass_identity_headers` settings are defined, both settings will default to `false`.