# Pass Identity Headers (per route)

## Summary

When set to true, the **Pass Identity Headers (per route)** setting will pass identity headers to the upstream application.

The default value for this setting is controlled by the [global-level Pass Identity Headers](https://www.pomerium.com/docs/reference/pass-identity-headers.md) setting.

Identity headers include:

- `X-Pomerium-Jwt-Assertion`
- `X-Pomerium-Claim-*` (see [JWT Claim Headers](https://www.pomerium.com/docs/reference/jwt-claim-headers.md) for more information)

## How to configure

**Core:**

| **YAML**/**JSON** setting | **Type**  | **Usage**    |
| :------------------------ | :-------- | :----------- |
| `pass_identity_headers`   | `boolean` | **optional** |

### Examples

```yaml
routes:
  - from: https://verify.localhost.pomerium.io
    to: http://verify:8000
    pass_identity_headers: true
```

**Enterprise:**

**Kubernetes:**

| **[Annotation name](https://www.pomerium.com/docs/deploy/k8s/ingress.md#set-ingress-annotations)** | **Type** | **Usage** | **Default** |
| :-- | :-- | :-- | :-- |
| `pass_identity_headers` | `boolean` | **optional** | Inherits from global setting |

```yaml
ingress.pomerium.io/pass_identity_headers: 'true'
```
