diff --git a/Workbench/webproxy/container_files/httpd/.htpasswd b/Workbench/webproxy/container_files/httpd/.htpasswd
index 5874795..f9046e3 100644
--- a/Workbench/webproxy/container_files/httpd/.htpasswd
+++ b/Workbench/webproxy/container_files/httpd/.htpasswd
@@ -1,2 +1,3 @@
 csp:$apr1$/AqZo5q1$D0h7ClOUpgCvUhayr6oOg0
 guest:$apr1$E6QtcEtu$/YXrr/F4OpNmTClXGBXpX/
+administrator:$apr1$yYQxN8bz$UlAb7q/m6jra60QKjhHPA/
diff --git a/Workbench/webproxy/container_files/httpd/proxy.conf b/Workbench/webproxy/container_files/httpd/proxy.conf
index 6c0eafa..bc68f51 100644
--- a/Workbench/webproxy/container_files/httpd/proxy.conf
+++ b/Workbench/webproxy/container_files/httpd/proxy.conf
@@ -12,7 +12,9 @@ AllowEncodedSlashes On
 </Location>
 
 <Location /midpoint>
-  RequestHeader unset Authorization
+  <If "%{THE_REQUEST} =~ m#\s/+midpoint/auth/shib/?[?\s]#">
+    RequestHeader unset Authorization
+  </If>
 </Location>
 
 <Location /idpui>