diff --git a/templates/nginx.j2 b/templates/nginx.j2
index f196460..5d9863d 100644
--- a/templates/nginx.j2
+++ b/templates/nginx.j2
@@ -45,6 +45,9 @@ server {
 		fastcgi_param HTTPS on;
 		fastcgi_param modHeadersAvailable true;
 		fastcgi_param front_controller_active true;
+		# needed to (optionally) support saml via a REMOTE-USER header
+		fastcgi_param REMOTE-USER $http_REMOTE_USER;
+
 		fastcgi_pass php-handler;
 		fastcgi_intercept_errors on;
 		fastcgi_request_buffering off;