diff --git a/.changeset/tasty-chairs-flash.md b/.changeset/tasty-chairs-flash.md
new file mode 100644
index 0000000000..8be48d92b3
--- /dev/null
+++ b/.changeset/tasty-chairs-flash.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder': patch
+---
+
+Pass through the `idToken` in `Authorization` Header for `listActions` request
diff --git a/plugins/scaffolder/src/api.ts b/plugins/scaffolder/src/api.ts
index 85df77f2f5..37d78d0fda 100644
--- a/plugins/scaffolder/src/api.ts
+++ b/plugins/scaffolder/src/api.ts
@@ -245,7 +245,10 @@ export class ScaffolderClient implements ScaffolderApi {
    */
   async listActions(): Promise<ListActionsResponse> {
     const baseUrl = await this.discoveryApi.getBaseUrl('scaffolder');
-    const response = await fetch(`${baseUrl}/v2/actions`);
+    const token = await this.identityApi.getIdToken();
+    const response = await fetch(`${baseUrl}/v2/actions`, {
+      headers: token ? { Authorization: `Bearer ${token}` } : {},
+    });
 
     if (!response.ok) {
       throw ResponseError.fromResponse(response);