diff --git a/.changeset/auth-backend-ten-doors-exist.md b/.changeset/auth-backend-ten-doors-exist.md
new file mode 100644
index 0000000000..97a3a421ee
--- /dev/null
+++ b/.changeset/auth-backend-ten-doors-exist.md
@@ -0,0 +1,6 @@
+---
+'@backstage/core-api': patch
+'@backstage/plugin-auth-backend': patch
+---
+
+bugfix: issue 3223 - detect mismatching origin and indicate it in the message at auth failure