diff --git a/.changeset/mighty-bats-nail.md b/.changeset/mighty-bats-nail.md
new file mode 100644
index 0000000000..a74d8fa48c
--- /dev/null
+++ b/.changeset/mighty-bats-nail.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder': patch
+---
+
+Support auth by sending cookies in eventstream request
diff --git a/plugins/scaffolder/src/api.ts b/plugins/scaffolder/src/api.ts
index e266d06a91..6caa2a4446 100644
--- a/plugins/scaffolder/src/api.ts
+++ b/plugins/scaffolder/src/api.ts
@@ -196,7 +196,7 @@ export class ScaffolderClient implements ScaffolderApi {
           const url = `${baseUrl}/v2/tasks/${encodeURIComponent(
             taskId,
           )}/eventstream`;
-          const eventSource = new EventSource(url);
+          const eventSource = new EventSource(url, { withCredentials: true });
           eventSource.addEventListener('log', (event: any) => {
             if (event.data) {
               try {