diff --git a/plugins/auth-backend/src/service/router.ts b/plugins/auth-backend/src/service/router.ts
index b74f7d8d38..3ae3b6cb95 100644
--- a/plugins/auth-backend/src/service/router.ts
+++ b/plugins/auth-backend/src/service/router.ts
@@ -62,7 +62,7 @@ export async function createRouter({
 
   const secret = 'backstage secret'; // TODO: Allow an override here
   router.use(cookieParser(secret));
-  router.use(session({ secret }));
+  router.use(session({ secret, saveUninitialized: false }));
   router.use(express.urlencoded({ extended: false }));
   router.use(express.json());