diff --git a/.changeset/fuzzy-taxis-hammer.md b/.changeset/fuzzy-taxis-hammer.md
new file mode 100644
index 0000000000..a5d6af815f
--- /dev/null
+++ b/.changeset/fuzzy-taxis-hammer.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': patch
+---
+
+Forward authorization on scaffolder backend requests
diff --git a/plugins/scaffolder-backend/src/service/router.ts b/plugins/scaffolder-backend/src/service/router.ts
index ec7e79bbc8..1e2891cfb8 100644
--- a/plugins/scaffolder-backend/src/service/router.ts
+++ b/plugins/scaffolder-backend/src/service/router.ts
@@ -288,7 +288,9 @@ export async function createRouter(
           );
         }
 
-        const template = await entityClient.findTemplate(name);
+        const template = await entityClient.findTemplate(name, {
+          token: getBearerToken(req.headers.authorization),
+        });
         if (isBeta2Template(template)) {
           const parameters = [template.spec.parameters ?? []].flat();
           res.json({
@@ -356,7 +358,9 @@ export async function createRouter(
     .post('/v2/tasks', async (req, res) => {
       const templateName: string = req.body.templateName;
       const values: TemplaterValues = req.body.values;
-      const template = await entityClient.findTemplate(templateName);
+      const template = await entityClient.findTemplate(templateName, {
+        token: getBearerToken(req.headers.authorization),
+      });
 
       let taskSpec;
       if (isAlpha1Template(template)) {