diff --git a/README.md b/README.md
index 98cebb9a9..a2b328a5d 100644
--- a/README.md
+++ b/README.md
@@ -1031,7 +1031,7 @@ Sets up a virtual host with a wildcard alias subdomain mapped to a directory wit
     }
 ```
 
-#####`wsgi_daemon_process`, `wsgi_daemon_process_options`, `wsgi_process_group`, & `wsgi_script_aliases`
+#####`wsgi_daemon_process`, `wsgi_daemon_process_options`, `wsgi_process_group`, `wsgi_script_aliases`, & `wsgi_pass_authorization`
 
 Set up a virtual host with [WSGI](https://code.google.com/p/modwsgi/).
 
@@ -1043,6 +1043,8 @@ Set up a virtual host with [WSGI](https://code.google.com/p/modwsgi/).
 
 `wsgi_script_aliases` requires a hash of web paths to filesystem .wsgi paths. Defaults to 'undef'.
 
+`wsgi_pass_authorization` the WSGI application handles authorisation instead of Apache when set to 'On'. For more information see [here] (http://modwsgi.readthedocs.org/en/latest/configuration-directives/WSGIPassAuthorization.html).  Defaults to 'undef' where apache will set the defaults setting to 'Off'.
+
 To set up a virtual host with WSGI
 
 ```puppet
diff --git a/spec/acceptance/vhost_spec.rb b/spec/acceptance/vhost_spec.rb
index 72294e2ea..7b4deac84 100644
--- a/spec/acceptance/vhost_spec.rb
+++ b/spec/acceptance/vhost_spec.rb
@@ -937,6 +937,7 @@ class { 'apache::mod::wsgi': }
           wsgi_daemon_process_options => {processes => '2'},
           wsgi_process_group          => 'nobody',
           wsgi_script_aliases         => { '/test' => '/test1' },
+	  wsgi_pass_authorization     => 'On',
         }
       EOS
       apply_manifest(pp, :catch_failures => true)
@@ -956,6 +957,7 @@ class { 'apache::mod::wsgi': }
           wsgi_import_script_options  => { application-group => '%{GLOBAL}', process-group => 'wsgi' },
           wsgi_process_group          => 'nobody',
           wsgi_script_aliases         => { '/test' => '/test1' },
+	  wsgi_pass_authorization     => 'On',
         }
       EOS
       apply_manifest(pp, :catch_failures => true)
@@ -968,6 +970,7 @@ class { 'apache::mod::wsgi': }
       it { should contain 'WSGIImportScript /test1 application-group=%{GLOBAL} process-group=wsgi' }
       it { should contain 'WSGIProcessGroup nobody' }
       it { should contain 'WSGIScriptAlias /test "/test1"' }
+      it { should contain 'WSGIPassAuthorization On' }
     end
   end
 
diff --git a/spec/defines/vhost_spec.rb b/spec/defines/vhost_spec.rb
index 234fdbd0b..f3244cd65 100644
--- a/spec/defines/vhost_spec.rb
+++ b/spec/defines/vhost_spec.rb
@@ -607,6 +607,12 @@
           :value => '%{GLOBAL}',
           :match => [/^  WSGIApplicationGroup %{GLOBAL}$/],
         },
+        {
+          :title => 'should accept a wsgi pass authorization',
+          :attr  => 'wsgi_pass_authorization',
+          :value => 'On',
+          :match => [/^  WSGIPassAuthorization On$/],
+        },
         {
           :title => 'should contain environment variables',
           :attr  => 'access_log_env_var',