diff --git a/internal/ingress/controller/template/template.go b/internal/ingress/controller/template/template.go
index 9808968eb..0cbd19fde 100644
--- a/internal/ingress/controller/template/template.go
+++ b/internal/ingress/controller/template/template.go
@@ -578,7 +578,7 @@ func shouldApplyGlobalAuth(input interface{}, globalExternalAuthURL string, c in
 		return false
 	}
 
-	if (location.ExternalAuth.URL == "") && (globalExternalAuthURL != "") && (cfg.GlobalExternalAuth.DefaultEnable) {
+	if (location.ExternalAuth.URL == "") && (globalExternalAuthURL != "") && (cfg.GlobalExternalAuth.DefaultEnable) || (location.EnableGlobalAuth) {
 		return true
 	}