diff --git a/internal/ingress/annotations/annotations.go b/internal/ingress/annotations/annotations.go
index a12c2cc44..0ec0db8f4 100644
--- a/internal/ingress/annotations/annotations.go
+++ b/internal/ingress/annotations/annotations.go
@@ -64,6 +64,7 @@ type Ingress struct {
 	ConfigurationSnippet string
 	CorsConfig           cors.Config
 	DefaultBackend       string
+	Denied               error
 	ExternalAuth         authreq.Config
 	HealthCheck          healthcheck.Config
 	Proxy                proxy.Config
diff --git a/internal/ingress/controller/controller.go b/internal/ingress/controller/controller.go
index b22007f56..d71d4bfbd 100644
--- a/internal/ingress/controller/controller.go
+++ b/internal/ingress/controller/controller.go
@@ -478,6 +478,7 @@ func (n *NGINXController) getBackendServers(ingresses []*extensions.Ingress) ([]
 						loc.UpstreamVhost = anns.UpstreamVhost
 						loc.VtsFilterKey = anns.VtsFilterKey
 						loc.Whitelist = anns.Whitelist
+						loc.Denied = anns.Denied
 
 						if loc.Redirect.FromToWWW {
 							server.RedirectFromToWWW = true
@@ -507,6 +508,7 @@ func (n *NGINXController) getBackendServers(ingresses []*extensions.Ingress) ([]
 						UpstreamVhost:        anns.UpstreamVhost,
 						VtsFilterKey:         anns.VtsFilterKey,
 						Whitelist:            anns.Whitelist,
+						Denied:               anns.Denied,
 					}
 
 					if loc.Redirect.FromToWWW {