diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/RESTProxy.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/RESTProxy.pm
index 19206cecf..3e2270a61 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/RESTProxy.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/RESTProxy.pm
@@ -53,7 +53,9 @@ sub getUser {
     $req->sessionInfo->{_proxyQueryDone}++;
     unless ( $res->{result} ) {
         $self->userLogger->notice("Authentication refused for $req->{user}");
-        $self->setSecurity($req);
+
+        # Eval required since UserDB::Proxy isn't a Auth::_WebForm child
+        eval { $self->setSecurity($req) };
         return PE_BADCREDENTIALS;
     }
     $req->sessionInfo->{_proxyCookies} = join '; ',