diff --git a/auth/request/auth_user.go b/auth/request/auth_user.go
index 5ba37fe89..6d8c33a36 100644
--- a/auth/request/auth_user.go
+++ b/auth/request/auth_user.go
@@ -68,6 +68,10 @@ func (au *authUser) Update(s *settings.Settings, u *types.User) {
 }
 
 func (au *authUser) set(s *settings.Settings, u *types.User) {
+	if u.Meta == nil {
+		u.Meta = &types.UserMeta{}
+	}
+
 	// User's MFA security policy
 	umsp := u.Meta.SecurityPolicy.MFA