@@ -15,6 +15,10 @@ class Identification(metaclass=abc.ABCMeta):
     def identify(self, request_handler):
         pass
 
+    @abc.abstractmethod
+    def identify_for_audit(self, request_handler):
+        pass
+
 
 class AuthBasedIdentification(Identification):
     def __init__(self, authentication_provider) -> None:
@@ -24,9 +28,11 @@ def identify(self, request_handler):
         current_user = self._authentication_provider.get_username(request_handler)
         if not current_user:
             raise Exception('Not authenticated')
-
         return current_user
 
+    def identify_for_audit(self, request_handler):
+        return self.identify(request_handler)
+
 
 class IpBasedIdentification(Identification):
     EXPIRES_DAYS = 14
@@ -69,6 +75,12 @@ def identify(self, request_handler):
 
         return new_id
 
+    def identify_for_audit(self, request_handler):
+        remote_ip = request_handler.request.remote_ip
+        if (remote_ip in self._trusted_ips) and (self._user_header_name):
+            return request_handler.request.headers.get(self._user_header_name, None)
+        return None
+
     def _resolve_ip(self, request_handler):
         proxied_ip = tornado_utils.get_proxied_ip(request_handler)
         if proxied_ip:
 
@@ -18,8 +18,7 @@
 def get_all_audit_names(request_handler):
     result = {}
 
-    auth = request_handler.application.auth
-    auth_username = auth.get_username(request_handler)
+    auth_username = request_handler.application.identification.identify_for_audit(request_handler)
     if auth_username:
         result[AUTH_USERNAME] = auth_username