diff --git a/lib/promscrape/client.go b/lib/promscrape/client.go
index 05a12f12f6..ce8744886b 100644
--- a/lib/promscrape/client.go
+++ b/lib/promscrape/client.go
@@ -57,7 +57,7 @@ func newClient(sw *ScrapeWork) *client {
 	requestURI := string(u.RequestURI())
 	isTLS := string(u.Scheme()) == "https"
 	var tlsCfg *tls.Config
-	if isTLS {
+	if sw.AuthConfig != nil {
 		tlsCfg = sw.AuthConfig.NewTLSConfig()
 	}
 	if !strings.Contains(host, ":") {
diff --git a/lib/promscrape/discoveryutils/client.go b/lib/promscrape/discoveryutils/client.go
index 65b514d631..58fe34bc93 100644
--- a/lib/promscrape/discoveryutils/client.go
+++ b/lib/promscrape/discoveryutils/client.go
@@ -66,7 +66,7 @@ func NewClient(apiServer string, ac *promauth.Config, proxyURL proxy.URL) (*Clie
 
 	hostPort := string(u.Host())
 	isTLS := string(u.Scheme()) == "https"
-	if isTLS && ac != nil {
+	if ac != nil {
 		tlsCfg = ac.NewTLSConfig()
 	}
 	if !strings.Contains(hostPort, ":") {