f7744b72_e__8_0_24____The_AJP_Connector__Description
[Attribute] tomcatAuthorization [Description] 
If set to true, the authenticated principal will be propagated from the native webserver and considered already authenticated in Tomcat. If the web application has one or more security constraints, authorization will then be performed by Tomcat and roles assigned to the authenticated principal. If the appropriate Tomcat Realm for the request does not recognise the provided user name, a Principal will be still be created but it will have no roles. The default value is false.
Apache Tomcat 8 Configuration Reference (8.0.24) - The AJP Connector