diff --git a/authentik/policies/engine.py b/authentik/policies/engine.py
index e9f2af3ce4..4f285f377d 100644
--- a/authentik/policies/engine.py
+++ b/authentik/policies/engine.py
@@ -52,6 +52,8 @@ class PolicyEngine:
         self.empty_result = True
         if not isinstance(pbm, PolicyBindingModel):  # pragma: no cover
             raise ValueError(f"{pbm} is not instance of PolicyBindingModel")
+        if not user:
+            raise ValueError("User must be set")
         self.__pbm = pbm
         self.request = PolicyRequest(user)
         self.request.obj = pbm