diff --git a/reference/configuration/security.rst b/reference/configuration/security.rst
index 4beabdff25e..0a685a0b6fc 100644
--- a/reference/configuration/security.rst
+++ b/reference/configuration/security.rst
@@ -302,6 +302,7 @@ Each part will be explained in the next section.
                         provider:             ~
                         parameter:            _switch_user
                         role:                 ROLE_ALLOWED_TO_SWITCH
+                        stateless:            false
 
             access_control:
                 requires_channel:     ~
diff --git a/security/impersonating_user.rst b/security/impersonating_user.rst
index 87b1b492c51..4fcccd8a52f 100644
--- a/security/impersonating_user.rst
+++ b/security/impersonating_user.rst
@@ -66,6 +66,11 @@ firewall listener:
             ),
         ));
 
+.. tip::
+
+    For using the ``switch_user`` listener in a ``stateless`` firewall, set the
+    ``switch_user.stateless`` option to ``true``.
+
 To switch to another user, just add a query string with the ``_switch_user``
 parameter and the username as the value to the current URL: