diff --git a/saml/univention-saml/conffiles/etc/stunnel/univention_saml.conf b/saml/univention-saml/conffiles/etc/stunnel/univention_saml.conf
index 3ef94f7..b7450f7 100644
--- a/saml/univention-saml/conffiles/etc/stunnel/univention_saml.conf
+++ b/saml/univention-saml/conffiles/etc/stunnel/univention_saml.conf
@@ -22,12 +22,14 @@ connect = /var/run/univention-saml/memcached.socket
 verify = 2
 checkHost = %s''' % (sso_fqdn,)
 
-
 for server in servers:
 	print '''
+
 [%(server)s]
 client = yes
 accept = /var/run/univention-saml/%(server)s.socket
 connect = %(server)s:11212
-''' % {'server': server}
+verify = 2
+checkHost = %(ssofqdn)s
+''' % {'server': server, 'ssofqdn': ssofqdn}
 @!@