diff --git a/CHANGELOG.md b/CHANGELOG.md
index a46e6f43549..6c7088fd9e0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+## v2.49.2 - 2024-01-11
+
+[Full Changelog](https://github.com/ORCID/ORCID-Source/compare/v2.49.1...v2.49.2)
+
+- [#6971](https://github.com/ORCID/ORCID-Source/pull/6971): 8934-registration-add-an-affiliation-with-typeahead
+
 ## v2.49.1 - 2024-01-08
 
 [Full Changelog](https://github.com/ORCID/ORCID-Source/compare/v2.49.0...v2.49.1)
diff --git a/orcid-web/src/main/resources/orcid-frontend-security.xml b/orcid-web/src/main/resources/orcid-frontend-security.xml
index 42e2fd62ab0..95337fbdd50 100644
--- a/orcid-web/src/main/resources/orcid-frontend-security.xml
+++ b/orcid-web/src/main/resources/orcid-frontend-security.xml
@@ -290,6 +290,8 @@
 			access="IS_AUTHENTICATED_ANONYMOUSLY" />		
 		<sec:intercept-url pattern="/(\d{4}-){3,}\d{3}[\dX]/affiliationGroups.json(\?.*)?"
 			access="IS_AUTHENTICATED_ANONYMOUSLY" />
+		<sec:intercept-url pattern="/affiliations/disambiguated/name/(.*)?"
+			access="IS_AUTHENTICATED_ANONYMOUSLY" />
 		<sec:intercept-url pattern="/(\d{4}-){3,}\d{3}[\dX]/fundingDetails.json(\?.*)?"
 			access="IS_AUTHENTICATED_ANONYMOUSLY" />				
 		<sec:intercept-url pattern="/(\d{4}-){3,}\d{3}[\dX]/fundingGroups.json(\?.*)?"