diff --git a/src/core/security/client_auth_filter.c b/src/core/security/client_auth_filter.c
index e2d1b6fce91020d5cc1352a8609401e4a0add16b..0e699874bcdd25e5b8d7c4b7694bcf8ae52ef93e 100644
--- a/src/core/security/client_auth_filter.c
+++ b/src/core/security/client_auth_filter.c
@@ -77,6 +77,7 @@ typedef struct {
 
 static void bubble_up_error(grpc_call_element *elem, const char *error_msg) {
   call_data *calld = elem->call_data;
+  gpr_log(GPR_ERROR, "Client side authentication failure: %s", error_msg);
   grpc_transport_stream_op_add_cancellation(&calld->op,
                                             GRPC_STATUS_UNAUTHENTICATED);
   grpc_call_next_op(elem, &calld->op);