diff --git a/flask_appbuilder/security/manager.py b/flask_appbuilder/security/manager.py
index 82423cfa4c..d046eec9f0 100644
--- a/flask_appbuilder/security/manager.py
+++ b/flask_appbuilder/security/manager.py
@@ -304,7 +304,9 @@ def __init__(self, appbuilder):
         self.limiter = self.create_limiter(app)
 
     def create_limiter(self, app: Flask) -> Limiter:
-        limiter = Limiter(key_func=get_remote_address)
+        limiter = Limiter(
+            key_func=app.config.get("RATELIMIT_KEY_FUNC", get_remote_address)
+        )
         limiter.init_app(app)
         return limiter