diff --git a/defaults/main.yml b/defaults/main.yml
index 0874589..e98e45e 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -135,7 +135,6 @@ heat_stack_domain_description: Owns users and projects created by heat
 heat_stack_user_domain_name: heat
 heat_max_nested_stack_depth: 5
 
-heat_deferred_auth_method: trusts
 heat_trusts_delegated_roles: []
 
 ## Cinder backups
diff --git a/releasenotes/notes/heat_deffered_method-a1652a2ea4a46b75.yaml b/releasenotes/notes/heat_deffered_method-a1652a2ea4a46b75.yaml
new file mode 100644
index 0000000..29695f7
--- /dev/null
+++ b/releasenotes/notes/heat_deffered_method-a1652a2ea4a46b75.yaml
@@ -0,0 +1,9 @@
+---
+
+deprecations:
+  - |
+    Variable ``heat_deferred_auth_method`` has been deprecated and has no
+    effect.
+    Default behaviour is to use trusts as deferred method, and that is the
+    only working option as of today.
+    Usage of password is broken with keystonev3 and should not be used.
diff --git a/templates/heat.conf.j2 b/templates/heat.conf.j2
index 87a83e2..16a482d 100644
--- a/templates/heat.conf.j2
+++ b/templates/heat.conf.j2
@@ -16,7 +16,6 @@ heat_waitcondition_server_url = {{ heat_waitcondition_server_url }}
 heat_metadata_server_url = {{ heat_metadata_server_url }}
 server_keystone_endpoint_type = public
 
-deferred_auth_method = {{ heat_deferred_auth_method }}
 trusts_delegated_roles = {{ heat_trusts_delegated_roles | join(',') }}
 
 auth_encryption_key = {{ heat_auth_encryption_key }}