diff --git a/manifests/keystone/auth.pp b/manifests/keystone/auth.pp
index 9603a96b..038f781b 100644
--- a/manifests/keystone/auth.pp
+++ b/manifests/keystone/auth.pp
@@ -75,23 +75,23 @@
 #   Defaults to 'http://127.0.0.1:8042'.
 #
 class aodh::keystone::auth (
-  $password,
-  $auth_name           = 'aodh',
-  $email               = 'aodh@localhost',
-  $tenant              = 'services',
-  $roles               = ['admin'],
-  $system_scope        = 'all',
-  $system_roles        = [],
-  $configure_endpoint  = true,
-  $configure_user      = true,
-  $configure_user_role = true,
-  $service_description = 'OpenStack Alarming Service',
-  $service_name        = 'aodh',
-  $service_type        = 'alarming',
-  $region              = 'RegionOne',
-  $public_url          = 'http://127.0.0.1:8042',
-  $internal_url        = 'http://127.0.0.1:8042',
-  $admin_url           = 'http://127.0.0.1:8042',
+  String[1] $password,
+  String[1] $auth_name                    = 'aodh',
+  String[1] $email                        = 'aodh@localhost',
+  String[1] $tenant                       = 'services',
+  Array[String[1]] $roles                 = ['admin'],
+  String[1] $system_scope                 = 'all',
+  Array[String[1]] $system_roles          = [],
+  Boolean $configure_endpoint             = true,
+  Boolean $configure_user                 = true,
+  Boolean $configure_user_role            = true,
+  String[1] $service_description          = 'OpenStack Alarming Service',
+  String[1] $service_name                 = 'aodh',
+  String[1] $service_type                 = 'alarming',
+  String[1] $region                       = 'RegionOne',
+  Keystone::PublicEndpointUrl $public_url = 'http://127.0.0.1:8042',
+  Keystone::EndpointUrl $internal_url     = 'http://127.0.0.1:8042',
+  Keystone::EndpointUrl $admin_url        = 'http://127.0.0.1:8042',
 ) {
 
   include aodh::deps