diff --git a/manifests/disable_admin_token_auth.pp b/manifests/disable_admin_token_auth.pp
index ac30b277f..8e7c64b72 100644
--- a/manifests/disable_admin_token_auth.pp
+++ b/manifests/disable_admin_token_auth.pp
@@ -11,6 +11,9 @@
 # valid keystone v3 credentials set as environment variables.
 #
 class keystone::disable_admin_token_auth {
+
+  Keystone::Resource::Service_identity<||> -> Class['::keystone::disable_admin_token_auth']
+
   Ini_subsetting {
     require => Class['keystone::roles::admin'],
   }