diff --git a/manifests/federation/openidc.pp b/manifests/federation/openidc.pp
index 87ac32bff..2b9e735d2 100644
--- a/manifests/federation/openidc.pp
+++ b/manifests/federation/openidc.pp
@@ -164,6 +164,9 @@ class keystone::federation::openidc (
 ) {
 
   include apache
+  include apache::mod::authn_core
+  include apache::mod::authz_user
+
   include keystone::deps
   include keystone::params
 
diff --git a/spec/classes/keystone_federation_openidc_spec.rb b/spec/classes/keystone_federation_openidc_spec.rb
index ee1260d5d..d7e9d5d2d 100644
--- a/spec/classes/keystone_federation_openidc_spec.rb
+++ b/spec/classes/keystone_federation_openidc_spec.rb
@@ -72,6 +72,8 @@ describe 'keystone::federation::openidc' do
     end
 
     it { is_expected.to contain_package(platform_parameters[:openidc_package_name]) }
+    it { is_expected.to contain_class('apache::mod::authn_core') }
+    it { is_expected.to contain_class('apache::mod::authz_user') }
 
     context 'with only required parameters' do
       it 'should have basic params for openidc in Keystone configuration' do