diff --git a/manifests/resource/service_user.pp b/manifests/resource/service_user.pp
index 1893b4194..12ce8d9b7 100644
--- a/manifests/resource/service_user.pp
+++ b/manifests/resource/service_user.pp
@@ -35,7 +35,7 @@
 #
 # [*send_service_user_token*]
 #  (Optional) The service uses service token feature when this is set as true
-#  Defaults to false
+#  Defaults to $facts['os_service_default']
 #
 # [*system_scope*]
 #   (Optional) Scope for system operations
@@ -80,7 +80,7 @@ define keystone::resource::service_user(
   $user_domain_name        = $facts['os_service_default'],
   $project_domain_name     = $facts['os_service_default'],
   $system_scope            = $facts['os_service_default'],
-  $send_service_user_token = false,
+  $send_service_user_token = $facts['os_service_default'],
   $insecure                = $facts['os_service_default'],
   $auth_type               = $facts['os_service_default'],
   $auth_version            = $facts['os_service_default'],
diff --git a/spec/defines/keystone_resource_service_user_spec.rb b/spec/defines/keystone_resource_service_user_spec.rb
index 76a3abfea..97bdc320a 100644
--- a/spec/defines/keystone_resource_service_user_spec.rb
+++ b/spec/defines/keystone_resource_service_user_spec.rb
@@ -20,7 +20,7 @@ describe 'keystone::resource::service_user' do
         is_expected.to contain_keystone_config('service_user/project_domain_name').with_value('<SERVICE DEFAULT>')
         is_expected.to contain_keystone_config('service_user/user_domain_name').with_value('<SERVICE DEFAULT>')
         is_expected.to contain_keystone_config('service_user/system_scope').with_value('<SERVICE DEFAULT>')
-        is_expected.to contain_keystone_config('service_user/send_service_user_token').with_value(false)
+        is_expected.to contain_keystone_config('service_user/send_service_user_token').with_value('<SERVICE DEFAULT>')
         is_expected.to contain_keystone_config('service_user/insecure').with_value('<SERVICE DEFAULT>')
         is_expected.to contain_keystone_config('service_user/auth_type').with_value('<SERVICE DEFAULT>')
         is_expected.to contain_keystone_config('service_user/auth_version').with_value('<SERVICE DEFAULT>')