diff --git a/manifests/init.pp b/manifests/init.pp
index f52aecae..3ef0ee0c 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -187,6 +187,8 @@
 #   Defaults to false
 #  [*manila_available*]
 #   Defaults to false
+#  [*barbican_enforce_scope*]
+#   Defaults to $facts['os_service_default']
 #  [*cinder_enforce_scope*]
 #   Defaults to $facts['os_service_default']
 #  [*glance_enforce_scope*]
@@ -439,6 +441,7 @@ class tempest(
   Boolean $octavia_available                = false,
   Boolean $barbican_available               = false,
   Boolean $manila_available                 = false,
+  $barbican_enforce_scope                   = $facts['os_service_default'],
   $cinder_enforce_scope                     = $facts['os_service_default'],
   $glance_enforce_scope                     = $facts['os_service_default'],
   $keystone_enforce_scope                   = $facts['os_service_default'],
@@ -668,6 +671,7 @@ class tempest(
     'service_available/zaqar':                         value => $zaqar_available;
     'service_available/ec2api':                        value => $ec2api_available;
     'service_available/octavia':                       value => $octavia_available;
+    'barbican_rbac_scope_verification/enforce_scope':  value => $barbican_enforce_scope;
     'enforce_scope/cinder':                            value => $cinder_enforce_scope;
     'enforce_scope/designate':                         value => $designate_enforce_scope;
     'enforce_scope/glance':                            value => $glance_enforce_scope;
diff --git a/releasenotes/notes/barbican-enforce-scope-66401dc152628330.yaml b/releasenotes/notes/barbican-enforce-scope-66401dc152628330.yaml
new file mode 100644
index 00000000..f10c8a03
--- /dev/null
+++ b/releasenotes/notes/barbican-enforce-scope-66401dc152628330.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  - |
+    The new ``tempest::barbican_enforce_scope`` parameter has been added.
diff --git a/spec/classes/tempest_init_spec.rb b/spec/classes/tempest_init_spec.rb
index 1838aec0..2c8804fc 100644
--- a/spec/classes/tempest_init_spec.rb
+++ b/spec/classes/tempest_init_spec.rb
@@ -318,6 +318,7 @@ describe 'tempest' do
           is_expected.to contain_tempest_config('service_available/octavia').with(:value => false)
           is_expected.to contain_tempest_config('service_available/barbican').with(:value => false)
           is_expected.to contain_tempest_config('service_available/manila').with(:value => false)
+          is_expected.to contain_tempest_config('barbican_rbac_scope_verification/enforce_scope').with(:value => '<SERVICE DEFAULT>')
           is_expected.to contain_tempest_config('enforce_scope/cinder').with(:value => '<SERVICE DEFAULT>')
           is_expected.to contain_tempest_config('enforce_scope/glance').with(:value => '<SERVICE DEFAULT>')
           is_expected.to contain_tempest_config('enforce_scope/keystone').with(:value => '<SERVICE DEFAULT>')