diff --git a/files/2fa/pam_url.conf b/files/2fa/pam_url.conf.j2
similarity index 100%
rename from files/2fa/pam_url.conf
rename to files/2fa/pam_url.conf.j2
diff --git a/tasks/2fa_client.yml b/tasks/2fa_client.yml
index d1395b1423..99e0e587fa 100644
--- a/tasks/2fa_client.yml
+++ b/tasks/2fa_client.yml
@@ -15,11 +15,11 @@
   - config
 
 - name: /etc/pam_url.conf - split for staging/phx2/everyone else
-  copy: src=$item dest=/etc/pam_url.conf mode=0644
+  template: src=$item dest=/etc/pam_url.conf mode=0644
   with_first_found:
   - $files/2fa/pam_url.conf.${inventory_hostname}
   - $files/2fa/pam_url.conf.${ansible_domain}
-  - $files/2fa/pam_url.conf
+  - $files/2fa/pam_url.conf.j2
   tags:
   - config