diff --git a/roles/ipsilon/templates/configuration.conf b/roles/ipsilon/templates/configuration.conf
index c8c115e882..b8067d78fa 100644
--- a/roles/ipsilon/templates/configuration.conf
+++ b/roles/ipsilon/templates/configuration.conf
@@ -39,7 +39,11 @@ openid enabled extensions=Teams,Attribute Exchange,CLAs,Simple Registration,API
 
 saml2 idp storage path=/etc/ipsilon/saml2
 saml2 idp metadata file=metadata.xml
+{% if env == 'staging' %}
+saml2 idp nameid salt={{ ipsilon_saml2_stg_nameid_salt }}
+{% else %}
 saml2 idp nameid salt={{ ipsilon_saml2_nameid_salt }}
+{% endif %}
 saml2 allow self registration=False
 saml2 default nameid=transient
 saml2 default email domain=fedoraproject.org