diff --git a/roles/ipa/client/handlers/main.yml b/roles/ipa/client/handlers/main.yml
index a8c0d4f5a3..1cf0af125d 100644
--- a/roles/ipa/client/handlers/main.yml
+++ b/roles/ipa/client/handlers/main.yml
@@ -1,3 +1,5 @@
 ---
 - name: clean sss caches
   command: sss_cache -E
+- name: deep clean sss caches
+  shell: systemctl restart sssd && sss_cache -E
diff --git a/roles/ipa/client/tasks/common.yml b/roles/ipa/client/tasks/common.yml
index fe0b08b9e8..ea2d4d1cf4 100644
--- a/roles/ipa/client/tasks/common.yml
+++ b/roles/ipa/client/tasks/common.yml
@@ -45,4 +45,4 @@
   tags:
   - ipa/client
   - config
-  notify: clean sss caches
+  notify: deep clean sss caches