diff --git a/roles/ipsilon/tasks/main.yml b/roles/ipsilon/tasks/main.yml
index 37a5a0e2db..4919486140 100644
--- a/roles/ipsilon/tasks/main.yml
+++ b/roles/ipsilon/tasks/main.yml
@@ -173,6 +173,8 @@
   - ipsilon
 
 - name: generate the saml2 metadata
+  become_user: ipsilon
+  become: yes
   command:
     cmd: /usr/local/bin/prepare-saml2-metadata
     creates: /etc/ipsilon/root/saml2/metadata.xml