diff --git a/roles/ipsilon/templates/sssd.conf b/roles/ipsilon/templates/sssd.conf
index ed577d6fdb..f929ffa065 100644
--- a/roles/ipsilon/templates/sssd.conf
+++ b/roles/ipsilon/templates/sssd.conf
@@ -10,6 +10,7 @@ access_provider = ipa
 cache_credentials = True
 ldap_tls_cacert = /etc/ipa/ca.crt
 krb5_store_password_if_offline = True
+ldap_deref_threshold = 0
 sudo_provider = ipa
 autofs_provider = ipa
 subdomains_provider = ipa