diff --git a/roles/ipsilon/templates/configuration.conf b/roles/ipsilon/templates/configuration.conf
index 2cd20abaf7..c02fd126cd 100644
--- a/roles/ipsilon/templates/configuration.conf
+++ b/roles/ipsilon/templates/configuration.conf
@@ -1,5 +1,5 @@
 [login_config]
-global enabled=gssapi,form
+global enabled=gssapi,{{ (env == 'production')|ternary('form', 'pam') }}
 
 [info_config]
 fas preconfigured = True