diff --git a/manifests/heat.pp b/manifests/heat.pp
index 1f16c78dc..fcc6b3382 100644
--- a/manifests/heat.pp
+++ b/manifests/heat.pp
@@ -79,6 +79,15 @@ class openstack_integration::heat (
     internal_url              => "${::openstack_integration::config::base_url}:8004/v1/%(tenant_id)s",
     admin_url                 => "${::openstack_integration::config::base_url}:8004/v1/%(tenant_id)s",
   }
+  class { 'heat::keystone::auth_cfn':
+    password            => 'a_big_secret',
+    # NOTE(tkajinam): heat-cfn service user is not used
+    configure_user      => false,
+    configure_user_role => false,
+    public_url          => "${::openstack_integration::config::base_url}:8000/v1",
+    internal_url        => "${::openstack_integration::config::base_url}:8000/v1",
+    admin_url           => "${::openstack_integration::config::base_url}:8000/v1",
+  }
   class { 'heat::keystone::domain':
     domain_password => 'oh_my_no_secret',
   }