diff --git a/roles/ipa/service/tasks/main.yml b/roles/ipa/service/tasks/main.yml
index 997b0f3fe9..921586b6f6 100644
--- a/roles/ipa/service/tasks/main.yml
+++ b/roles/ipa/service/tasks/main.yml
@@ -14,9 +14,7 @@
   ipaservice:
     ipaadmin_password: "{{ ipa_admin_password }}"
     name: "{{ service }}/{{ host }}"
-{% if principal_alias is defined %}
-    principal: "{{ principal_alias }}"
-{% endif %}
+    principal: "{{ principal_alias | default(omit) }}"
     force: yes
   tags:
   - config