diff --git a/roles/ipaclient/tasks/install.yml b/roles/ipaclient/tasks/install.yml
index 918647f877d008067865dbed88d0eaa84451c058..87863cb7a1343f9aeda624d1a21661f0cb2a5c59 100644
--- a/roles/ipaclient/tasks/install.yml
+++ b/roles/ipaclient/tasks/install.yml
@@ -240,6 +240,7 @@
       sssd: "{{ result_ipaclient_test.sssd }}"
       force: "{{ ipaclient_force }}"
       #on_master: "{{ ipaclient_on_master }}"
+    when: not ipaclient_on_master | bool
 
   - name: Install - IPA API calls for remaining enrollment parts
     ipaclient_api: