diff --git a/plugins/modules/ipaservice.py b/plugins/modules/ipaservice.py
index 34ba7db76ff449e6f50eb470703b8d5b26b4b792..157aee375f7498a5f09a49a3b092c748958bb2f3 100644
--- a/plugins/modules/ipaservice.py
+++ b/plugins/modules/ipaservice.py
@@ -327,7 +327,7 @@ def init_ansible_module():
                           choices=["MS-PAC", "PAD", "NONE"]),
             auth_ind=dict(type="list",
                           aliases=["krbprincipalauthind"],
-                          choices=["otp", "radius", "pkinit", "hardened"]),
+                          choices=["otp", "radius", "pkinit", "hardened", ""]),
             skip_host_check=dict(type="bool"),
             force=dict(type="bool"),
             requires_pre_auth=dict(
diff --git a/tests/service/test_service.yml b/tests/service/test_service.yml
index 3c518055d64af39fe4a5e2f3c0e6f028d6884354..a1216aa834c43826cc518d8e3ed772b0c580612e 100644
--- a/tests/service/test_service.yml
+++ b/tests/service/test_service.yml
@@ -495,6 +495,26 @@
     register: result
     failed_when: result.changed
 
+  - name: Clear auth_ind.
+    ipaservice:
+      ipaadmin_password: SomeADMINpassword
+      name: "HTTP/{{ svc_fqdn }}"
+      auth_ind: ""
+      skip_host_check: no
+      force: yes
+    register: result
+    failed_when: not result.changed
+
+  - name: Clear auth_ind, again.
+    ipaservice:
+      ipaadmin_password: SomeADMINpassword
+      name: "HTTP/{{ svc_fqdn }}"
+      auth_ind: ""
+      skip_host_check: no
+      force: yes
+    register: result
+    failed_when: result.changed
+
   # cleanup
 
   - name: Ensure services are absent.