diff --git a/sssd/defaults.yaml b/sssd/defaults.yaml
index cf2a0ed..4fcd65d 100644
--- a/sssd/defaults.yaml
+++ b/sssd/defaults.yaml
@@ -4,6 +4,7 @@ sssd:
   package_status: installed
 
   # configuration file options
+  config_mode: 0600
   config_path: /etc/sssd/sssd.conf
 
   # service options
diff --git a/sssd/init.sls b/sssd/init.sls
index f8cfb38..bd48d43 100644
--- a/sssd/init.sls
+++ b/sssd/init.sls
@@ -13,6 +13,9 @@ sssd_package_extras:
 sssd_config:
   file.managed:
     - name: {{ sssd.config_path }}
+    - template: jinja
+    - source: salt://sssd/files/sssd.conf
+    - mode: {{ sssd.config_mode }}
     - require:
       - pkg: sssd_package