diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index 6b3d9b1f96f18966008ce3a47d2515bb597ab898..67704c2400640e54cbea9b7a6571116869d8706a 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -3,6 +3,11 @@ domains = {{ domain }}
 config_file_version = 2
 services = nss, pam
 
+[pam]
+offline_credentials_expiration = 1
+offline_failed_login_attempts = 3
+offline_failed_login_delay = 0
+
 [domain/{{ domain }}]
 ad_domain = {{ domain }}
 krb5_realm = {{ domain.upper() }}