diff --git a/roles/ocp4_workload_authentication/tasks/remove_workload.yml b/roles/ocp4_workload_authentication/tasks/remove_workload.yml
index e4d3ec4..ed97d53 100644
--- a/roles/ocp4_workload_authentication/tasks/remove_workload.yml
+++ b/roles/ocp4_workload_authentication/tasks/remove_workload.yml
@@ -1 +1 @@
-µë-
\ No newline at end of file
+---
diff --git a/roles/ocp4_workload_authentication/tasks/setup_keycloak.yml b/roles/ocp4_workload_authentication/tasks/setup_keycloak.yml
index 92ab42e..2f8e60a 100644
--- a/roles/ocp4_workload_authentication/tasks/setup_keycloak.yml
+++ b/roles/ocp4_workload_authentication/tasks/setup_keycloak.yml
@@ -111,6 +111,7 @@
       --cluster {{ ocp4_workload_authentication_rosa_cluster_name | default('rosa-' ~ guid) }}
       --yes
     failed_when: false
+    changed_when: false
 
   - name: Create ROSA OpenID identity provider
     delegate_to: "{{ groups['bastions'][0] }}"
@@ -125,6 +126,7 @@
       --email-claims email
       --name-claims name
       --username-claims preferred_username
+    changed_when: true
 
 - name: Retrieve Keycloak admin credentials
   kubernetes.core.k8s_info:
diff --git a/roles/ocp4_workload_authentication/tasks/workload.yml b/roles/ocp4_workload_authentication/tasks/workload.yml
index cb27d96..7ba43a0 100644
--- a/roles/ocp4_workload_authentication/tasks/workload.yml
+++ b/roles/ocp4_workload_authentication/tasks/workload.yml
@@ -60,6 +60,7 @@
     --cluster {{ ocp4_workload_authentication_rosa_cluster_name | default('rosa-' ~ guid) }}
     --yes
   failed_when: false
+  changed_when: false
 
 - name: Report provision data and messages
   ansible.builtin.include_tasks: report_data_and_messages.yml