diff --git a/data/defaults.yaml b/data/defaults.yaml
--- a/data/defaults.yaml
+++ b/data/defaults.yaml
@@ -1715,7 +1715,7 @@
     private_api_password: "%{hiera('deposit_basic_auth_swhworker_password')}"
   client_config:
     sentry_dsn: "%{lookup('swh::deploy::webapp::sentry_dsn')}"
-  keycloak: "%{hiera('swh::deploy::webapp::config::keycloak')}"
+  keycloak: "%{alias('swh::deploy::webapp::config::keycloak')}"
 
 swh::deploy::webapp::locked_endpoints:
   - /api/1/content/[^/]+/symbol/