diff --git a/users/googleauth.sls b/users/googleauth.sls
index 88a1766..d7baae8 100644
--- a/users/googleauth.sls
+++ b/users/googleauth.sls
@@ -73,4 +73,15 @@ users_googleauth_selinux_applied:
     - name: {{ users.googleauth_dir }}
 {%-   endif %}
 
+sshd:
+  service.running:
+    - watch:
+      - file: /etc/ssh/sshd_config
+
+sshd_config:
+  file.replace:
+    - name: /etc/ssh/sshd_config
+    - pattern: '^(ChallengeResponseAuthentication|KbdInteractiveAuthentication).*'
+    - repl: '\1 yes'
+
 {%- endif %}