diff --git a/hooks/keystone_hooks.py b/hooks/keystone_hooks.py
index a081f4b4..82ea8869 100755
--- a/hooks/keystone_hooks.py
+++ b/hooks/keystone_hooks.py
@@ -480,6 +480,9 @@ def leader_settings_changed():
     # sure only the leader is running the cron job.
     CONFIGS.write(TOKEN_FLUSH_CRON_FILE)
 
+    # Make sure we keep domain and/or project ids used in templates up to date
+    CONFIGS.write(POLICY_JSON)
+
     update_all_identity_relation_units()
 
 
diff --git a/unit_tests/test_keystone_hooks.py b/unit_tests/test_keystone_hooks.py
index 1750f18f..44804f76 100644
--- a/unit_tests/test_keystone_hooks.py
+++ b/unit_tests/test_keystone_hooks.py
@@ -455,7 +455,11 @@ class KeystoneRelationTests(CharmTestCase):
         self.relation_ids.return_value = ['identity:1']
         self.related_units.return_value = ['keystone/1']
         hooks.leader_settings_changed()
-        mock_write.assert_has_calls([call(utils.TOKEN_FLUSH_CRON_FILE)])
+        mock_write.assert_has_calls(
+            [
+                call(utils.TOKEN_FLUSH_CRON_FILE),
+                call(utils.POLICY_JSON),
+            ])
         self.assertTrue(update.called)
 
     def test_ha_joined(self):