diff --git a/ansible/roles/apache_placeholder_replace/tasks/main.yml b/ansible/roles/apache_placeholder_replace/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..ab16c410b2c10410c25dea11680d287aa3c5a48e
--- /dev/null
+++ b/ansible/roles/apache_placeholder_replace/tasks/main.yml
@@ -0,0 +1,10 @@
+---
+
+- name: Replace OOD rewrite placeholder in Apache configuration
+  ansible.builtin.replace:
+    path: /etc/httpd/conf.d/front-end.conf
+    regexp: ‘RewriteCond %{HTTP:REMOTE_USER}  \’^(.+)$\’ ‘
+    replace: |
+      RewriteCond %{HTTP:REMOTE_USER} '([a-zA-Z0-9_.+-]+)@uab.edu$' [OR]
+      RewriteCond %{HTTP:REMOTE_USER} 'urn:mace:incommon:uab.edu!https://uabgrid.uab.edu/shibboleth!(.+)$'
+