diff --git a/manifests/backend/netapp.pp b/manifests/backend/netapp.pp
index 0b5a0a5e..4d88c787 100644
--- a/manifests/backend/netapp.pp
+++ b/manifests/backend/netapp.pp
@@ -194,7 +194,7 @@ define cinder::backend::netapp (
     "${volume_backend_name}/nfs_shares_config":            value => $nfs_shares_config;
     "${volume_backend_name}/netapp_copyoffload_tool_path": value => $netapp_copyoffload_tool_path;
     "${volume_backend_name}/netapp_controller_ips":        value => $netapp_controller_ips;
-    "${volume_backend_name}/netapp_sa_password":           value => $netapp_sa_password;
+    "${volume_backend_name}/netapp_sa_password":           value => $netapp_sa_password, secret => true;
     "${volume_backend_name}/netapp_storage_pools":         value => $netapp_storage_pools;
     "${volume_backend_name}/netapp_webservice_path":       value => $netapp_webservice_path;
   }
diff --git a/spec/classes/cinder_volume_netapp_spec.rb b/spec/classes/cinder_volume_netapp_spec.rb
index 9625cdd5..8c9a1dbc 100644
--- a/spec/classes/cinder_volume_netapp_spec.rb
+++ b/spec/classes/cinder_volume_netapp_spec.rb
@@ -49,6 +49,10 @@ describe 'cinder::volume::netapp' do
     it 'marks netapp_password as secret' do
       should contain_cinder_config('DEFAULT/netapp_password').with_secret( true )
     end
+
+    it 'marks netapp_sa_password as secret' do
+      should contain_cinder_config('DEFAULT/netapp_sa_password').with_secret( true )
+    end
   end
 
 
diff --git a/spec/defines/cinder_backend_netapp_spec.rb b/spec/defines/cinder_backend_netapp_spec.rb
index d737a6bc..e0e316fc 100644
--- a/spec/defines/cinder_backend_netapp_spec.rb
+++ b/spec/defines/cinder_backend_netapp_spec.rb
@@ -51,6 +51,10 @@ describe 'cinder::backend::netapp' do
     it 'marks netapp_password as secret' do
       should contain_cinder_config("#{params_hash[:volume_backend_name]}/netapp_password").with_secret( true )
     end
+
+    it 'marks netapp_sa_password as secret' do
+      should contain_cinder_config("#{params_hash[:volume_backend_name]}/netapp_sa_password").with_secret( true )
+    end
   end