diff --git a/security/impersonating_user.rst b/security/impersonating_user.rst
index edb238f5ed8..75cedc0328b 100644
--- a/security/impersonating_user.rst
+++ b/security/impersonating_user.rst
@@ -222,7 +222,7 @@ be called:
 
                 <firewall name="main">
                     <!-- ... -->
-                    <switch-user role="CAN_SWITCH_USER" />
+                    <switch-user role="CAN_SWITCH_USER"/>
                 </firewall>
             </config>
         </srv:container>