diff --git a/pkg/kapis/iam/v1beta1/handler.go b/pkg/kapis/iam/v1beta1/handler.go
index f80e7951e..bf95cabe5 100644
--- a/pkg/kapis/iam/v1beta1/handler.go
+++ b/pkg/kapis/iam/v1beta1/handler.go
@@ -145,7 +145,7 @@ func (h *handler) CreateUser(req *restful.Request, resp *restful.Response) {
 			return
 		}
 		if user.Annotations == nil {
-			user.Labels = make(map[string]string)
+			user.Annotations = make(map[string]string)
 		}
 		user.Annotations[fmt.Sprintf("%s.%s", iamv1beta1.IdentityProviderAnnotation, extra[iamv1beta1.ExtraIdentityProvider][0])] = extra[iamv1beta1.ExtraUID][0]
 		delete(user.Annotations, iamv1beta1.GlobalRoleAnnotation)