diff --git a/group-assignment/main.tf b/group-assignment/main.tf
index 2309363..0f593b0 100644
--- a/group-assignment/main.tf
+++ b/group-assignment/main.tf
@@ -58,8 +58,8 @@ resource "aws_ssoadmin_account_assignment" "accounts" {
 # }
 
 locals {
-  ldap_access_dn = format("cn=%v,%v", local.name, var.ldap_sso_name, var.ldap_sso_base)
-  ldap_dn        = format("cn=%v,ou=SSO,%v,%v", local.name, var.ldap_sso_name, var.ldap_sso_base)
+  ldap_access_dn = format("cn=%v,%v", local.name, var.ldap_sso_name, var.ldap_base_ou)
+  ldap_dn        = format("cn=%v,ou=SSO,%v,%v", local.name, var.ldap_sso_name, var.ldap_base_ou)
 }
 
 resource "ldap_object" "group" {