diff --git a/group-assignment/main.tf b/group-assignment/main.tf
index 8d09b18..48ba9fc 100644
--- a/group-assignment/main.tf
+++ b/group-assignment/main.tf
@@ -59,7 +59,7 @@ resource "aws_ssoadmin_account_assignment" "accounts" {
 
 locals {
   ldap_access_dn = format("cn=%v,%v", var.ldap_sso_name, var.ldap_base_ou)
-  ldap_dn        = format("cn=%v,ou=SSO,%v,%v", local.name, var.ldap_sso_name, var.ldap_base_ou)
+  ldap_dn        = format("cn=%v,ou=%v,ou=SSO,%v", local.name, var.ldap_sso_name, var.ldap_base_ou)
 }
 
 resource "ldap_object" "group" {
@@ -131,4 +131,3 @@ resource "ldap_object_attributes" "group" {
 ## member: cn=badra001,ou=People,o=U.S. Census Bureau,c=US
 ## 
 
-