diff --git a/hobo/agent/authentic2/provisionning.py b/hobo/agent/authentic2/provisionning.py
index c3dafb2..bf8297a 100644
--- a/hobo/agent/authentic2/provisionning.py
+++ b/hobo/agent/authentic2/provisionning.py
@@ -104,7 +104,7 @@ class Provisionning(threading.local):
                 # filter user's roles visible by the service's ou
                 roles = [role for role in user_roles.get(user.id, [])
                          if (not role.slug.startswith('_')
-                             and (role.ou_id is None or role.ou_id == ou.id))]
+                             and (role.ou_id is None or (ou and role.ou_id == ou.id)))]
                 data.update({
                     'uuid': user.uuid,
                     'username': user.username,