I have faced similar issue. When I try to logon to KnoxSSO, it is authenticated correctly and redirected to SSO logon page. After few hours investigation, I have realised that I need to setup ldap configs for my Advanced topology in Knox too. Not just KnoxSSO. I made below changes and I am able to resolve the issue.   Under Advanced Topology <param> <name>main.ldapRealm.userDnTemplate</name> <value>uid={0},cn=users,cn=accounts,dc=us-west-1,dc=compute,dc=internal</value> </param> <param> <name>main.ldapRealm.contextFactory.url</name> <value>ldap://xxxxxxxxxxx.us-west-1.compute.internal:389</value> </param>   Under Advanced knoxsso-topology   <param> <name>main.ldapRealm.userDnTemplate</name> <value>uid={0},cn=users,cn=accounts,dc=us-west-1,dc=compute,dc=internal</value> </param> <param> <name>main.ldapRealm.contextFactory.url</name> <value>ldap://xxxxxxxxxxx.us-west-1.compute.internal:389</value> </param> <param> <name>knoxsso.redirect.whitelist.regex</name> <value>.*</value> </param> And I have ensured the Ambari LDAP setup has the same basedn      ... View more