Configuring Ambari Authentication with LDAP/AD
Also available as:

Configuring Ambari Authentication for LDAP/AD

By default Ambari uses an internal database as the user store for authentication and authorization. If you want to configure LDAP or Active Directory (AD) external authentication, you must configure Ambari to authenticate external users, configure Ambari to use an LDAP/AD datastore, and synchronize your LDAP users and groups.

Recommended datastores for users are Active Directory (AD), FreeIPA, and Open LDAP.