1. Install Samsung authenticator for Kerberos on the device.
2. Create a Knox container and choose “Enterprise ID” as a lock type (there is no possibility to change lock type to “Enterprise ID” once the container is created)
3. Enter your AD credentials and other required information
With above settings, you will be able to use SSO service without need to enter your AD password again. The AD password will be required only to unlock Knox Container.