diff --git a/weed/s3api/s3api_sts.go b/weed/s3api/s3api_sts.go
index 6d8ee6e00..a7be8c38e 100644
--- a/weed/s3api/s3api_sts.go
+++ b/weed/s3api/s3api_sts.go
@@ -379,7 +379,7 @@ func (h *STSHandlers) handleAssumeRoleWithLDAPIdentity(w http.ResponseWriter, r
 
 	if ldapProvider == nil {
 		glog.V(2).Infof("AssumeRoleWithLDAPIdentity: no LDAP provider configured")
-		h.writeSTSErrorResponse(w, r, STSErrAccessDenied,
+		h.writeSTSErrorResponse(w, r, STSErrSTSNotReady,
 			fmt.Errorf("no LDAP provider configured - please add an LDAP provider to IAM configuration"))
 		return
 	}