Well, my issue is solved. The reason why it failed was the primary node SSO configuration for which System-Domain was not the first default domain source . I put the Windows domain first.
Sign-on and Discovery / Configuration / default domains at bottom . Ensure that System-Domain is the 1rst choice.