We've finally determined the problem. a user with a different claim of the form
i suspect the c element was the problem together with claim value since I've only saw for built in group and without issuer
as referenced in
removed the users, the ...