The Authentication Type was set to 'UserId' during the USS installation, however, the EEM, the User Authentication Filter in LDAP attribute Mapping is set to use: sAMAccountName, such as: "(&(objectClass=user)(!(objectClass=computer))(sAMAccountName="
In this case, nobody is able to login to USS user/admin interface.
The Authentication Type in USS should be changed to 'screenName'
It must be changed manually.