PIM - SECJ0369E: Authentication failed when using LTPA. The exception is com.ibm.websphere.wim.exception.PasswordCheckFailedException: CWWIM4537E No principal is found

Problem Description:
I have reset one user's password he can login to itim/self UI but not recorder UI, It says invalid password.

Below is the user error in the MSG.log:
<Message Id="CTGIMD800E" Severity="ERROR">
<Time Millis="1608696459162"> 2020.12.22 22:07:39.162-06:00</Time>
<Server Format="IP">xxxxxx.xxx.xxx</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.daml.jndi</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[CTGIMD800E An IO exception occurred while connecting to the adapter using the following URL.
URL: https://xxx.xxx.xxx.xxx:45580
Error: CTGIMD813E An error occurred while connecting to an adapter. The following error occurred.
Error: Connection refused  ]]></LogText>
<Source FileName="com.ibm.daml.jndi.DAMLContext" Method="sendRequest"/>
<TranslationInfo Type="JAVA" Catalog="tmsMessages" MsgKey="com.ibm.daml.jndi.DAMLContext.CONNECT_IOEXCEPTION"><Param><![CDATA[https://xxx.xxx.xxx.xxx:45580]]></Param><Param><![CDATA[CTGIMD813E An error occurred while connecting to an adapter. The following error occurred.
Error: Connection refused ]]></Param></TranslationInfo>
</Message>

<Message Id="CTGIMD043E" Severity="ERROR">
<Time Millis="1608696459162"> 2020.12.22 22:07:39.162-06:00</Time>
<Server Format="IP">xxxxxx.xxx.xx</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.remoteservices.ejb.mediation</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[CTGIMD043E Unable to process request by agent cause: request returned from ServiceProvider, remote status=UNSUCCESSFUL , reason=COMMUNICATION_ERROR ]]></LogText>
<Source FileName="com.ibm.itim.remoteservices.ejb.mediation.Connector" Method="execute"/>
<TranslationInfo Type="JAVA" Catalog="tmsMessages" MsgKey="com.ibm.itim.remoteservices.ejb.mediation.Connector.AGENT_FAILED_TO_PROCESS_REQUEST"><Param><![CDATA[UNSUCCESSFUL]]></Param><Param><![CDATA[COMMUNICATION_ERROR]]></Param></TranslationInfo>
</Message>


Below is the user error in the WAS_sessrec SystemOut.log:

[12/22/20 22:07:18:575 CST] 00000146 LTPAServerObj E   SECJ0369E: Authentication failed when using LTPA. The exception is com.ibm.websphere.wim.exception.PasswordCheckFailedException: CWWIM4537E  No principal is found from the 'xxxxxx' principal name..
[12/22/20 22:07:18:575 CST] 00000146 FormLoginExte E   SECJ0118E: Authentication error during authentication for user xxxxxx
[12/22/20 22:07:18:575 CST] 00000146 FormLoginExte E   SECJ0118E: Authentication error during authentication for user xxxxxx
[12/22/20 22:07:18:575 CST] 00000146 webapp        E com.ibm.ws.webcontainer.webapp.WebApp logError SRVE0293E: [Servlet Error]-[java.lang.IllegalArgumentException: Location cannot be null in javax.servlet.http.HttpServletResponse.sendRedirect(location)]: java.lang.IllegalArgumentException: Location cannot be null in javax.servlet.http.HttpServletResponse.sendRedirect(location)
    at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.sendRedirectWithStatusCode(WebAppDispatcherContext.java:546)
    at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.sendRedirect(WebAppDispatcherContext.java:534)
    at com.ibm.ws.webcontainer.srt.SRTServletResponse.sendRedirect(SRTServletResponse.java:1350)
    at com.ibm.ws.security.web.FormLoginExtensionProcessor.formLogin(FormLoginExtensionProcessor.java:833)
    at com.ibm.ws.security.web.FormLoginExtensionProcessor.formLogin(FormLoginExtensionProcessor.java:229)
    at com.ibm.ws.security.web.FormLoginExtensionProcessor.handleRequest(FormLoginExtensionProcessor.java:207)
    at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3879)
    at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:304)
    at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1015)
    at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1817)
    at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:200)
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:463)
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:530)
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:316)
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:287)
    at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)
    at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)
    at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:175)
    at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
    at com.ibm.io.async.AsyncChannelFuture$1.run(AsyncChannelFuture.java:205)
    at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1892)