Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
When i used root group attributes, i always got error. Then i tried copy-paste admin group attributes, add "virtual-domain0=ROOT-DOMAIN" and logged in successfully. Works on prime 3.1 and ISE.