IMPORTANT NOTE: this issue has been fixed in the 3.6.x release.
When configuring the Login PI 3 AD integration you must select a non-nested group. Using a nested group as authentication will result in the inability of logging in to the webinterface.
The solution is creating a non-nested group and adding all of the authorized users to the group.
To find out what nested groups are please click here.