Did you install the AD certificate services on the 2016 server? Here is a howto for 2012 but M$ did not change much:
My account provider settings:
The Windows Server 2016 AD, here I created a user ldapservice:
The ldapservice user is not shown in “Users and groups”:
I installed Sogo and the login with testuser1 worked.