After enabling the new SharePoint Server Subscription Edition feature to find users from the UPA directly with the SPTrustedBackedByUPAClaimProvider,, you may be unable to create a root site in a new Web Application.