Found the root cause, it has nothing to do with any of the policy nor setting in OnGuard.
We remove a services from the environment but forgot to stopped the services, that created the issue.
As the client looking for the cluster services for authentication, whenever it hit the removal of services, it will keep on prompting for the login credential.
After stopped the services, there are no more issue and problem solved.