You may need to unlock the shadow instance first before you can login with DDIC.
Command can be found in upgrade directory
tp unlocksys <SID> pf=<path of shadow instance profile>
This is not correct.
You unlock shadow with SAPup and NOT with the tp tool.
You do NOT need to unlock the system to login with the DDIC user.
Regards
RB