adding freeipa user to local group

ubuntu/zesty desktop
ubuntu/zesty freeipa-client
ubuntu/xenial freeipa-server

A freeipa user is assigned to a local group, but on a terminal opened on the desktop, that group does not appear in the output of the groups command.

On the other hand, if I do ssh localhost groups said group does appear in the output of groups.

So: ipa user = philippe, local group = docker

philippe@achernar:~$ getent group | grep docker
docker:x:135:philippe,ladmin

philippe@achernar:~$ groups
philippe

philippe@achernar:~$ ssh localhost groups
philippe docker

What is going on here?

Additional: Actually just going to the console with Ctrl-Alt-F1 and logging in is sufficient. Weird!