Found the answer. It seems you MUST enable relay on the SMTP connector created for the shared domain. I felt that was a potential security risk, but then again it is only one domain.
Suggest not deleting the question, since others might benefit from the articles linked, and the issue that snagged me.