[JENKINS-12607] Active directory user names should not be case sensitive.

Active directory user names should not be case sensitive. For example if I add the user "paul" then I would expect to be able to also login as "Paul", "pAul" or any other case combination.

At the moment this won't match any user name and fail to login the user in, or worse match none and apply "authenticated user" permissions. This seems to confuse a lot of users.

If there is a use case where case sensitivity is required then I think there should be a toggle option to enable or disable it.

---
Originally reported by paulm, imported from: Active directory user names should not be case sensitive.

• status: Open
  
• priority: Blocker
  
• component(s): active-directory-plugin
  
• resolution: Unresolved
  
• votes: 26
  
• watchers: 29
  
• imported: 2025-12-07
  

Raw content of original issue

Active directory user names should not be case sensitive. For example if I add the user "paul" then I would expect to be able to also login as "Paul", "pAul" or any other case combination.


At the moment this won't match any user name and fail to login the user in, or worse match none and apply "authenticated user" permissions. This seems to confuse a lot of users.


If there is a use case where case sensitivity is required then I think there should be a toggle option to enable or disable it.

• environment: Windows Server 2008.

Start in the active-directory-plugin authentication flow and trace how usernames are matched during login. Reproduce the issue with mixed-case variants of the same account, then check the existing tests or add coverage for the expected behavior. Done means supported case variants authenticate consistently without applying incorrect permissions, while any required case-sensitivity option is clearly addressed.

Written by the indexing model from the issue text.