[JENKINS-46646] Active Directory Auth: Logging in with both username and email creates two separate accounts.

We configured Jenkins to use active directory authentication. It is possible to login with the ad username as well as the email adresse of the ad account. However, doing this will create two separate users. This will (almost) never be intended. As it is nice two be able to log in with both options, there should only be one jenkins account associated with each ad account.

---
Originally reported by mcnetic, imported from: Active Directory Auth: Logging in with both username and email creates two separate accounts.

• assignee: fbelzunc
  
• status: Open
  
• priority: Major
  
• component(s): active-directory-plugin
  
• resolution: Unresolved
  
• votes: 4
  
• watchers: 5
  
• imported: 2025-12-07
  

Raw content of original issue

We configured Jenkins to use active directory authentication. It is possible to login with the ad username as well as the email adresse of the ad account. However, doing this will create two separate users. This will (almost) never be intended. As it is nice two be able to log in with both options, there should only be one jenkins account associated with each ad account.

Start in the active-directory-plugin authentication and account-creation flow, then reproduce logging in with the same Active Directory account by username and email. Trace how each login identity is associated with a Jenkins user. Done means both login forms resolve to one Jenkins account, with coverage for the duplicate-account case.

Written by the indexing model from the issue text.