Composer Security>Users: Entered names are case sensitive. Creating duplicates.

[jrozanc]

We have a mashup that is connected to Active Directory for authentication. When a user enters their log in credentials we have noticed that Security>Users is case sensitive. It will create a duplicate user name if the user fat fingers the shift key. For example:

john.smith (actual log in name)

John.Smith (Mistake)

JOHN.SMITH (Mistake)

When this occurs it prevents the user from accessing the mashup application until the duplicate user name is removed. Does Composer have a OOTB function that prevents this occurring or do we need to develop a custom solution to prevent this from occurring?

[SachinSharma · Accepted solution]

This is working as designed. There was a Jira ticket opened for an enhancement to make user login case insensitive but R&D does not have any plans to implement it. This applies to SSO scenarios only. Some customers solve this in PingFederate by forcing uid to be lower case. Here is how to implement this:  https://support.pingidentity.com/s/article/Using-OGNL-to-force-upper-or-lower-case-values-for-LDAP-attributes

Refer this article for additional details.

Regards,

Sachin