Windows Active Directory compatibility fixes

It seems that the isoformat timestamp needs to end with 'Z'
and that the id needs to begin with 'ONELOGIN'