AAD-102: case insensitive LDAP may return different user id