In SAML, the ID returned for Authorization is the username, which is case-sensitive. The returned value can be converted to uppercase or lowercase, makes it easier to match with user specification in the policy.
⚠ Be aware of case in Authorization strategy as you
may lose access rights if they do no match.