In SAML, the ID returned for Authorization is the username, which is case-sensitive. The returned value can be converted to uppercase or lowercase, makes it easier to match with user specification in the policy.
Be aware of case in Authorization strategy as you may lose access rights if they do no match.