The ID returned from SAML is used as the username for Authorization, which is usually case sensitive. To make it easier to match with user definition in the policy, the returned value can be converted. Caution! Be aware of case in Authorization strategy as you may lose access rights if they do no match.