Description
When calling findPrincipalByName, if name JSmith is provided as an argument, JSmith (with this exact character case) will be returned. Does not matter if the name stored in the repository is jsmith. The name used as an argument is returned as the SOAPPrincipal name.
This impacts Applications that are not case-insensitive (like JIRA and Confluence). Other APIs will return the case stored in the repository, however findPrincipalByName will return the case used as an argument. A login attempt with a char case different from the one being used in the repository will provide to the Apps wrong data, possibly causing permissions loss.
The problem happens only if the Lower Case Output is disabled.