From 9d415469f894a73c877fd245f34139e7e2c8b5e2 Mon Sep 17 00:00:00 2001
From: Michael Jumper <mjumper@apache.org>
Date: Wed, 24 Jun 2020 20:34:52 -0700
Subject: [PATCH] GUACAMOLE-103: Transform username only if present.

---
 .../guacamole/auth/saml/AuthenticationProviderService.java | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/extensions/guacamole-auth-saml/src/main/java/org/apache/guacamole/auth/saml/AuthenticationProviderService.java b/extensions/guacamole-auth-saml/src/main/java/org/apache/guacamole/auth/saml/AuthenticationProviderService.java
index 063f0dc8b..263928a0f 100644
--- a/extensions/guacamole-auth-saml/src/main/java/org/apache/guacamole/auth/saml/AuthenticationProviderService.java
+++ b/extensions/guacamole-auth-saml/src/main/java/org/apache/guacamole/auth/saml/AuthenticationProviderService.java
@@ -131,9 +131,12 @@ public class AuthenticationProviderService {
                     samlResponse.validateTimestamps();
 
                     // Grab the username, and, if present, finish authentication.
-                    String username = samlResponse.getNameId().toLowerCase();
+                    String username = samlResponse.getNameId();
                     if (username != null) {
-                        
+
+                        // Canonicalize username as lowercase
+                        username = username.toLowerCase();
+
                         // Retrieve any provided attributes
                         Map<String, List<String>> attributes =
                                 samlResponse.getAttributes();