Enabled interface captive portal limited to a group and can't create policy based on user

[zeki893]

I have enabled captive portal on the interface and must authenticate and match with a remote LDAP server with Domain User group. I created a new user1 with the same remote LDAP server and then create a firewall policy with said user1.

User1 traffic will not hit the policy. Why doesn't it recognize the user1's activity with that policy even though the system already recognizes the user as User1 in the logs. Is User1 a different User1 that was authenticated inside the group?