LDAP set username-sensitivity enable

[hillsitsupp]

Am I right in thinking that setting set username-sensitivity enable for a local LDAP user just removes the set username-sensitivity disable line from the user's config?

set username-sensitivity enable doesn't persist in the config when I enter it, and I want to be sure I have this right.

I assume entering set username-sensitivity enable is the same as entering unset username-sensitivity ?

[hillsitsupp · Accepted solution]

Found the issue. It was remote LDAP groups in firewall groups causing case-insensitivity:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Issue-with-MFA-bypassed-with-an-LDAP...