I have the same issue.we have 5 groups profile.we want the IT profile limit to IT account only in the AD. so no other group can access.configured everything, not work. the debug shows no map message at all.TAC found out the member of is case sensitiv...