Identity asserter provider that supports case mapping for users and groups

There have been numerous occasions where downstream ecosystem components have required user and group names to be specific case. Currently Knox does not enforce the case of the user or group identity and will use whatever is accepted by the authentication provider. The request here is to add a new identity-assertion provider that could be configured to do case mapping on user and group names. It might be configured in a topology file something like what is shown below.

    <provider>
        <role>identity-assertion</role>
        <name>SwitchCase</name>
        <param name="user" value="upper"/>
        <param name="group" value="upper"/>
        <enabled>true</enabled>
    </provider>