Home > Storage > PowerScale (Isilon) > Product Documentation > Management and Migration > PowerScale OneFS User Mapping: Mapping Identities Across Authentication Providers > Rules compare usernames
A rule contains at least one username, and every identity includes a username. For a mapping rule to apply, OneFS must match the username in the rule with an identity.
A username is either an Active Directory account name coupled with a domain name or a UNIX name without a domain name. The UNIX name may be the same as the Active Directory account name. If a username is not coupled with a domain name, OneFS considers it a UNIX name.
To match a username in a rule with an Active Directory user, you must couple the name of the domain or a wildcard with the username, as the following:
DOMAIN\\username
or
*\\username
To match a UNIX name in LDAP, NIS, or the local provider, you must set the name in the rule without a domain name or without a wildcard for the domain.
When OneFS compares a username with an identity, OneFS ignores case by default: For usernames, OneFS makes no distinction between uppercase and lowercase unless you turn off the option to normalize usernames. (See, for instance, the isi auth ads modify command with the lookup-normalize-users option in the OneFS Command Reference.)