Active Directory authenticates is register-independent system those. with authenticating, we can enter TOM_TM or Tom_TM or tom_tm
and this will be success,
but Role+Strategy+Plugin register-dependent. As a result you have next error: Access denied, TOM_tm no permission to Full / Read

To solve this problrem we need enter to "manage and assign roles" -> "assign roles" value TOM_tm. In theory Role+Strategy+Plugin must be
register-independent if Active Directory authenticates is enabled.