Preflight Checklist

• I agree to follow the Code of Conduct that this project adheres to.
• I have searched the issue tracker for an issue that matches the one I want to file, without success.
• I am not looking for support or already pursued the available support channels without success.

Version

2.37.0

Storage Type

Kubernetes

Installation Type

Official Helm chart

Expected Behavior

Logging into Dex with Microsoft as backend connector transforms the camelcase email from Microsoft AD correctly into a lowercase email. When the access token expires and a new one is issued using the refresh token, the email address should be transformed again.
After refreshing the access token, Kubernetes API-Server doesn't authorize the token since the email doesn't match the RoleBinding anymore.

Actual Behavior

When the access token expires and a new one is issued using the refresh token, the email address is not transformed again.

Steps To Reproduce

No response

Additional Information

No response

Configuration

No response

Logs

No response