Follow-up plugin question

Part of the functionality of my LDAP authentication plugin is that the user can enter either their username (’jrotering’) or their full name (’James Rotering’). Either of these will work to look up a user in LDAP and create the user in MODx (MODx username will be jrotering and the full name in the profile will be James Rotering).

I created my jrotering user account in this manner, and also gave the user rights to view Manager pages. I can now log in with this user, using either jrotering or James Rotering as the username. LDAP authentication returns successful in either case, and I set the output value of OnManagerAuthentication to ’true’. However, when I log in using ’jrotering’, I have permission to view the manager pages, but when I log in as James Rotering, I get the "Permission denied!" message instead of seeing the standard Manager view.

I’m thinking this means that when a user logs in with their full name, I need to add something in the plugin that sets the username to the username that corresponds to that full name. I think the username in the session is still resolving as the full name, which is why the user gets authenticated but doesn’t have permissions.

Does that make any sense? Any idea of what I need to do to resolve this?