Verify ldap bind username used for FSSO

A common source of failure for an ldap lookup when using a regular bind is incorrect user cn

On the DC verify by running following command

dsquery user -name “username”