In the Active Directory a Group "Foreman" exists, but when using "Foreman" the GUI tells us "Name is not found in the authentication source"and does not allow to save. Changing the Group Name in Foreman GUI to lowercase "foreman" everything works fine. So I think somewhere it compares the input with the lowercased output of the source and fails.