Fix groups' casing

Users and groups have a canonical casing that is not necessarily all
lower-case. OpenID provides the canonical casing for the user, but
groupId in Provisioning does not. Thus, we swap to using groupName which
has the correct casing and appending the domain manually.