Adding my experience as well. We had a user who wanted to do a password reset. We utilize the users-by-mail endpoint to check if they are already in Auth0 to send them a different email if they are not. And since they used different casing, it kept coming back as not found. This is high priority for us to get changed. Thanks.