Only check UPN if enterprise principals are not used
    
    If enterprise principals are enabled (which is the default in the AD
    provider), then the returned UPN might be slightly different from
    the one SSSD constructs before attempting the login. This patch makes
    SSSD only check if the principal is the same when the enterprise
    principals are disabled.