If your userstore contains alias users and if you have configured alias class for authentication, authentication fails.
Workaround: For the workaround, see TID 7015163.