Commerce UPM Member ship provider always treats the security question answer as case insensitive. While creating the user , UPM Membership provider does ToLower() of the provided secret question answer and also converts the supplied answer to lower case...