The WindowsIdentity(string) constructor requires the username to be in username@domain.com format. But in my case I get the usernames from a DB in
WindowsIdentity(string)
username@domain.com
You could query AD for the UPN.