Unable to filter users from domain in API keys

[psanz-estc]

Kibana version: 8.4

Elasticsearch version:

Server OS version:

Browser version:

Browser OS version:

Original install method (e.g. download page, yum, from source, etc.):

Describe the bug:
Users with @Domain coming from SAML are not filtered correctly. Kibana shows a pop up with text:

expected end of input or whitespace but "@" was found

Expected behavior:
SAML users should be able to be used as filter

Screenshots (if relevant):

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[legrego]

Based on some quick testing, it looks like the search will work correctly if we wrap the username in quotes. eg. username:"user@domain" as opposed to username:user@domain:

[zez3]

is it a feature is it a bug, don't really care as long as ther's a workaround

[legrego]

The current behavior us a bug. The workaround is to manually surround the search term in double quotes.

So instead of searching for username: user@domain, you would instead search for username: "user@domain". The fix here is for the "user" dropdown in the screenshot to automatically surround the username in double quotes when it updates the search bar.

[thomheymann]

This is a bug in EUI and affects other areas as well. For example tags have the same issue:

The issue can't be fixed by wrapping the username in quotation marks since that confuses EUI. The query does get constructed correctly in the search bar but the table won't show any results since it includes the quotation marks when comparing the username.

EuiSearchBar.Query.parse will need to be updated to wrap values in quotation marks if they contain special characters.

Created the following issue in EUI: elastic/eui#6349

[thomheymann]

Fixed as part of #145888