That's good cos i'm not selling 😉

As already pointed out the max length for a SQL server security principal is SYSNAME which is NVARCHAR(128). This would take account of any possible length from AD or a SQL Server account.

Now there's no actual hard limit on AD objects but i cant personally see any need for a user to have a domain prefix and username of more than 128 chars