is there a way to limit by group which users are able to login to JIRA using active directory creds when they don't have an account in JIRA already? We are seeing that users can login and then an account is created and we want to limit this so we don't run out of licenses.
I think the option is "Copy user on login", please refer to https://confluence.atlassian.com/display/JIRA/Connecting+to+an+Internal+Directory+with+LDAP+Authentication
You can define a user filter and specify that only users from a certain group (or some other criteria) will be synced to JIRA. Once you do that, only those users will be copied on first login.
It looks like you're new here. Sign in or register to get started.