I'd like to set up Jira SSO for our organization, but am confused on how the billing structure works. If I use Guard to provision users with Azure AD (Entra ID), we have many users in the directory, but only a handful of developers will user the Jira. Obviously, I'd prefer that our company is only billed for authorized users in the development group instead of the entire directory. Is there some guidance I'm missing on how this works?