Why generally all Crowd users are transferred into connected app?

[Vasya]

Why пenerally all users from Crowd Directory are transferred in all associated applications?

For example: this is "test2" user, he does not enter into one of groups:

Settings for connected application (Confluence) in Crowd:

After synchronization we see in Confluence of all users from Crowd, including "test2" which doesn't enter into one of groups in principle:

The same problem with any other connected application - all users from Crowd will appear in all applications without belonging to groups in Crowd.

What is wrong, guys?

[Colin Goudie · Accepted solution]

Nothing is 'wrong' but it's just the way it is. There's been LOOONG discussions about this for years.

Basically when you assign a directory to an application ALL users will be copied to the application. The group settings are ONLY used for authentication.

I don't like it either, but that's the way it is for now

[Colin Goudie]

Groups are used to indicate (generally) which users 'count' towards your license.

So for e.g. in JIRA, if by default you have only the group 'jira-users' in the global 'Use JIRA' permission then only users in jira-users will count against your license. Even though you may have 100000 users in JIRA due to being brought in from crowd

[Vasya]

But how in this case to disconnect unnecessary users in one applications and to include in others? The active flag disconnects the user from all applications globally.

Problem in restriction of number of users according to the license - the active user out of any groups also diminishes the counter restricted to the license, as well as the user who needs to work with application.

[Vasya]

Checked - really so!
But it is all the same strange, why to drag all users on all applications...

I thank for the exact and unrolled response.