How to develop a script to disables withdrawn employees' Jira accounts

[Geetha]

Because of the way our Jira is configured to only create a user account when an LDAP user first signs in, when an employee leaves, the account in Jira stays active until a Jira admin actually goes in to disable the user.

We need a script that iterates over the list of Jira LDAP users, performs an LDAP lookup to determine if each employee is active, and disable the Jira account if the employee is withdrawn.  The script should notify to a group if it fails to disable the Jira account for any reason such as when the account is a lead of one or more project(s).

The script should be configured to run regularly (e.g. cron job, jenkins job).

[Will C]

Why don't you set jira up as a connector to create users from your directory and then mark them as disabled once the external directory marks them as disabled?