how do I allow only some active directory groups to create accounts?

[Marlene Cote]

is there a way to limit by group which users are able to login to JIRA using active directory creds when they don't have an account in JIRA already?  We are seeing that users can login and then an account is created and we want to limit this so we don't run out of licenses.

[Jobin Kuruvilla [Adaptavist]]

You can define a user filter and specify that only users from a certain group (or some other criteria) will be synced to JIRA. Once you do that, only those users will be copied on first login.

[HarryH]

I think the option is "Copy user on login", please refer to https://confluence.atlassian.com/display/JIRA/Connecting+to+an+Internal+Directory+with+LDAP+Authentication