LDAP authentication automatically creates new user accounts if those accounts do not already exist. There should, at a minimum, be a config.php setting that turns this off. Optimally, there should be an admin interface option to turn this off.

There are many user management plugins that work well. Having LDAP auth also do user creation is a misfeature. We get routinely get requests to turn this off or disable this.

Thank you.