What we have just created in this recipe is called a connector. With a connector, Jira first pulls user and group information from LDAP and then creates a local copy. It then periodically synchronizes any deltas.

All authentication will be delegated to LDAP. So, if a user's password is updated in LDAP, it will be immediately reflected when the user attempts to log in to Jira. It is important to note that, with LDAP, users must still be in the necessary groups (for example, jira-users, by default) in order to access Jira, so you need to make sure that you either create a group called jira-users in LDAP and add everyone to it or grant the application access to LDAP groups, such as a group called all-employees.

Also, note that only users who have access to Jira will count toward your license count. This includes users in groups that have been granted application access to Jira.