How to stop users getting automatically created?

[Malin Holm]

Our company uses gmail and have addresses on the form firstname.lastname@xxx.com which are used when setting up their Jira account.

But we also have a short-version of the email with is only firstname@xxx.com, and for some reason Jira (I think) is automatically creating accounts with the short version of the emails, so people end up with double accounts. My guess is that this is through some mention or email automation, since both emails are connected to the same gmail account. 

Any ideas on how to turn this off? Or if I can see in Jira admin how the extra accounts were created? (now I just get an email saying xxx has join Jira Software, but not how they were added).

[Tomislav Sablic]

Have you tried to take look at Jira audit log? Also, try to take a look at those short user accounts and see if they already have permissions on some projects. 

This would be the first steps to finding out on what is going on.

[Malin Holm]

Thank you. There is no event in the audit log that the user is created, just updated. (even though I get an email that they have been added). And in operation details it says that the user goes from inactive to active.

And they get the added to the same group as the account with full email, or it could be that this is our standard group that everyone is added to by default.

[Tomislav Sablic]

Do you have some plugins that you suspect that it could interfere with users?

If so, try disabling them for a day or two and see what happens then.

Also, have those accounts that are not meant to exist ever logged in successfully?

[Malin Holm]

Thank you. I don't know about the plugins, will investigate. 

The users are able to successfully log in with the new accounts. One idea is that it is created when someone tries to login from a different device and somehow manages to create a new account instead of logging in.