[Feature]: Limit 'Prefetch Users' to 'Sync only matching memberships'

[jensver]

Problem description

When testing the auto-provisioning of the Desktop Client I'm having an issue with needing to prefetch users.
We have +1000 users in our EntraID but only a subset of those users need access to Defguard.
But when enabling prefetch users Defguard creates users for ALL Entra users, even guests that are in our Entra directory.

Proposed solution

Limit the creation/prefetch of users to only the users in the Entra groups that are synced with the 'Sync only matching memberships'

Alternatives considered

No response

Impact

Critical / blocking our usage

[jensver]

To clarify: each user in Defguard is automatically a licensed user. That is the main issue.