According to the documentation, the active flag on a directory should behave this way:

• users in inactive directories will not be able to access mapped applications

But at the moment, the flag is completely ignored by Crowd. Rather than fixing it to behave as above, for Embedded Crowd we need the directory active flag to behave this way:

• inactive directories are not included when searching for users, groups or memberships
• inactive directories are still displayed in the UI
• inactive directories can be removed from application mappings.

The following documentation will need to be updated when the behaviour changes:

• http://confluence.atlassian.com/display/CROWD/Configuring+an+Internal+Directory
• http://confluence.atlassian.com/display/CROWD/Configuring+an+LDAP+Directory+Connector
• http://confluence.atlassian.com/display/CROWD/Configuring+a+Custom+Directory+Connector
• http://confluence.atlassian.com/display/CROWD/Configuring+a+Delegated+Authentication+Directory