In our instance, I ultimately disabled auto-provisioning for a host of security, duplicate-account prevention and general chaos-prevention. I don't know if your instance is a size where cloning existing user accounts is a feasible method of creation, but the accidental side-benefit of disabling auto...