I currently have an ldap setup for my teachers that allows them access to the site once their account has been created in ldap. This has been working well. I decided to add Oauth (limited by domain) to make it easier for them to log in but use ldap account for cohort syncing etc. I just realized that because I only sync ldap once a day, I allowed new accounts to be created on login so teachers could quickly access the site but this is also allowing them to create new accounts from the Oauth login which means they do not get synced to the right cohorts because they now have no ldap account.
Is there any way to just stop account creation from the Oauth side and not the ldap side?