The Active Directory plugin page documents a "Use Jenkins Internal Database" checkbox under the Active Directory configuration on the Configure Global Security page.

Observed behavior: Given a freshly configured server with the above environment, no such checkbox is observed as documented.  The Active Directory plugin does otherwise appear to function for user authentication and metadata retrieval.

Expectation: Fall-back user configuration UI is available as documented, OR documentation for a fall-back user is updated.