The licenses for our organization's MS SQL and ArcGIS Server are such:
MS SQL: CAL ArcGIS Server: enterprise
Are the number of users that can be served still limited to the number of CALs present in MS SQL?
Yes running a SDE service for users to connect will consume cals. The best way to connect is with direct connect. ArcGIS help has guidance for this.