WSO2 Identity Server Deactivating user account

Question

By looking at the user account's log i see that there is a claim named " http://wso2.org/claims/accountStatus " that is displayed as a checkbox. I have enabled that claim and now i set it's value. However it does nothing except keeping the value. Is there a way to prevent a user with disabled account from login (especially login through SAML SSO login)?

Answer 1

You can disable login by changing the permission of the user's user group. (So add him to that user group if you need to prevent login). You can uncheck it at the user permission tree http://docs.wso2.org/wiki/display/IS410/Editing+User+Roles