Context Check Intercept (Login Intercept?) for managing account suspensions?

[Wessel, Keith]

Hi, Roberto,

You can do pretty much anything with the flexible flow framework in the IdP (others on this list can coach you better than me on specifics). You might find it simpler, though, to just disable the user's account in your back-end password store or just scramble the password.

Keith


From: users <users-bounces at shibboleth.net> On Behalf Of Ullfig, Roberto Alfredo
Sent: Wednesday, August 28, 2019 11:51 AM
To: users at shibboleth.net
Subject: Context Check Intercept (Login Intercept?) for managing account suspensions?

Hello, we do run openldap but I'm pretty sure we don't support password policy overlays. Can I prevent login (for all relaying parties) for suspended accounts using a Context Check Intercept that checks the value of the user's suspension attribute?

--- 
Roberto Ullfig - mailto:rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago