Context Check Intercept (Login Intercept?) for managing account suspensions?

[Ullfig, Roberto Alfredo]

That doesn't make much sense to me. How does the authentication service tell the user the account is suspended if the user can't login to it?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago
________________________________
From: users <users-bounces at shibboleth.net> on behalf of Wessel, Keith <kwessel at illinois.edu>
Sent: Wednesday, August 28, 2019 12:26 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Context Check Intercept (Login Intercept?) for managing account suspensions?

Hi, Roberto,

You can do pretty much anything with the flexible flow framework in the IdP (others on this list can coach you better than me on specifics). You might find it simpler, though, to just disable the user's account in your back-end password store or just scramble the password.

Keith


From: users <users-bounces at shibboleth.net> On Behalf Of Ullfig, Roberto Alfredo
Sent: Wednesday, August 28, 2019 11:51 AM
To: users at shibboleth.net
Subject: Context Check Intercept (Login Intercept?) for managing account suspensions?

Hello, we do run openldap but I'm pretty sure we don't support password policy overlays. Can I prevent login (for all relaying parties) for suspended accounts using a Context Check Intercept that checks the value of the user's suspension attribute?

---
Roberto Ullfig - mailto:rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190829/d3e4930f/attachment.html>