问题
By looking at the user account's log i see that there is a claim named "http://wso2.org/claims/accountStatus" that is displayed as a checkbox. I have enabled that claim and now i set it's value. However it does nothing except keeping the value. Is there a way to prevent a user with disabled account from login (especially login through SAML SSO login)?
回答1:
You can disable login by changing the permission of the user's user group. (So add him to that user group if you need to prevent login). You can uncheck it at the user permission tree http://docs.wso2.org/wiki/display/IS410/Editing+User+Roles
来源：https://stackoverflow.com/questions/15420138/wso2-identity-server-deactivating-user-account