I have an application connecting to any IDP using the OIDC Protocol. This application stores part of the user identity in it's database. The problem I have is when the user gets disabled on the IDP the application still treats it's record of the user as active; although the user can't login it will still be included in some processes. We need some way to tell the user has been deactivated.


Is there a standard OIDC event fired when a user is disabled on the IDP that the application can listen to?

What I've researched and tried:
So far I've read through the OIDC API docs and found I can ping a login with IdentityModel.Client.TokenClient.RequestPasswordTokenAsync and get an error message indicating the user is disabled.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.