I have an application connecting to any IDP using the OIDC Protocol. This application stores part of the user identity in it's database. The problem I have is when the user gets disabled on the IDP the application still treats it's record of the user as active; although the user can't login it will still be included in some processes. We need some way to tell the user has been deactivated.
Question:
Is there a standard OIDC event fired when a user is disabled on the IDP that the application can listen to?
What I've researched and tried:
So far I've read through the OIDC API docs and found I can ping a login with IdentityModel.Client.TokenClient.RequestPasswordTokenAsync and get an error message indicating the user is disabled.
