0

I have an application connecting to any IDP using the OIDC Protocol. This application stores part of the user identity in it's database. The problem I have is when the user gets disabled on the IDP the application still treats it's record of the user as active; although the user can't login it will still be included in some processes. We need some way to tell the user has been deactivated.

Question:

Is there a standard OIDC event fired when a user is disabled on the IDP that the application can listen to?

What I've researched and tried:
So far I've read through the OIDC API docs and found I can ping a login with IdentityModel.Client.TokenClient.RequestPasswordTokenAsync and get an error message indicating the user is disabled.

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.