SiteMinder: Is ID Token revoked when User disabled?

[MARUBUN SUPPORT]

Hello Team,

SiteMinder: 12.8.08

Please let me confirm the following point which I could not find in BROADCOM documents.

When an user is disabled in Admin UI, is the ID Token corresponded to the user revoked?

Regards,
MARUBUN

[Sung Hoon Kim]

Hi,

When the user is disabled in SiteMinder then when you try to generate SMSESSION using the ID Token you will fail.

However, if there is a password policy to re-enable the user after x minutes later, you will get SMSESSION successfully because then SiteMinder will reset the account status when ID Token is submit.

Thanks

Kim

[MARUBUN SUPPORT]

Hi SH Kim-san,

Do you have any answer?

Please let me know if I should create a case.

Thanks,

Koji

--------------------------------------------------------------------

Hello Kim-san,

Thank you for your great support.

How is about Access Token?
Does any operation with Access Token for a disabled user fail?

Thanks,
MARUBUN