SiteMinder: Is ID Token revoked when User disabled?

[MARUBUN SUPPORT]

Hello Team,

SiteMinder: 12.8.08

Please let me confirm the following point which I could not find in BROADCOM documents.

When an user is disabled in Admin UI, is the ID Token corresponded to the user revoked?

Regards,
MARUBUN

[Sung Hoon Kim]

Hi,

When the user is disabled in SiteMinder then when you try to generate SMSESSION using the ID Token you will fail.

However, if there is a password policy to re-enable the user after x minutes later, you will get SMSESSION successfully because then SiteMinder will reset the account status when ID Token is submit.

Thanks

Kim