Investigate blocking an identity with Apereo CAS

Closed, ResolvedPublic3 Estimated Story Points

Actions

After investigating of blocking an identity of user by Apereo CAS, we added a possibility to block user, when user trying to login. At the moment there is no possibility to force log out user from mediawiki when user was blocked in Apereo CAS as lack of user management. Apereo CAS don't have any flags/notifiers that could inform mediawiki that user are blocked. In simple way Apereo CAS just don't know what mean "blocked user". It's works with login flow, because when user trying to login, we request a data from user table to compare it. In this case we could modify request to check if user field "disabled" value is positive.