Comment 8 for bug 963098

Hi Rajesh and Joseph,

Thanks for your comments. We can display a nice message to the user regarding blocking the user logging into dashboard.
Please let me know if there is any other alternative to check the user authentication.

@Jeff,

The locking mechanism will be only at Keystone end because most of the organizations may provide only read-only access to their authentication systems. In that case, we cannot lock the user in the back-end systems.

The idea is, if keystone is integrated with an organization's authentication system with read-only access, the user shall be blocked at Keystone level. As we cannot block the user in the back end authentication system as it is read-only.

Please let me know your comments on the same.

Regards,
Nag.