Comment 37 for bug 1434034

Revision history for this message
Morgan Fainberg (mdrnstm) wrote : Re: Even if the user is disabled, can use the last token is validated

@Guang.

I think it is unreasonable to ask an AD admin to issue a api call when disabling a user (let's be fair, they disable the user in AD and expect the user to stop working everywhere). I am ok with expanding and allowing a revocation event to be manually issued in these cases, but that is a feature and beyond the scope of the bug fix.