Lockout Check Box on users screen

[Brian Lancaster]

Under user administration there is Locked out check box.   How does that get set?   We have had user that the first time they try to login they cannot because the check box is checked.   We use single sign on so I don't think it is an invalid password issue.

[Jim Coyne]

So if that person had left, they would have been set to inactive in SN via LDAP which would have triggered the BR setting "Locked out" to true.   Reactivating them in AD would have set the "Active" flag to true in SN but "Locked out" would still be true until manually changed.

Could that be what happened?   You may want to check to see how many User records are active and locked out.

[heathers_]

I am experiencing a similar issue where Active users are locked out. I understand the BR that locks out users when Active is set to false but what is this BR "Lock Out User."

// Get all sessions
var sessions = GlideSessions.get().getLoggedInSessionList();
var it = sessions.iterator();
while(it.hasNext()) {
   var session = it.next();
   // If session is current users session, invalidate the session
   if (session.getUser() == current.user_name) {
       var httpSession = session.getHS();
       httpSession.setAttribute("locked_out", "true");
   }
}

[Brian Lancaster]

I'm not sure what this is doing.   It looks more like it is taking the session and locking it out so they have to log back in rather then setting Locked out checkbox on their account.

[Brian Lancaster]

I found the answer in another post.

Invalidate/Timeout User Session

[AKT_SN]

I think what Jim said is right. We had a similar issue and ended up modifying the BR to update locked out based on active flag, instead of just focusing on active=false.