Prevent inactive users from logging in
Configure this property to control if inactive users can authenticate on your instance.
When the glide.authenticate.only.allow.active.user.login system property is not set to true, users in the User [sys_user] table marked inactive can still login to the instance. Users may be marked inactive if they no longer have permission to login (such as during termination from a company).
Set the glide.authenticate.only.allow.active.user.login property value to the recommended value of true (recommended), to ensures the users in the User [sys_user] table marked inactive cannot log in to the instance and are locked out.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.authenticate.only.allow.active.user.login |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | Access control |
| Security risk | - Severity score: 7.5 - CVSS score: High - Security risk details: Inactive users may still access the instance and any data they could previously access. |
| Dependencies and prerequisites | None |
Parent Topic:Access control