System Automatically Logs Out Disabled User Accounts in Active Sessions

User Management

What's new?

When an administrator disables a user account or when accounts are disabled through automated processes, the system ensures that disabled users cannot continue to use their existing sessions. This applies to all session types including web, mobile, and SOAP API access.

Why does it matter?

This update eliminates security risks from disabled accounts maintaining system access by providing automatic enforcement of account status changes across all access methods. It also ensures consistent security posture without requiring manual session management.