Account Disabled (RISC)

Risk Incident Sharing event indicating a user account has been disabled (RISC §2.2). Receiving systems must immediately block access.

Try in SSF Sandbox
Security EventsRISCHigh Severity

Sequence Diagram

Click any step for details

IdPTransmitterReceiversReceiverAccessUsers1Account Disabled2Create Account Disabled SET3Deliver SET to Receivers4Receiver Validates SET5Block All Access6Update Local Account State
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Account Disabled
Identity ProviderIdentity Provider
2
Create Account Disabled SET
Identity ProviderIdentity Provider
3
Deliver SET to Receivers
TransmitterAll Subscribed Receivers
4
Receiver Validates SET
Receiver (RP)Receiver (RP)
5
Block All Access
Receiver (RP)Access Control
6
Update Local Account State
Receiver (RP)User Store

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.