# Suspended status in authentication

**URL:** <https://devforum.okta.com/t/suspended-status-in-authentication/7866>\
**Category:** Questions\
**Created:** [January 30, 2020, 10:43am UTC](https://devforum.okta.com/t/suspended-status-in-authentication/7866 "2020-01-30T10:43:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![konyUser](https://avatars.discourse-cdn.com/v4/letter/k/65b543/32.png) [@konyUser](https://devforum.okta.com/u/konyUser)\
**Post date:** [January 30, 2020, 10:43am UTC](https://devforum.okta.com/t/suspended-status-in-authentication/7866/1 "2020-01-30T10:43:05Z")

</div>

Hi,

Can we get suspended status in authentication, if the user is suspended?

---

<div class="post-metadata">

**Author:** ![dragos](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/dragos/32/1313_2.png) [@dragos](https://devforum.okta.com/u/dragos)\
**Post date:** [January 31, 2020, 4:17am UTC](https://devforum.okta.com/t/suspended-status-in-authentication/7866/2 "2020-01-31T04:17:38Z")

</div>

Hi @konyUser

No, the user does not receive a response saying that his account is suspended when authenticating on /api/v1/authn, however the authentication error is registered inside your Otka tenant’s System Logs.

---

<div class="post-metadata">

**Author:** ![konyUser](https://avatars.discourse-cdn.com/v4/letter/k/65b543/32.png) [@konyUser](https://devforum.okta.com/u/konyUser)\
**Post date:** [January 31, 2020, 2:02pm UTC](https://devforum.okta.com/t/suspended-status-in-authentication/7866/3 "2020-01-31T14:02:49Z")

</div>

Thanks @dragos. But i need to lock the user with an api and show locked\_out status.  
Is it possible ?

---

<div class="post-metadata">

**Author:** ![dragos](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/dragos/32/1313_2.png) [@dragos](https://devforum.okta.com/u/dragos)\
**Post date:** [February 3, 2020, 2:45am UTC](https://devforum.okta.com/t/suspended-status-in-authentication/7866/4 "2020-02-03T02:45:44Z")

</div>

Hi @konyUser

We do not have a direct API to lock the user, however, if you want to achieve this use-case, the best solution is to:

- create a group in which you add only the test user
- under Security \>\> Authentication (if you are using Developer Console admin interface, please switch to Classic UI from top left corner), create a policy assigned to the previously created group to lock out the user after 1 unsuccessful attempt
- try an invalid authentication for the test user and, after it hit the password policy, he will be automatically locked

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 24, 2024, 6:44pm UTC](https://devforum.okta.com/t/suspended-status-in-authentication/7866/5 "2024-01-24T18:44:36Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.