Solutionunvalidated
What does this flag do and will it help me in my use case? — There is a flag when defining clients called UpdateAccessTokenClaimsOnRefresh. Tension: I don't know if it is applicable here. Outcome: What we ended up doing was setting UpdateAccessTokenClaimsOnRefresh = true and then when our IProfileService implementation gets invoked, we made it such that the call to IsActive() would return false if the user's password had expired.
b63d85ae-6c9f-4e83-9209-1bd867fbede5
What does this flag do and will it help me in my use case? — There is a flag when defining clients called UpdateAccessTokenClaimsOnRefresh. Tension: I don't know if it is applicable here. Outcome: What we ended up doing was setting UpdateAccessTokenClaimsOnRefresh = true and then when our IProfileService implementation gets invoked, we made it such that the call to IsActive() would return false if the user's password had expired.