[ https://issues.jboss.org/browse/ELY-184?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse commented on ELY-184: -------------------------------------- I think for simplicity then I will take the view that a KeyStore should only return the current valid entries so anything disabled will not be visible as a KeyStore has no real way to represent this. Related to what you say above I think the KeyStore API is not going to be sufficient for our user management requirements anyway so no point trying to squeeze this bit in as we need an alternative anyway. I could take the view that this KeyStore implementation returns the PasswordEntry but throws and exception if there is an attempt to obtain the actual password and the account is disabled but TBH we don't have a real requirement for that - our main requirement is that a user can not authenticate using a disabled account and that can be achieved by not making the account visible. -- This message was sent by Atlassian JIRA (v6.3.15#6346)