Guys- You can track this issue here: http://jira.jboss.com/jira/browse/JBSSO-37 Until then when using the out-of-the-box impl make sure the 'sn' field in your repo is used to represent "true' or "false" value that indicates whether an account is activated or not. You can ofcourse create your own IdentityProvider or extend this to fit whatever schema you have set up in your environment Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4141804#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...