Hi all, it is possible to guess the username of disabled users. This was not possible in earlier versions of keycloak. Is this on purpose? Best Michael -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20151028/33692bc9/attachment.html