Users with blocked accounts that dont have user records

We’re seeing one user who has multiple “Blocked Account” messages in the Audit log but no actual User record.

  • I’ve tried to use the IP Unblock /api/v2/anomaly/blocks/ips/{id} API endpoint and, while I did receive a 204 response they’re still being blocked
  • As the user doesn’t have a user_id i’m unbale to use the /api/v2/user-blocks/{id} ID unblock endpoint

If it helps the user is an SSO user with Active Directory/LDAP connection

What are my next Steps to remedy this?

Hi Adam,

In this scenario, the endpoint you want to use is Unblock by identifier ( /api/v2/user-blocks) which can take username, phone number or email as the identifier.

Please give this a try and let me know if it works!

Thank you for the information.

I’ve successfully called it (204 response) for the affected user.

Once I hear back from the client I’ll let you know if this helps them and either mark this as resolved or provide further information.

(Edit: It’s after-hours for them so resolution to this may not happen until tomorrow)


1 Like

No worries! Let us know if you have any other questions down the road!

Step in the right direction: now it says “wrong username or password”.

  • they are using "strategy": "ad"
  • They’ve confirmed the password entered was correct
  • They are using the correct casing of the user for login (as it appears in the AD)

As it’s an AD connection would “reset password” even be viable through the auth0 system?