At the time OAuth Access Token validation, the OAuth server is not validating user status.

HI Team

At the time of validating OAUTH access token, the Token validation client is not taking care about user status.

We are getting success message even after the user is deleted from OIM, instead of getting error message.

Does we need to do any other configuration, to achieve this scenario to work properly.

Sample scenario :

1.  CURL Command for Token Generation

     curl -i -H 'Authorization: Basic QWdpbGVudE9BdXRoVG9rZW5HZW5lcmF0b3I6QWdpbGVudDEyMw==' -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" --request POST http://ldoim.cos.agilent.com:7777/ms_oauth/oauth2/endpoints/oauthservice/tokens -d 'grant_type=password&username=9493032360&password=Passw0rd&scope=AgilentServiceRequester.info'