It would be nice for there to be a way to temporarily disable a user with a simple switch on the user record. This gets asked semi-frequently and while there are functional ways to accomplish this, they are clunky and not intuitive.

This should work with ARCHIBUS Authentication and all flavors of SSO. So with SSO, if the user is disabled in Archibus they would not be allowed access even if they authenticate with the directory/identity provider and even if automatic guest login option is enabled.