SSimple Mail Service
All ideas

Disallow credential-based login for users when OIDC is enabled

If OIDC is enabled, users can currently login using two methods: Credentials OIDC Even if I don't sent a password reset mail, users can still request it and activate a second method of authentication. It would therefor be great to disallow credential-based login for specific users. From a security standpoint that would mean that if I disable an user in our IdP, I can be sure they will be unable to access SMS (and other services linked to the IdP), since that was their only way of accessing it. In my particular use case: the only user that would/should ever be allowed to login with normal credentials is the "owner" of the SMS instance, everyone else has to use their personal accounts.